Day: June 25, 2021

Dell SecureAssist contained RCE flaw allowing miscreants to remotely reflash your BIOS with code of their creation

And it affects 129 models of PC and laptop… or about 30 million computers A chain of four vulnerabilities in Dell’s SupportAssist remote firmware update utility could let malicious people run arbitrary code in no fewer than 129 different PCs and laptops models – while impersonating Dell to remotely upload a tampered BIOS.… …read more…


Dell SupportAssist Bugs Put Over 30 Million PCs At Risk

AmiMoJo writes: Security researchers have found four major security vulnerabilities in the BIOSConnect feature of Dell SupportAssist, allowing attackers to remotely execute code within the BIOS of impacted devices. According to Dell’s website, the SupportAssist software is ‘preinstalled on most Dell devices running Windows operating system,’ while BIOSConnect provides remote firmware update and OS recovery…


Deutsche Bank stuffs Oracle systems in on-prem cloud while Google scoops lion’s share of white fluffy workloads

SAP banking platform still on the scene Deutsche Bank is to migrate all its Oracle systems onto a single instance of Big Red’s on-prem cloud.… …read more Source:: TheRegister


Google Starts Warning Users If Search Results Are Likely To Be Poor

Google has started warning users when they search for a topic that is likely to have poor results, as part of its effort to tackle “data voids” on the search engine. From a report: The new warning was spotted by Renee DiResta, an academic who studies misinformation at Stanford University. “It looks like these results…


Tax check tool CEST is the pits, say UK contractor consultancies as latest HMRC usage stats are published

IR35 status of 1 in 5 cases still undetermined by ‘fundamentally flawed’ app The UK tax collector’s controversial Check Employment Status Tool used by contractors to determine their IR35 status returned inconclusive responses for one in five of the million plus times it was called upon in 16 months.… …read more Source:: TheRegister


Scientists closing in on cosmic dawn, when the first stars were born – CNET

Astronomers are getting closer to witnessing “a holy grail in astronomy.” …read more Source:: CNet


Google Tracking Cookies Ban Delayed Until 2023

…read more Source:: PacketStorm


China Plans Its First Crewed Mission To Mars In 2033

Hmmmmmm writes: China aims to send its first crewed mission to Mars in 2033, with regular follow-up flights to follow, under a long-term plan to build a permanently inhabited base on the Red Planet and extract its resources. The ambitious plan, which will intensify a race with the United States to plant humans on Mars,…


Backbench Tory campaigner promises judicial review of data grab of English GP patients unless UK government changes tack

Trove too tempting for computer criminals while public unaware of their rights, says David Davis A judicial review will inevitability challenge the UK government’s plans to extract millions of sensitive medical records held on GP systems in England, according to a high-profile backbench Conservative MP.… …read more Source:: TheRegister


My Book Live Users Wake Up to Wiped Devices, Active RCE Attacks

“I am totally screwed,” one user wailed after finding years of data nuked. Western Digital advised yanking the NAS storage devices offline ASAP: There’s an exploit. …read more Source:: Threatpost