-
A Device Hidden in Cars Across the US Leaves Them Vulnerable to Hacking and Paralysis. Patch It Now
Security researchers at UC San Diego have discovered a serious vulnerability in the KARR Security System, an aftermarket car alarm fitted to more than two million vehicles across the United States. The flaw allows anyone within Bluetooth range to remotely unlock a vehicle, disable its alarm, sound the horn, flash the lights, or even cut…
-
TV tonight: Simon Pegg’s cyber-thriller The Undeclared War returns
Channel 4’s espionage drama The Undeclared War returns for a second season tonight, continuing Peter Kosminsky’s cyber-thriller starring Simon Pegg as GCHQ director of operations Danny Patrick. The series explores the fraught world of intelligence and cybersecurity, and its return is notable for expanding both its plot and its cast, deepening the personal and political…
-
In the wake of Stadium’s death, Overwatch’s Quick Play Hacked weekend makes me hope 6v6 returns permanently
An Overwatch writer argues that a limited-time “Quick Play Hacked: 1-3-2” test weekend, which temporarily restored 6v6 team play with a flexible third slot for either a second tank or extra damage hero, produced some of the best matches they’ve experienced, prompting hope that Blizzard makes the format permanent. The piece comes as Blizzard’s Stadium…
-
FBI accuse Steam user of stealing over $220,000 via malware-infected games like BlockBlasters, Lunara and Dashverse
The FBI has arrested a Florida-based student accused of stealing more than $220,000 in cryptocurrency by distributing malware disguised as free games on Steam. The affected titles – PirateFi, Dashverse, Lampy, Lunara and BlockBlasters – have all since been removed from the platform, and BlockBlasters previously made headlines after streamer RastalandTV lost $32,000 to the…
-
Hackers are exploiting recently patched WordPress bugs, putting millions of websites at risk
Hackers are actively exploiting two recently patched, critical security flaws in WordPress, the widely used blogging software that powers a large share of the world’s websites. Cybersecurity firms including Patchstack, Hexastrike and WatchTowr have warned that attackers are taking over sites still running vulnerable versions, prompting concern given how severe the bugs are and how…
-
Hot swappable mouse batteries might be the new thing as it looks like Wallhack’s first ever mouse will have one
Wallhack, a newcomer to the gaming peripherals market, appears set to release its first ever mouse featuring hot-swappable batteries, a feature not commonly seen in gaming mice to date. The design would let users replace or swap the battery without pausing to recharge, potentially addressing a common frustration for wireless mouse users who need uninterrupted…
-
RedHook Android malware can quietly hijack your phone
Cybersecurity researchers have identified an upgraded version of RedHook, an Android remote access trojan that exploits the operating system’s Wireless Debugging feature to seize deep control of infected devices. Victims are typically tricked by scam callers posing as bank or government officials, who direct them to a fake Google Play page and persuade them to…
-
Hackers stole ‘significant’ amount of data from tech firm relied on by thousands of US hospitals and pharmacies
Craneware, a UK-based healthcare billing software provider used by thousands of hospitals, clinics and pharmacies across the United States, has confirmed that hackers stole a “significant volume” of data from its systems. The company says the attackers have now been removed from its network, though its investigation is still ongoing, and it has yet to…
-
Microsoft 365 calendars become spy drop boxes in HOLLOWGRAPH campaign
Researchers at Group-IB have identified a new espionage malware component, dubbed HOLLOWGRAPH, that uses compromised Microsoft 365 calendars as a covert command-and-control channel. Rather than contacting attacker-run servers, the implant reads encrypted instructions from calendar appointments and deposits stolen files into new events for its operators to retrieve, disguising all traffic as ordinary Microsoft Graph…