Duncan Riley
Latest from Duncan Riley
Toyota warns of possible data theft after access key left exposed on GitHub
Toyota Motor Co. has warned that nearly 300,000 customers may have had their data stolen in the third data breach related to the company this year. The potential data breach was uncovered after it was found that an access key to Toyota T-Connect, the official Toyota connectivity app, was left publicly available on GitHub for ...
SEC reportedly investigating Bored Ape NFT creator for securities law breaches
The U.S. Securities and Exchange Commission is reportedly investigating Yuga Labs Inc., the creator of leading nonfungible tokens such as the Bored Ape Yacht Club, over whether the company’s sale of digital assets violates securities laws. Bloomberg, referencing a person familiar with the matter, claims that the SEC is examining whether certain NFTs from Yuga Labs are ...
Skybox Security launches new Security Posture Management Platform
Cybersecurity management platform startup Skybox Security Inc. today announced a new release of its Security Posture Management Platform which offers to propel its customers to the next era of proactive cybersecurity. The release, which is claimed to include the industry’s first software-as-a-service solution for security policy and vulnerability management, includes major innovations. The company says they advance the ...
Samsara’s new Proactive Driver Coaching builds safe habits on the road
“Internet of things” cloud platform provider Samsara Inc. today launched a new solution designed to address driver training and build safe habits while on the road. Samsara’s new Proactive Driver Coaching is an evolution of the company’s existing in-cab coaching capability. The service combines artificial intelligence and coaching technology to take a preventive approach to ...
Russian ‘Killnet’ hacking group targets airports in DDoS attack
Fresh from targeting state websites, Russian government-linked hacking group Killnet has gone after U.S. airport websites, knocking several offline in a new distributed denial-of-service attack. Airports targeted by Killnet that have experienced outages or difficulties include Chicago’s O’Hare and Midway International Airports, which share the same website, as well as Hartsfield-Jackson Atlanta International Airport, Los ...
Fortinet issues emergency patches for FortiOS, FortiProxy and FortiSwitchManager
Fortinet Inc. today issued emergency patches for a number of its products after a severe vulnerability was discovered and exposed last week. The vulnerability, designated CVE-2022-40684, is described by Fortinet as an authentication bypass. The bypass uses an alternate path or channel vulnerability in FortiOS, FortiProxy and FortiSwitchManager that may allow an unauthenticated attacker to ...
Good intentions gone awry: iPhones are calling 911 when users are on rollercoasters
So much for good intentions: A new feature in Apple Inc.’s iPhone 14 calls 911 when users are on rollercoaster rides. Apple debuted a feature called Crash Detection in iPhone 14 models in September, a feature that uses a dual-core accelerometer and a high dynamic-range gyroscope to detect a severe car crash and automatically call emergency ...
‘LofyGang’ hacking group targets Discord, Disney+ and Minecraft accounts
Security researchers at application security testing firm Checkmarx Ltd. have detailed a range of attacks from a previously little-known attack group called “LofyGang” that target online accounts. LofyGang has been found to be linked to more than 200 malicious packages, with thousands of installations throughout 2022. The group, believed to have been operating for more than a ...
Russian hackers take down state websites in politically motivated attack
Hackers with ties to the Russian government have claimed credit for taking down websites in three U.S. states for politically motivated purposes. Killnet, which first emerged in January, claims to have taken down sites belonging to the states of Colorado, Kentucky and Mississippi. The web portals for all three were functioning again as of the ...
French open-source cybersecurity startup CrowdSec raises $13.7M
French open-source cybersecurity platform startup CrowdSec announced today it has raised €14 million ($13.7 million) in new funding to expand its operations in the U.S. and increase its user network tenfold. Supernova Invest led the Series A round, with Breega also participating. Including the new funding, the company has raised €19.5 million ($19.1 million) to date, according to Crunchbase. Founded ...









