The federal government is warning users of home and small office routers to secure their devices as Russia state hackers continue to mass-compromise them for use in obscuring nefarious actions against sensitive organizations in the public and private sectors.

Both the Russian and Chinese governments have been compromising routers for years, sometimes in prolonged tugs-of-war to wrest control of devices the other has already commandeered. The US government has occasionally issued covert commands and taken other steps to disinfect routers. Google and other companies have also worked to disrupt the massive botnets that control compromised routers in lockstep. The actions to date are little more than whack-a-mole exercises as the operators simply replace their botnets with new ones.

Proxy networks: The go-to tool

“Russian Federal Security Service (FSB) Center 16 cyber actors continue to exploit poorly configured and vulnerable networking devices worldwide, opportunistically compromising multiple critical infrastructure sector networks,” the Cybersecurity and Infrastructure Security Agency said Monday. The hacking groups are tracked under various names, including Berserk Bear, Energetic Bear, Crouching Yeti, Dragonfly, Ghost Blizzard, and Static Tundra. The advisory was co-issued by governments from around the world, including Australia, Denmark, New Zealand, and the UK.

Read full article

Comments

© Getty Images | BernardaSv

Pas de virus sur les postes, pas de trafic suspect, aucune faille exploitée pour le vol : un groupe lié à la Chine a siphonné des courriels sensibles pendant plus d'un an grâce à une simple fonction d'administration de Google Workspace.

An alleged Russian-speaking group of cybercriminals is reportedly compromising and targeting several major companies that use Fortinet Firewalls and VPNs through previously known passwords.

Workers at the artificial intelligence company have been puzzled and increasingly concerned by the administration’s move to limit their latest A.I. models.

Un nouveau cheval de Troie bancaire, baptisé Rokarolla, se propage sur Android en se faisant passer pour Google Play Protect, l'antivirus du système. Une fois installé, il prend le contrôle du téléphone pour viser les identifiants de 217 applications bancaires et de cryptomonnaies.

The company said on Friday night that the federal government had ordered limits on its Mythos and Fable 5 A.I. systems, citing national security concerns.

The tech giant warned of a security flaw that a cybercrime gang said it's exploiting as part of a mass-hacking campaign. Google said it notified more than 100 organizations that had potentially vulnerable servers.

The ShinyHunters hacking gang claims to have compromised the Oracle PeopleSoft servers of more than 100 organizations, including many universities.

North Korean hackers posing as remote IT workers and recruiters remain a major threat to U.S., European, and Asian companies, accounting for about half of all attacks over the past 12 months.

The flaw, which Meta said it had fixed, allowed anyone to take over accounts using a bug in the company’s new artificial intelligence software.

Encryption systems rely on “random” numbers, but conventional computers can’t generate them perfectly. New research shows that quantum physics can.

Called Claude Fable 5, it is twice as expensive as the company’s previous flagship system.

Researchers at the University of Toronto showed how hackers could use artificial intelligence to create a program that could target any known flaw in the world’s computers.

Durante o último fim de semana, vários utilizadores partilharam no Reddit e na rede social X que as suas contas no Instagram tinham sido hackeadas. Andy Stone, porta-voz da plataforma, afirmou apenas que o problema foi corrigido e ainda não há certeza quanto ao número de contas afetadas.

The post Hackers exploram falha no chatbot de IA da Meta para invadir contas no Instagram appeared first on Tek Notícias.

Os investigadores da Fox-IT identificaram um novo malware do grupo Lazarus que opera quase exclusivamente na memória dos equipamentos infetados, recorrendo a técnicas avançadas de evasão para dificultar a deteção e análise.

The post Hackers do grupo Lazarus criam malware “invisível” que se esconde na memória do PC appeared first on Tek Notícias.