Security researchers have discovered an arbitrary account takeover flaw in Subaru’s Starlink service that could let attackers track, control, and hijack vehicles in the United States, Canada, and Japan using just a license plate. […]

A North Korean threat group has been using a technique called RID hijacking that tricks Windows into treating a low-privileged account as one with administrator permissions. […]

A threat actor targeted low-skilled hackers, known as “script kiddies,” with a fake malware builder that secretly infected them with a backdoor to steal data and take over computers. […]

A vulnerability in Subaru’s Starlink connected vehicle service exposed US, Canada, and Japan vehicle and customer accounts. The post Subaru Starlink Vulnerability Exposed Cars to Remote Hacking appeared first on SecurityWeek.

North Korean fake IT workers are more aggressively extorting their employers in response to law enforcement actions. The post North Korean Fake IT Workers More Aggressively Extorting Enterprises appeared first on SecurityWeek.

Noteworthy stories that might have slipped under the radar: Korean VPN supply chain attack, PayPal settles with New York for $2 million, trojanized RAT builder targets script kiddies.   The post In Other News: VPN Supply Chain Attack, PayPal $2M Settlement, RAT Builder Hacks Script Kiddies appeared first on SecurityWeek.

The US has announced charges against five individuals involved in a fake IT workers scheme to funnel funds to North Korea. The post US Charges Five People Over North Korean IT Worker Scheme appeared first on SecurityWeek.

This morning, I came across some interesting news about Google’s updated site reputation abuse policies. Apparently, they’ve revised their main guidelines with some fresh updates.

While the web buzzes with anxiety about AI taking our jobs or achieving consciousness, real artificial intelligence systems have already been making life-altering decisions about healthcare, housing, and basic human rights – often with devastating consequences.In this article I’m going to examine three real-life cases where AI systems destroyed thousandsRead More »The Real AI Threat Isn’t Coming – It’s Already Here: 3 Cases of Algorithms Destroying Lives

Google has made a significant change: you now need to enable JavaScript to use Google Search. According to them, this move is about security and improving the experience for users like you and me. By requiring JavaScript, Google says it can better protect its platform against spam, bots, and otherRead More »Google Now Requires JavaScript Because “Security”…They’re Not Telling the Entire Truth