Linux bitten by second severe vulnerability in as many weeks
Production-version patches are coming online and should be installed pronto.
Dan Goodin
–
|
89
Biz & IT // Informed technology
Chaos erupts as cyberattack disrupts learning platform Canvas amid finals
Across the country, schools and colleges postpone year-end tests.
Dan Goodin
–
|
90
Mozilla says 271 vulnerabilities found by Mythos have “almost no false positives”
The developer of Firefox says it has “completely bought in” on AI-assisted bug discovery.
Dan Goodin
–
|
138
Ars Asks: Share your shell and show us your tricked-out terminals!
A celebration of the tweaks and customizations that make life easier at the CLI.
Lee Hutchinson
–
|
256
Widely used Daemon Tools disk app backdoored in monthlong supply-chain attack
Daemon Tools users: It’s time to check your machines for stealthy infections, stat.
Dan Goodin
–
|
62
Why Reddit blocked my daily visit to its mobile website
Reddit REALLY wants you to use its app.
Nate Anderson
–
|
312
GameStop offers $56 billion for eBay, struggles to explain how it’ll pay for it
Amid falling revenue and store closures, GameStop wants to buy the much larger eBay.
Jon Brodkin
–
|
173
Ubuntu infrastructure has been down for more than a day
The outage has hampered communication concerning a critical vulnerability that gives root.
Dan Goodin
–
|
76
Most Read
The most severe Linux threat to surface in years catches the world flat-footed
CopyFail threatens multi-tenant servers, CI/CD work flows, Kubernetes containers, and more.
Dan Goodin
–
|
162
Why a recent supply-chain attack singled out security firms Checkmarx and Bitwarden
Security firms find themselves especially exposed.
Dan Goodin
–
|
20
Open source package with 1 million monthly downloads stole user credentials
If you’re one of millions using element-data, it’s time to check for compromise.
Dan Goodin
–
|
33
Why are top university websites serving porn? It comes down to shoddy housekeeping.
Hundreds of subdomains from dozens of universities have been hijacked by scammers.
Dan Goodin
–
|
67
In a first, a ransomware family is confirmed to be quantum-safe
Technically speaking, there’s no practical benefit to use PQC. So why is it being used?
Dan Goodin
–
|
19
Microsoft issues emergency update for macOS and Linux ASP.NET threat
When authentication fails, things can go very, very wrong.
Dan Goodin
–
|
25
Contrary to popular superstition, AES 128 is just fine in a post-quantum world
A stubborn misconception is hampering the already hard work of quantum readiness.
Dan Goodin
–
|
79
US-sanctioned currency exchange says $15 million heist done by “unfriendly states”
Grinex says needed hacking resources “available exclusively to… unfriendly states.”
Dan Goodin
–
|
78
Recent advances push Big Tech closer to the Q-Day danger zone
Here’s which players are winning the race to transition to post-quantum crypto.
Dan Goodin
–
|
69
“Negative” views of Broadcom driving thousands of VMware migrations, rival says
Western Union exec says there were “challenges” working with Broadcom.
Scharon Harding
–
|
97
Iran-linked hackers disrupt operations at US critical infrastructure sites
As the US and Israel’s war has ramped up, so too have hacks on US industrial sites.
Dan Goodin
–
|
90
Thousands of consumer routers hacked by Russia’s military
End-of-life routers in homes and small offices hacked in 120 countries.
Dan Goodin
–
|
101
OpenClaw gives users yet another reason to be freaked out about security
The viral AI agentic tool let attackers silently gain admin unauthenticated access.
Dan Goodin
–
|
85
New Rowhammer attacks give complete control of machines running Nvidia GPUs
GDDRHammer, GeForge and GPUBreach hammer GPU memory in ways that hijack the CPU.
Dan Goodin
–
|
48
Quantum computers need vastly fewer resources than thought to break vital encryption
No, the sky isn’t falling, but Q Day is coming, and it won’t be as expensive as thought.
Dan Goodin
–
|
39
Google bumps up Q Day deadline to 2029, far sooner than previously thought
Company warns entire industry to move off RSA and EC more quickly.
Dan Goodin
–
|
51
Self-propagating malware poisons open source software and wipes Iran-based machines
Development houses: It’s time to check your networks for infections.
Dan Goodin
–
|
51
Widely used Trivy scanner compromised in ongoing supply-chain attack
Admins: Sorry to say, but it’s likely a rotate-your-secrets kind of weekend.
Dan Goodin
–
|
30
Cloud service providers ask EU regulator to reinstate VMware partner program
Broadcom says the group is misrepresenting market “realities.”
Scharon Harding
–
|
45
Federal cyber experts called Microsoft’s cloud a “pile of shit,” approved it anyway
One Microsoft product was approved despite years of concerns about its security.
ProPublica
–
|
97
Researchers disclose vulnerabilities in IP KVMs from four manufacturers
Internet-exposed devices that give BIOS-level access? What could possibly go wrong?
Dan Goodin
–
|
28
Supply-chain attack using invisible code hits GitHub and other repositories
Unicode that’s invisible to the human eye was largely abandoned—until attackers took notice.
Dan Goodin
–
|
78
The who, what, and why of the attack that has shut down Stryker’s Windows network
Company says it doesn’t know how long it will take to restore its Microsoft environment.
Dan Goodin
–
|
79
14,000 routers are infected by malware that’s highly resistant to takedowns
Most of the devices are made by Asus and are located in the US.
Dan Goodin
–
|
38
Feds take notice of iOS vulnerabilities exploited under mysterious circumstances
The long, strange trip of a large assembly of advanced iOS exploits.
Dan Goodin
–
|
37
Amazon appears to be down, with over 20,000 reported problems
Problems viewing products and checking out.
Scharon Harding
–
|
135
Trump gets data center companies to pledge to pay for power generation
With no enforcement and questionable economics, it may not make a difference.
John Timmer
–
|
82
Downdetector, Speedtest sold to IT service-provider Accenture in $1.2B deal
Accenture plans to buy Ookla, which also includes RootMetrics and Ekahau.
Scharon Harding
–
|
116