US Government Considers TP-Link Router Ban Over National Security Concerns
Federal authorities may ban TP-Link routers by 2025 due to cybersecurity concerns and potential state-sponsored attack vulnerabilities. The ban could greatly impact US consumers and businesses, as TP-Link controls 65% of the domestic router market.
TP-Link Under Scrutiny: US Government Considers Router Ban Over Security Risks
Chinese networking giant TP-Link faces potential US sales ban amid national security investigations by multiple federal agencies. The company's dominant 65% market share and alleged security vulnerabilities have drawn scrutiny, particularly after Microsoft's discovery of compromised devices in a Chinese hacking network.
LastPass Security Breach Leads to $45M Cryptocurrency Heist
A series of cryptocurrency thefts linked to the 2022 LastPass security breach has resulted in over $45 million stolen from users' digital wallets. Security experts warn LastPass users who stored crypto information to immediately transfer assets as hackers continue targeting victims.
Healthcare Giant's Internal AI Chatbot Found Exposed, Raising Security Concerns
A security researcher discovered Optum's internal AI chatbot accessible online without password protection, exposing conversations about insurance claims processes. The incident adds to growing scrutiny of UnitedHealth Group's AI implementations in healthcare decision-making.
Google Removes Predatory SpyLoan Apps After Massive Data Theft Scheme
Google has removed 15 malicious loan apps from the Play Store that amassed over 8 million downloads and targeted vulnerable users across multiple continents. The sophisticated scam apps harvested sensitive personal data through deceptive validation processes and used it for aggressive extortion campaigns.
Apple's Latest iOS Updates Thwart Graykey iPhone Hacking Tool
Leaked documents reveal significant limitations of the Graykey forensic tool when attempting to access data from recent iPhone software versions. The tool's inability to fully extract data from iOS 18 devices highlights Apple's strengthening security measures, while still maintaining partial access to Android devices.
New 'Kill Floor' Malware Evades Microsoft Defender Using Legitimate Avast Driver
A sophisticated malware named 'Kill Floor' bypasses Windows security by exploiting an Avast Anti-Rootkit driver at the kernel level. The discovery highlights growing security risks and limitations of relying solely on Microsoft Defender for system protection.
Apple Warns of Active Zero-Day Attacks Targeting macOS Systems
Apple releases emergency security patches to combat a critical zero-day vulnerability actively exploited in macOS systems. The flaw allows attackers to execute arbitrary code with kernel privileges, prompting urgent recommendations for users to update their systems immediately.
Chrome's Manifest V3 Falls Short in Tackling Extension Security Risks
Google's Manifest V3 framework for Chrome extensions fails to fully address security concerns, leaving users vulnerable to data theft and malware. Experts urge vigilance when installing extensions and recommend regular security practices.
Apple's iOS 18.1 Introduces Controversial 'Inactivity Reboot' Security Feature
Apple's latest iOS update includes a new 'inactivity reboot' feature that automatically restarts iPhones after 24 hours without cellular connection, enhancing security but complicating forensic investigations. This measure adds an extra layer of protection for user data, aligning with Apple's recent efforts to bolster device security.