Motherboards from Gigabyte, MSI, ASUS, ASRock at risk from new UEFI flaw attack – here’s what we know

Many popular devices are now vulnerable to direct memory access attacks, but there is a patch.

,
Amazon is reportedly being deluged with North Korean job applicants eager to break inside its walls

Amazon detections are up 27%, with Microsoft also worried about North Korean remote job applications.

,
HPE tells customers to patch OneView immediately as top-level security flaw spotted

A 10/10 RCE flaw was found in HPE OneView, but it’s not yet being abused.

,
WatchGuard Firebox OS forced to patch worrying security flaw, so update now

The firewall maker found a critical RCE that is being abused in the wild.

,
Trump’s new $900 billion Pentagon funding plan includes ‘enhanced cybersecurity protections’ for Cyber Command – here’s what we know

New defense bill includes significant provisions for cybersecurity and telecoms.

,
NHS England tech provider reveals data breach – DXS International hit by ransomware

DXS International was hit by ransomware, but we don’t know if any files were stolen.

,
Eurostar chatbot security flaws almost left customers exposed to possible security threats

Security researchers found multiple vulnerabilities on Eurostar platform, including the ability to bypass guardrails.
…

,
WhatsApp user warning – hackers are hijacking accounts without any need to crack the authentication, so be on your guard

WhatsApp GhostPairing attacks let hackers hijack accounts using device-linking, exposing messages and media while bypassing authentication completely.
…

,
Protect your holiday season with big ESET discount – 30% discounts across Essential, Premium, and Ultimate plans

I’ve rounded up ESET deals on Essentials, Premium, and Ultimate.

,
Hackers Stole Millions of PornHub Users’ Data for Extortion

Plus: Cisco discloses a zero-day with no available patch, Venezuela accuses the US of a cyberattack, and more.

, , , , ,