Ransomware gang exploits Cisco flaw in zero-day attacks since January

The Interlock ransomware gang has been exploiting a maximum severity remote code execution (RCE) vulnerability in Cisco's ...

Turing Award Goes to Inventors of Quantum Cryptography

By Cade Metz Cade Metz has reported on quantum technologies since the 1990s. In the mid-1980s, Charles Bennett and Gilles ...
InfoQ

Java 26 Delivers Language Innovation, Library Improvements, Performance and Security

Oracle has released version 26 of the Java programming language and virtual machine. As the first non-LTS release since JDK ...
IEEE

Privacy-Preserving Federated Learning with Homomorphic Encryption and Sparse Compression

Abstract: Federated learning attempts to train a machine learning algorithm on several local datasets stored on local nodes without needing direct data sample exchange to avoid data leaking. However, ...

AppsFlyer Web SDK used to spread crypto stealer JavaScript code

Malicious JavaScript code delivered by the AppsFlyer Web SDK hijacked cryptocurrency, potentially in a supply-chain attack.

Supply-chain attack using invisible code hits GitHub and other repositories

Researchers say they’ve discovered a supply-chain attack flooding repositories with malicious packages that contain invisible code, a technique that’s flummoxing traditional defenses designed to ...