Technology

SantaStealer targets browsers, wallets, messaging apps, documents and desktop screens Fourteen modules extract data simultaneously through separate threads of execution Execution delays are used to reduce the immediate suspicion of users Experts have warned of a new malware strain called SantaStealer, which offers information theft via a malware-as-a-service model. Rapid7 researchers (via Bleeping Computer), the […]

Soverli enables multiple operating systems to run simultaneously on a single smartphone Mission-critical users can maintain workflow even if Android is compromised Employees can separate personal and business environments without sacrificing device functionality A Swiss cybersecurity startup, Soverli, has announced a new approach to mobile security that works with Android and iOS on commercial smartphones.

HP’s GPIB standard receives Linux support 53 years after original release Legacy lab instruments can now seamlessly integrate with modern Linux distros The interface maintains the original 8MB/s bandwidth across multiple connected devices A bus standard introduced by HP in 1972 has finally gained stable Linux driver support, more than fifty years after its initial

It’s a music record Beginning Playback of vinyl, CD, CD-R and CD-RW £299 (approx $400 / AU$605) If you’re feeling fancy this Christmas, treat your guests to a turducken, a Cajun creation in which a chicken is stuffed inside a duck, then duck is stuffed inside a turkey*. Mixx Audio seems to have created the

Attackers exploit help desk personnel to gain unauthorized access to the payroll system Social engineering lets hackers redirect employee paychecks without triggering alerts Targeting individual paychecks keeps attacks under law enforcement and corporate radar Payroll systems are increasingly targeted by cybercriminals, especially during periods when bonuses and end-of-year payouts are expected. Okta Threat Intelligence reports

React2Shell (CVE-2025-55182) exploited to compromise hundreds of systems worldwide China-affiliated groups and North Korea are exploiting bugs for persistence, espionage, and cryptomining Patch immediately to React version 19.0.1, 19.1.2 or 19.2.1. React2Shell, a critical severity vulnerability in React Server Components (RCS), was already used to compromise “several hundred machines across a variety of organizations”. This

AI cannot exist without data – so why is the US hiring more AI specialists than data engineers? Less technologically mature regions are probably the worst culprits for jumping on the hype AI workers are rewarded more than data engineers More than four out of five AI projects fail, according to RAND research — which

Cisco Confirms Zero-Day (CVE-2025-20393) in Secure Email Appliances Exploited by China-Affiliated Actors Attackers implemented Aquashell backdoor, tunneling tools, and log-clearing tools for persistence CISA added errors to KEV; agencies must remedy/cease use by December 24 A China-affiliated threat actor has exploited a zero-day vulnerability in multiple Cisco email appliances to gain access to the underlying

Squarespace launched Pay Links, letting freelancers and small businesses share secure payment URLs anywhere The feature is free across all plans, supporting containers, bookings, tips and final payments You can use the tool even if you don’t have a storefront Website building platform Squarespace has just introduced a new feature that allows freelancers, solopreneurs and

Suction mount for TVs 50″ to 100″ and up to 150lbs 5 to 10 hours of battery life depending on the TV $1,900, release date TBC Would you like to turn your existing TV into a fully wireless, battery powered one on the wall? The new Displace Hub does just that. Designed for TVs weighing