Perilous as a picture -- attackers sneak malware into website images
A new report from HP Wolf Security reveals that attackers are hiding malicious code in images on file hosting websites like archive.org, as well as using the same loader to install the final payload.
These techniques help attackers avoid detection, as image files appear benign when downloaded from well-known websites, bypassing network security like web proxies that rely on reputation.
Microsoft confirms strange ‘some settings are managed by your administrator’ BitLocker error
If you’ve got BitLocker enabled on your computer and you’re seeing unexpected error messages, you can take some comfort in knowing that you are not alone -- and also that Microsoft is aware of the issue.
The problem affects some systems with TPMs (Trusted Platform Module), and it results in a message being displayed that reads: “For your security, some settings are managed by your administrator”.
Sticking with Windows 10? No more Microsoft 365 for you!
It has been hard to escape reminders that Windows 10 reaches end of support later this year; Microsoft has made much of the fact that there will be no more security updates after October 14. But there are further consequences awaiting anyone who decides to keep using Windows 10.
Microsoft has revealed that when Windows 10 support ends, Microsoft 365 apps (or Office to most people) will also stop working. Users are left with two options -- switch to an Office alternative, or upgrade to Windows 11.
DJI removes geofencing from its drones in the US
If you are the owner of a DJI drone and you live in the US, you can now fly pretty much anywhere you want. DJI has announced the lifting of geofencing which blocked drones from flying over restricted and sensitive areas -- such as power stations, military buildings and the like.
The move brings US drone owners the same freedoms as those in the EU, but it could ultimately see DJI banned from the United States. But DJI is standing by its decision to lift restrictions, saying that a decade of having its geofencing system (GEO) in place has already helped to “foster responsible flight practices and prevent DJI drone operators from unintentionally flying in restricted airspace”.
Stream Super Bowl LIX free in 4K on Tubi as cable TV becomes irrelevant
Super Bowl LIX is set to break new ground this year -- not just on the field, but in how you can watch it. FOX Sports is making the big game available for free in stunning 4K on Tubi, signaling yet another move toward streaming platforms and away from traditional cable and broadcast TV. For anyone still clinging to cable for live sports, this move might make you rethink your subscription.
This isn’t just about convenience -- it’s a sign of the times. Streaming platforms like Tubi are making it easier than ever to catch major events without the need for cable. FOX’s free, unauthenticated access means you can watch Super Bowl LIX on nearly any device, from your smart TV to your smartphone, no strings attached. The days of being tied to a cable box to enjoy the biggest sports moments are rapidly fading, and this year’s Super Bowl coverage is a perfect example of that evolution.
Google and YouTube pledge $15 million to support Los Angeles wildfire relief
The wildfires devastating Los Angeles have left many communities in crisis, and Google, along with YouTube, is stepping in to help. Recognizing the importance of Los Angeles as a cultural and creative hub, the company has committed $15 million to aid in recovery efforts. This pledge is directed toward organizations providing critical relief, including the American Red Cross, the Center for Disaster Philanthropy, Emergency Network Los Angeles, and the Institute for Nonprofit News.
In addition to financial support, Google is using its technology platforms like Google Search, Google Maps, and Waze to ensure residents have access to accurate and timely updates during the emergency. This demonstrates the company’s focus on both immediate assistance and empowering affected communities with essential information.
The UK's cybersecurity landscape: Key trends and challenges for 2025
Almost every single organization, large or small, is acutely aware of the need to implement robust security measures. However, this is easier said than done. As the threat landscape continues to evolve, only heightened by tools such as AI, it can be difficult to stay ahead and ensure appropriate security measures are in place. There are a lot of security tools out there, and many organizations have tried to implement security measures and are now overwhelmed with an influx of information trying to figure out how best to manage it.
However, though it may not be the easiest task, it’s certainly one worth doing right. So, as we move into 2025, what are the main trends that organizations need to be aware of and how can they use this knowledge to stay protected?
