Security

China has ordered an antitrust probe into Nvidia, accusing the company of potentially violating the anti-monopoly laws. The main focus is the $6.9 billion acquisition of Israeli networking products company Mellanox Technologies in 2020.

Google has sued the US consumer finance watchdog, Consumer Financial Protection Bureau (CSFB), for ordering federal supervision of Google Payment Corp, the company's finance services division.

Apple is facing a lawsuit in North California for its failure to find a way to implement CSAM detection in iCloud. The lawsuit, filed by a victim, alleges that Apple's abandonment of the program failed to prevent her images from being shared online.

After a torturous two-year wait, users of the Level Bolt can now upgrade their smart locks to Matter. Level is also launching a Matter-supported version of the Bolt smart lock for $229 on its website.

New findings from iVerify's Mobile Threat Hunting tool reveal Pegasus spyware infections across iOS devices at an unexpectedly higher rate, with victims including business leaders and government officials alongside traditional targets like journalists. The discovery suggests the notorious surveillance tool's reach may be far broader than previously known.

China's Ministry of Commerce has announced a ban on the export of key minerals used in microchip production to the U.S. The move follows U.S. restrictions on the trade of semiconductor technologies with China.

The California Public Utilities Commission (CPUC) now requires fingerprint verifications of Uber drivers who provide a ride to teens. Uber has 30 days to comply.

Community-developed ultralight Linux distro Alpine is back with version 3.21.0. The first release in the 3.21 stable series comes with loongarch64 CPU support, as well as multiple updated packages, including GNOME 47, GCC 14, PHP 8.4, and more. It also sports version 6.12 of the Linux kernel.

ChatGPT firm OpenAI has partnered with US-based defense startup Anduril, co-founded by Palmer Lucky, to develop an AI model that can detect aerial threats like unmanned drones.

Britain's cyber security chief has warned of increased hostile activity in cyberspace. The NCSC says there has been a three-fold increase in cyberattacks from hostile states and criminals compared to a year ago.

Feel extra cozy and secure during the holidays with this record-low Cyber Monday deal on two Wyse Cam OG cameras. These indoor and outdoor-rated security cameras can offer additional security to any part of the home.

The US Department of Defense has installed AI air defense systems made by Teleidoscope to protect the US Capitol area from intruders in the air. The system can automatically identify, track, and alert operators to all suspicious aircraft and warn with lasers.

While alarmed about the cyberattacks targeting the US, Craigslist founder Craig Newmark has recently spent no less than $300 million to keep the country safe from digital threats. Most of his efforts are directed towards protecting critical infrastructure from cyberattacks.

Businesses in the UK have lost £44 billion due to cyberattacks in the last five years. International insurance intermediary group Howden published a report that found 52% of UK businesses had suffered at least one attack in five years

Playlists have recently appeared on Spotify that lure users to fraudulent websites. The streaming provider has since removed the affected content. However, it is not yet clear how the company intends to tackle such scams in the long term.

The Nexar beam2 mini LTE has just made its debut in the US market. The company’s new dash cam is packed with features such as dual-band GPS tracking, 6 DoF motion sensors, 1080p (FHD) video recording, remote video streaming, live GPS tracking, and 4G LTE connectivity. It is now available in the US market via Nexar’s official website.

Level Home has unveiled the Level Lock+ (Matter) smart lock for smart homes. The lock utilizes the Matter standard for controlling interconnected smart devices, including alarms, lights, and more.

An 18-year-old from California, US has pleaded guilty to a nationwide swatting operation involving over 375 fake bomb and shooting threats. The FBI used digital evidence from platforms like Telegram and Discord to track him down.

The FBI and CISA have reported that hackers linked to China have stolen surveillance data from several telecom companies.

Often abbreviated to RHEL, Red Hat Enterprise Linux has just reached version number 9.5 after 24 years on the market. While continuing to provide fast, reliable, and affordable software services to enterprises, the latest update comes with improved file management capabilities, multiple package updates, and more.

Apple's next big launch will reportedly be a wall-mounted display that can control appliances, make video calls and has an AI assistant.

A new feature surreptitiously added to iOS 18.1 automatically reboots an iPhone after a set period of inactivity. This feature, dubbed "inactivity reboot," puts the iPhone in a more secure state after it has sat idle for four days, making it almost impossible to crack into, even with sophisticated tools.

CheckMag Safer brand products were meant to combine fashion with function. These attractive little gadgets could do SOS alerts and live tracking at pretty reasonable price points. Unfortunately, the project seems to have quietly disintegrated a couple of years ago.

A critical command injection vulnerability has been discovered in several D-Link NAS devices, posing a high-security risk due to lack of authentication safeguards. D-Link has declined to issue security patches for the affected models, which reached end-of-life status in 2020, instead recommending users replace their devices entirely. Experts recommend isolating these devices from public networks and implementing strict access controls.

Anthropic has unveiled improved Claude AI that can control computers directly, allowing the AI to complete complex tasks that previously required direct human input. A partnership with Palantir provides the US government with AI cloud services for the processing of classified information to help protect America.

Since the Canadian government considers the establishment of TikTok Technology Canada Inc. by ByteDance Ltd. an endeavor that poses a national security risk, the business will be disolved. However, while TikTok offices in Canada are shutting down, the mobile app and the web services can still be accessed without restrictions.

Okta, one of the most widely used providers of a single-sign-on service, or SSO, recently revealed a major security flaw that was fixed at the end of October. The vulnerability affected any account with a username 52 characters or longer. At that length, the service would simply skip the password check.

