All articles tagged with #backdoor
The UK government is attempting to access encrypted iCloud data by requesting Apple to create a backdoor, raising privacy concerns and marking a second such effort after previous negotiations failed. Apple opposes the move, emphasizing its commitment to user privacy and end-to-end encryption.
A suspected China-linked cyber espionage group, UNC5221, is using the sophisticated BRICKSTORM backdoor to infiltrate U.S. legal, tech, and SaaS sectors, maintaining long-term stealthy access to steal sensitive information and potentially exploit zero-day vulnerabilities, with ongoing development and active deployment across multiple systems.
Threat actors exploited a zero-day vulnerability in legacy Sitecore systems (CVE-2025-53690) involving a ViewState deserialization flaw caused by reused sample ASP.NET machine keys, leading to remote code execution and deployment of reconnaissance malware WeepSteel. The attack involved multi-stage exploits including privilege escalation and persistence techniques. Sitecore recommends immediate replacement and encryption of static machine keys to mitigate the vulnerability.
ESET researchers uncovered GhostRedirector, a China-aligned threat actor that compromised at least 65 Windows servers mainly in Brazil, Thailand, and Vietnam, using custom tools like the passive backdoor Rungan and the malicious IIS module Gamshen to facilitate SEO fraud and maintain persistent access, with activities dating back to at least August 2024.
The UK government has withdrawn its demand for Apple to create a backdoor to access encrypted user data after pressure from the Trump administration, preserving user privacy and security standards.
The UK government has dropped its plan to force Apple to weaken encryption and include a backdoor, after U.S. civil liberties advocates and government partners pushed back, ensuring American citizens' data protections are maintained.
The UK has reportedly dropped its demand for Apple to create a backdoor to iPhone encryption after pressure from the US, marking a victory for Apple and a potential easing of tensions over privacy and security. The move follows a legal challenge by Apple and US diplomatic efforts to protect encryption standards, highlighting ongoing debates over government access to encrypted data.
The UK has dropped its demand for Apple to provide backdoor access to encrypted user data, following US diplomatic efforts to protect privacy and civil liberties, and a legal challenge by Apple. This development may lead to the restoration of Apple's Advanced Data Protection service in the UK, but details remain uncertain.
U.S. spy chief Tulsi Gabbard announced that the UK has agreed to drop its mandate for Apple to create a backdoor to its encrypted data, following months of negotiations, amid concerns over security and privacy.
Nvidia's security chief has denied the existence of backdoors or kill switches in its GPUs, amid US and Chinese government pressures and proposed legislation that could mandate such security features, highlighting concerns over hardware vulnerabilities and geopolitical implications.
Cybersecurity researchers have discovered a new undetected Linux backdoor called Plague, which exploits PAM modules to silently bypass authentication, maintain persistent SSH access, and evade detection through advanced obfuscation and environment tampering, posing a significant threat to Linux systems.
China claims Nvidia's H20 chip for the Chinese market contains a backdoor, raising security concerns amid US-China tensions over chip technology and supply chains. The US has introduced legislation to track chips, while China encourages domestic AI chip development to reduce reliance on Nvidia. Industry uncertainty persists regarding the delivery and future sales of the H20 chip amidst geopolitical conflicts.
The UK government is reportedly planning to withdraw its demand for a backdoor into Apple's encryption, influenced by US pressure during trade negotiations, to avoid conflicts with US tech policies and legal treaties.
The UK government is considering dropping its controversial demand for Apple to create a backdoor to access encrypted user data, due to pressure from the US government and potential impact on international tech agreements. The issue has caused friction between the UK and US governments, with the UK now likely to back down from the demand.
A security flaw in Google Chrome (CVE-2025-2783) was exploited by the threat group TaxOff to deploy the Trinper backdoor through phishing campaigns, leading to malware infections that capture data and maintain persistent access, with the flaw patched later in March 2025.