The following are just a few of the pictures I took today at a “No Kings” protest held in Nassau County, New York. It was a peaceful protest. There was a larger-than-expected turnout, with minimal and respectful police presence. As I anticipated in my post explaining why I was going, there were a lot of…
IranWire reports: Iran’s subsidized bread distribution system remains crippled two weeks after cyberattacks targeted major banks, leaving bakers unable to access payments and forcing authorities to reimpose restrictions on bread sales. The disruption affects the nationwide Nanino electronic payment system, which is connected to Sepah Bank – the institution responsible for processing all wheat-related transactions…
Brian Krebs reports: A message posted on Monday to the homepage of the U.S. Cybersecurity & Infrastructure Security Agency (CISA) is the latest exhibit in the Trump administration’s continued disregard for basic cybersecurity protections. The message instructed recently-fired CISA employees to get in touch so they can be rehired and then immediately placed on leave, asking employees…
Google has shipped patches to address 47 security flaws in its Android operating system, including one it said has come under active exploitation in the wild. The vulnerability in question is CVE-2024-53104 (CVSS score: 7.8), which has been described as a case of privilege escalation in a kernel component known as the USB Video Class…
Alexander Martin reports: Finnish prosecutors have charged a second individual — U.S. national Daniel Lee Newhard — with attempted extortion of the Vastaamo psychotherapy center. The Finnish Prosecution Service announced on Monday it had charged Newhard with aiding and abetting attempted aggravated extortion. It said the suspect, a 28-year-old, denies the offense. Officials did not……
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild. The list of vulnerabilities is as follows – CVE-2024-45195 (CVSS score: 7.5/9.8) – A forced browsing vulnerability in Apache OFBiz that allows a remote attacker to…
Enterprise data backup platform Commvault has revealed that an unknown nation-state threat actor breached its Microsoft Azure environment by exploiting CVE-2025-3928 but emphasized there is no evidence of unauthorized data access. “This activity has affected a small number of customers we have in common with Microsoft, and we are working with those customers to provide…
