Catalin Cimpanu 
Google’s experiment to hide parts of a site’s URL in the Chrome address bar (the Omnibox) has failed and has been removed from the browser earlier this week. The experiment ran from June 2020 to June 2021. It consisted of a series of … Read more
A team of Google security researchers said they discovered a new way to perform Rowhammer attacks against computer memory (RAM) cards that broaden the attack’s initial impact. First detailed in 2014, Rowhammer was a ground-breaking attack that exploited the design … Read more
Thousands of Google Chrome extensions available on the official Chrome Web Store are tampering with security headers on popular websites, putting users at risk of a wide range of web-based attacks. While they are a little-known technical detail, security headers are an … Read more
Microsoft has open-sourced today a tool that can be used to build lab environments where security teams can simulate attacks and verify the detection effectiveness of Microsoft security products. Named SimuLand, the tool was specifically built to help security/IT teams … Read more
Download PDF
Cybersecurity firm Kaspersky said today it discovered new malware that appears to have been developed by the US Central Intelligence Agency. Kaspersky said it discovered the malware in “a collection of malware samples” that its analysts and other security firms … Read more
A ransomware gang is threatening to leak sensitive police files that may expose police investigations and informants unless the Metropolitan Police Department of the District of Columbia agrees to pay a ransom demand. “We are aware of unauthorized access on … Read more
The Dutch Data Protection Authority has fined hotel booking website Booking.com €475,000 ($560,000) for reporting a security incident 22 days after it happened, in breach of EU GDPR regulations that dictate that all breaches must be disclosed within 72 hours. … Read more
Code-hosting service GitHub is actively investigating a series of attacks against its cloud infrastructure that allowed cybercriminals to implant and abuse the company’s servers for illicit crypto-mining operations, a spokesperson told The Record today. The attacks have been going on since the … Read more
Academic research published last week looked at the telemetry traffic sent by modern iOS and Android devices back to Apple and Google servers and found that Google collects around 20 times more telemetry data from Android devices than Apple from … Read more