31 Jan New Sh1mmer ChromeBook exploit unenrolls managed devices A new exploit called ‘Sh1mmer’ allows users to unenroll an enterprise-managed Chromebook, enabling them to install any apps they wish and bypass device restrictions. […]
31 Jan Over 29,000 QNAP devices unpatched against new critical flaw Tens of thousands of QNAP network-attached storage (NAS) devices exposed online are waiting to be patched against a critical security flaw addressed by the Taiwanese company on Monday. […]
31 Jan Microsoft stops selling Windows 10 licenses a day early Marking an end to an era, Microsoft is no longer directly selling Windows 10 product keys on their website, instead redirecting users to Windows 11 product pages. […]
31 Jan OpenAI releases tool to detect AI-written text OpenAI has released an AI text classifier that attempts to detect whether input content was generated using artificial intelligence tools like ChatGPT. […]
31 Jan Microsoft releases emergency updates to fix XPS display issues Microsoft has released out-of-band (OOB) updates for some .NET Framework and .NET versions to address XPS display issues triggered by December 2022 cumulative security updates. […]
30 Jan Porsche halts NFT launch, phishing sites fill the void Porsche cut its minting of a new NFT collection short after a dismal turnout and backlash from the crypto community, allowing threat actors to fill the void by creating phishing sites that steal digital assets from cryptocurrency wallets. […]
30 Jan KeePass disputes vulnerability allowing stealthy password theft The development team behind the open-source password management software KeePass is disputing what is described as a newly found vulnerability that allows attackers to stealthily export the entire database in plain text. […]
30 Jan Cybercrime job ads on the dark web pay up to $20k per month Cybercrime groups are increasingly running their operations as a business, promoting jobs on the dark web that offer developers and hackers competitive monthly salaries, paid time off, and paid sick leaves. […]
30 Jan GitHub revokes code signing certificates stolen in repo hack GitHub says that unknown attackers have stolen encrypted code-signing certificates for its Desktop and Atom applications after gaining access to some of its development and release planning repositories. […]
30 Jan QNAP fixes critical bug letting hackers inject malicious code QNAP is warning customers to install QTS and QuTS firmware updates that fix a critical security vulnerability allowing remote attackers to inject malicious code on QNAP NAS devices. […]