Apple fixes two new iOS zero-days in emergency updates.

Apple released emergency security updates to fix two zero-day vulnerabilities exploited in attacks and impacting iPhone, iPad, and Mac devices, reaching 20 zero-days patched since the start of the year. “Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1,” the company said in an advisory. TheContinue reading “Apple fixes two new iOS zero-days in emergency updates.”

Phishers add QR codes to the menu.

Please don’t make us say QRishing. Taking a page from restaurants of the early-Covid era, hackers are trying out QR codes, frustrating IT pros by sneaking poisoned pixel squares past filters and into inboxes. A report from the cybersecurity company Reliaquest discovered a 51% increase in QR-code attacks in September, compared to the cumulative number from JanuaryContinue reading “Phishers add QR codes to the menu.”

Even Google CEO Sundar Pichai doesn’t understand Google’s privacy controls.

Pichai told Congress users could “clearly see” what data Google is collecting. No one in the world seems to know how Google’s privacy controls work, and the company probably likes it that way. The latest example is from Rodriguez v. Google, an ongoing 2021 class-action lawsuit over Google’s infamous “Web & App Activity” privacy check box. TheContinue reading “Even Google CEO Sundar Pichai doesn’t understand Google’s privacy controls.”

Kansas courts revert to in-person filing after cyber security incident.

Authorities have “more questions than answers at this point” over the extent of the attack and what information was exposed. The law has logged off, at least in one state. Online access to Kansas courts will be shut down for at least two weeks in the wake of a cyber attack. Courts across the stateContinue reading “Kansas courts revert to in-person filing after cyber security incident.”