South Korea has imposed a $15 million fine on Meta for collecting user data without permission. Meta gathered information from 980,000 South Korean Facebook users without an agreement and gave it to advertisers.

NethSecurity 8.3 is now available with a focus on new features for subscriptions and an improved user experience. This updated Linux firewall solution sports a centralized unit update management interface, comprehensive real-time and historical monitoring, a new NAT helper configuration page, and more.

Meta has announced that it is making its open-source LLM (Large Language Model) Llama accessible to U.S. government agencies and contractors for national security applications. The company is partnering with Amazon, IBM, Microsoft, Oracle and others to make this happen.

qBittorrent, a popular torrent client, has left a key backdoor open for 14 years. A security measure that began getting skipped back in 2010 is now being re-implemented. There was no word to users about this fix, beyond the usual patch notes.

China has created an AI tool based on Meta's freely available Llama LLM that could have potential applications in the military. The AI tool "ChatBIT" can gather and process intelligence data to offer reliable information for strategic decisions.

Microsoft has again delayed the controversial Recall feature for Copilot+ PCs to December. The feature was supposed to roll out in June this year, but Microsoft moved the release date to November after backlash from users.

Microsoft will charge users $30 for security updates if they plan to keep using Windows 10 past its end-of-support date (Oct 10, 2025). Enterprise customers must pay $61 for one year, $122 for a second and $244 for three years.

A former Disney employee allegedly hacked Disney’s menu system, altering allergy info and disrupting operations. The tampered menus were caught before distribution, and legal actions are underway.

Anona has announced its new smart home security suite, including an Aurora security camera and the Holo WiFi smart lock. Anona’s new smart home security devices are compatible with Google Assistant and Alexa. The Aurora security camera also packs features such as AI detection, color night vision for superior imaging, Always-on video, and more. Anona’s new home security suite is now available for purchase via Amazon.

Parrot OS is back with multiple improvements and updates, as well as a new launcher. Unleashed yesterday, version 6.2 of this Debian-based distro that targets ethical hackers brings forward Rocket, a launcher for Docker containers written entirely in Python, which uses a PyQt6 GUI and can also run on Windows and macOS machines.

Wyze's latest doorbell camera tries to help deter package theft by adding a second camera that points downwards towards your packages. There are other cool features too including a removable battery that can last up to six months.

While there are multiple guides on manually bypassing the TPM, Secure Boot, or processor compatibility checks performed when installing Windows 11, Flyby11 does everything automatically. With the help of this straightforward patcher, users with outdated hardware can effortlessly transition to Windows 11 24H2.

Redtiger has introduced a new dash cam, the F77. The company's latest dash cam is equipped with dual Sony IMX678 sensors. The F77 is also packed with features such as HDR, night vision, 24/7 Time Lapse recording, fast wireless connections, and collision sensing, thanks to the Sony Starvis 2 pixel sensor included. The dash cam comes with built-in 128GB eMMC 5.1 storage.

A recent Citizen Lab study reveals potential security flaws in WeChat's custom encryption protocol, MMTLS. Despite using two-layer encryption, the system exposes metadata and lacks forward secrecy.

Released yesterday, the third point update for Firefox 131 follows last week's critical security update, which addressed a critical flaw. Now, Firefox 131.0.3 comes to fix no less than five problems, including a crash that occurred when AVG and Avast Windows users visited certain websites.

(Update: The previous news suggested an imminent risk to widely used cryptographic algorithms, including RSA and AES, from quantum attacks. However, updated information reveals that the breakthrough primarily affects specific lightweight SPN-based encryption algorithms and does not imply immediate risk to RSA or AES, as initially reported)

A recent study from the University of North Carolina reveals that Denuvo DRM cracks can reduce PC game revenues by 20 percent when broken early after release. However, after 12 weeks, the impact on sales is minimal, suggesting publishers could benefit from short-term DRM use.

AI-powered scams are now targeting Gmail users with fake Google support calls and recovery notifications. These attacks are so convincing that even tech professionals like Sam Mitrovic (from Microsoft) warn they are easy to fall for.

Game Freak confirmed a major data breach exposing over 2,000 pieces of employee data and confidential Pokémon franchise information. Leaks include game source codes, the Nintendo Switch 2 codename "Ounce," beta designs, cut content, future Pokémon plans, and more.

Yesterday, the Underground ransomware group claimed responsibility for last weekend's attack that Casio disclosed on Monday. The Japanese multinational giant returned with a statement yesterday, admitting that sensitive data was leaked on this occasion, but no customer credit card information was involved.

It looks like Microsoft's Recall push is back in full swing with Windows 24H2. A recent technical analysis revealed that disabling Recall also disables the modern File Explorer interface. Currently, it is unclear whether this is a bug or intended behaviour, but it's indicative of Microsoft's AI-encrusted future.

Under the project name I-XRAY, two Harvard students have developed smart glasses that can determine personal data such as name, address and telephone number simply by looking at a person. However, the students are not planning commercial success with this project. On the contrary: it is intended to highlight the massive data protection problems of modern technology.

Boasting AI features and a focus on privacy and security, Gnoppix comes in both a community-supported free version (Core) and a Pro flavor that includes several premium features for a moderate fee. Based on Debian and Kali Linux, Gnoppix 24.10 comes with multiple updated packages, as well as various tweaks and fixes.