Biz & IT

Hackers are exploiting a critical zeroday in firewalls from SonicWall

Enlarge Getty Images Network security provider SonicWall said on Monday that hackers are exploiting a critical zeroday vulnerability in one of the firewalls it sells. The security flaw resides in the Secure Mobile Access 100 series, SonicWall said in an advisory updated on Monday. The vulnerability, which affects SMA 100 firmware versions 10.x, isn’t slated …

Hackers are exploiting a critical zeroday in firewalls from SonicWall Read More »

Cable ISP warns “excessive” uploaders, says network can’t handle heavy usage

Enlarge Getty Images | Bosca78 Mediacom, a cable company with about 1.4 million Internet customers across 22 states, is telling heavy uploaders to reduce their data usage—even when those users are well below their monthly data caps. Mediacom’s fastest Internet plan offers gigabit download speeds and 50Mbps upload speeds with a monthly data cap of …

Cable ISP warns “excessive” uploaders, says network can’t handle heavy usage Read More »

AT&T may keep majority ownership of DirecTV as it closes in on final deal

Enlarge / A DirecTV satellite dish seen outside a bar in Portland, Oregon, in October 2019. Getty Images | hapabapa AT&T is reportedly closing in on a deal to sell a stake in DirecTV to TPG, a private-equity firm. Unfortunately for customers hoping that AT&T will relinquish control of DirecTV, a Reuters report on Friday …

AT&T may keep majority ownership of DirecTV as it closes in on final deal Read More »

DDoSers are abusing Microsoft RDP to make attacks more powerful

Enlarge / Hacker attacking server or database. Network security, Database secure and personal data protection Getty Images DDoS-for-hire services are abusing the Microsoft Remote Desktop Protocol to increase the firepower of distributed denial-of-service attacks that paralyze websites and other online services, a security firm said this week. Typically abbreviated as RDP, Remote Desktop Protocol is …

DDoSers are abusing Microsoft RDP to make attacks more powerful Read More »

This site posted every face from Parler’s Capitol Hill insurrection videos

Enlarge Getty Images | Wired When hackers exploited a bug in Parler to download all of the right-wing social media platform’s contents last week, they were surprised to find that many of the pictures and videos contained geolocation metadata revealing exactly how many of the site’s users had taken part in the invasion of the …

This site posted every face from Parler’s Capitol Hill insurrection videos Read More »

Chrome and Edge want to help with that password problem of yours

Enlarge / Please don’t do this. Getty Images If you’re like lots of people, someone has probably nagged you to use a password manager and you still haven’t heeded the advice. Now, Chrome and Edge are coming to the rescue with beefed-up password management built directly into the browsers. Microsoft on Thursday announced a new …

Chrome and Edge want to help with that password problem of yours Read More »

Ars online IT roundtable today: What’s the future of the data center?

Enlarge If you’re in IT, you probably remember the first time you walked into a real data center—not just a server closet, but an actual raised-floor data center, where the door wooshes open in a blast of cold air and noise and you’re confronted with rows and rows of racks, monolithic and gray, stuffed full …

Ars online IT roundtable today: What’s the future of the data center? Read More »

Hackers alter stolen regulatory data to sow mistrust in COVID-19 vaccine

Enlarge Getty Images Last month, the makers of one of the most promising coronavirus vaccines reported that hackers stole confidential documents they had submitted to a European Union regulatory body. On Friday, word emerged that the hackers have falsified some of the submissions’ contents and published them on the Internet. Studies of the BNT162b2 vaccine …

Hackers alter stolen regulatory data to sow mistrust in COVID-19 vaccine Read More »

The NSA warns enterprises to beware of third-party DNS resolvers

Enlarge Getty Images DNS over HTTPS is a new protocol that protects domain-lookup traffic from eavesdropping and manipulation by malicious parties. Rather than an end-user device communicating with a DNS server over a plaintext channel—as DNS has done for more than three decades—DoH, as DNS over HTTPS is known, encrypts requests and responses using the …

The NSA warns enterprises to beware of third-party DNS resolvers Read More »

Hackers used 4 zero-days to infect Windows and Android devices

Enlarge Getty Images Google researchers have detailed a sophisticated hacking operation that exploited vulnerabilities in Chrome and Windows to install malware on Android and Windows devices. Some of the exploits were zero-days, meaning they targeted vulnerabilities that at the time were unknown to Google, Microsoft, and most outside researchers (both companies have since patched the …

Hackers used 4 zero-days to infect Windows and Android devices Read More »