U.S. Citizen Sentenced for Spying on Behalf of China’s Intelligence Agency

A 59-year-old U.S. citizen who immigrated from the People’s Republic of China (PRC) has been sentenced to four years in prison for conspiring to act as a spy for the country and sharing sensitive information about his employer with China’s principal civilian intelligence agency.
Ping Li, 59, of Wesley Chapel, Florida, is said to have served as a cooperative contact for the Ministry of State

The Hacker News – ​Read More

Over Two Dozen Flaws Identified in Advantech Industrial Wi-Fi Access Points – Patch ASAP

Nearly two dozen security vulnerabilities have been disclosed in Advantech EKI industrial-grade wireless access point devices, some of which could be weaponized to bypass authentication and execute code with elevated privileges.
“These vulnerabilities pose significant risks, allowing unauthenticated remote code execution with root privileges, thereby fully compromising the confidentiality,

The Hacker News – ​Read More

11 arrested in Europol shutdown of illegal IPTV streaming networks

In the takedown announced on Wednesday, Europol said it investigated 102 suspects and arrested 11 of them on accusations they were distributing content from streaming services illegally.

The Record from Recorded Future News – ​Read More

NordPass password manager is now 56% off for Black Friday

The NordPass password manager is a great tool for preserving your privacy. Ahead of Black Friday, subscriptions are available with a massive discount for individuals and families.

Latest stories for ZDNET in Security – ​Read More

Propertyrec Leak Exposes Over Half a Million Background Check Records

Summary A critical data security lapse has left a massive trove of personal information vulnerable, raising concerns about…

Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – ​Read More

North Korean hackers have stolen billions in crypto by posing as VCs, recruiters and IT workers

Security researchers say North Korean hackers have infiltrated hundreds of organizations with the goal of taking money and stealing data to further the regime’s nuclear weapons program.

© 2024 TechCrunch. All rights reserved. For personal use only.

Security News | TechCrunch – ​Read More

The Future of Serverless Security in 2025: From Logs to Runtime Protection

Serverless environments, leveraging services such as AWS Lambda, offer incredible benefits in terms of scalability, efficiency, and reduced operational overhead. However, securing these environments is extremely challenging. The core of current serverless security practices often revolves around two key components: log monitoring and static analysis of code or system configuration. But here is

The Hacker News – ​Read More

T-Mobile Shares More Information on China-Linked Cyberattack

T-Mobile has confirmed being targeted by hackers, likely China’s Salt Typhoon, but reiterated that the attack was blocked.

The post T-Mobile Shares More Information on China-Linked Cyberattack appeared first on SecurityWeek.

SecurityWeek – ​Read More

Microsoft Patches Exploited Vulnerability in Partner Network Website

Microsoft informed customers that vulnerabilities affecting cloud, AI and other services have been patched, including an exploited flaw.

The post Microsoft Patches Exploited Vulnerability in Partner Network Website appeared first on SecurityWeek.

SecurityWeek – ​Read More

XMLRPC npm Library Turns Malicious, Steals Data, Deploys Crypto Miner

Cybersecurity researchers have discovered a software supply chain attack that has remained active for over a year on the npm package registry by starting off as an innocuous library and later adding malicious code to steal sensitive data and mine cryptocurrency on infected systems.
The package, named @0xengine/xmlrpc, was originally published on October 2, 2023 as a JavaScript-based XML-RPC

The Hacker News – ​Read More