Elizabeth Montalbano

4 days ago | darkreading.com | Elizabeth Montalbano

Attackers are exploiting a popular code package for the Ruby programming language in a supply chain attack aimed at stealing sensitive data from Telegram chats. The attack demonstrates how threat actors can hijack API communications assumed to be secure for malicious intent. The Socket Security Threat Research Team has uncovered two malicious RubyGems, or Ruby packages, posing as popular plug-ins for Fastlane, a popular open source rapid development platform for mobile applications.

4 days ago | darkreading.com | Elizabeth Montalbano

The Google Chrome browser will no longer trust by default digitial certificates from Chunghwa Telecom and Netlock in an effort to "safeguard Chrome's users" over what the company said is a loss of integrity in the certificate authorities (CAs). The changes will take effect with the release of the next major build of the browser, Chrome 139, according to a recent Google Security Blog post. The action will be taken by The Chrome Root Store starting Aug.

5 days ago | darkreading.com | Elizabeth Montalbano

Personalised advertising and content, advertising and content measurement, audience research and services developmentStore and/or access information on a deviceYou can choose how your personal data is used.

6 days ago | darkreading.com | Elizabeth Montalbano

Two critical, unpatched security flaws in technology widely used in operational technology (OT) and industrial control systems (ICS) that monitor fire safety could allow attackers to easily take over the technology and render it nonfunctioning, creating a physical security risk.

1 week ago | darkreading.com | Elizabeth Montalbano

Regional telecommunications provider Cellcom has almost fully restored calling and text-messaging services for some customers in Wisconsin and Michigan after a cyberattack forced the company to take its network offline, leaving people with devices in SOS mode for several days. Cellcom, a regional wireless service company with roots going back to the early 20th century, had to take down its network after detecting "unusual activity" on May 14.