Xbox consoles become more repairable as Microsoft pushes for sustainability
Microsoft is introducing new initiatives aimed at making its Xbox consoles easier to repair while also addressing environmental concerns. These efforts are part of the company’s broader objective to become a zero waste, carbon negative, and water positive organization by the year 2030.
Starting January 20, Xbox console owners will have access to repair services through nearly 700 uBreakiFix by Asurion locations across the U.S. This partnership expands repair options, which were previously limited to Microsoft Store locations. Gamers can now visit these third-party stores to repair Xbox Series X|S consoles, including models like the Xbox Series X – 2TB Galaxy Black Special Edition. Players should check with their local stores to ensure they participate in the program.
Satechi Vegan-Leather Magnetic Wallet Stand gets bold red color for Chinese New Year
Satechi is marking the Chinese New Year with a fresh color option for its popular Vegan-Leather Magnetic Wallet Stand. The new red version stands out with a sleek design and a gold snake icon, representing wisdom, transformation, and strength for the Year of the Snake.
This wallet stand is compatible with MagSafe technology, ensuring a secure magnetic connection to iPhones. The snap-on design offers a hassle-free way to carry essentials like cards, IDs, or cash. The wallet’s minimalist design keeps things simple, featuring a slim four-card holder that eliminates bulk while keeping everything organized.
Security and compliance are biggest barriers to cloud adoption
Cloud adoption is at the heart of digital transformation, providing organizations with the agility and flexibility they need to stay competitive in today's rapidly changing marketplace.
A new report from Fortinet looks at the latest trends, challenges, and strategies shaping cloud security, include safeguarding sensitive data, ensuring regulatory compliance, and maintaining visibility and control across increasingly complex hybrid and multi-cloud environments.
68 percent of organizations don't fix critical vulnerabilities on time
A newly-released report from Swimlane shows that a worrying 68 percent of organizations say remediating a critical vulnerability takes them more than 24 hours.
The survey of 500 cybersecurity decision-makers across the US and UK reveals that 37 percent cite the top challenge in prioritization as a lack of context or accurate information. Similarly, 35 percent report this lack of context hampers their remediation efforts.
New LLM-powered engine helps secure complex cloud environments
While moving systems to the cloud delivers many benefits, it also leads to complex dynamic environments that can be a real challenge when it comes to keeping them secure.
With the launch of a new Large Language Model (LLM)-powered cloud detection engine, Sweet Security aims to cut through the noise and allow security teams to tackle these environments with greater precision and confidence.
SIEM and its role in the enterprise SOC [Q&A]
SIEM (security information and event management) is currently one of the cybersecurity field’s most active markets. It holds the promise of making sense of the disparate data sources across enterprise environments to detect and respond to malicious activity.
Over the past year, we’ve witnessed a wave of innovation, mergers and acquisitions and consolidation in this area, largely driven by AI advancements and the push toward the AI-native security operations center (SOC). But there's also a 'data paradox' involved in balancing cost with importing and storing as much data as possible.
Microsoft increases its focus on artificial intelligence by creating a new CoreAI team
Microsoft continues to bet big on AI and the company has created a new artificial intelligence engineering division called CoreAI. The new development-focused unit is headed by Jay Parikh -- once Meta's VP and global head of engineering -- and the intention is to speed up AI infrastructure and software development at Microsoft.
CEO Satya Nadella describes 2025 as being "about model-forward applications that reshape all application categories". Nadella clearly wants to power forward in what he says is the "next innings of this AI platform shift".
Threat actors move from email to browsers
New research from the eSentire Threat Response Unit (TRU) shows a shift towards browser-based threats last year as more traditional email malware declines.
Moving onto 2025 the report predicts an increase in politically motivated cyberattacks, with adversaries disrupting the physical infrastructure of the Internet to disrupt internet access. It also expects we’ll see continued growth in ransomware attacks against all industries, abuse of certificate authority, and further increase in browser-based threats to deploy malware.
Recent Headlines
© 1998-2025 BetaNews, Inc. All Rights Reserved. Privacy Policy - Cookie Policy.