BRIEFING
The New Abnormal co-host Danielle Moodie took aim at “white men that are in charge” who “will now use every excuse in the book to blame everyone but their own incompetency.”
OPINION
By Christopher Bucktin United States Editor
17:51, 30 Jan 2025
Updated18:00, 30 Jan 2025
In the aftermath of a catastrophic midair collision that claimed 67 lives at Ronald Reagan Washington National Airport, Donald Trump did what he does best - made it about himself.
Instead of showing the utmost respect to those families whose loved ones prematurely lost their lives at what could be human error, the US president instead looked to political points. During his briefing, Trump irresponsibly suggested that the crash was somehow linked to policies enacted by the Obama and Biden administrations. . .
Yet, before the victims’ families could even process their grief, Trump was standing behind a podium, using their tragedy as a political weapon. His comments were not just misleading - they were steeped in the same thickly veiled attacks on diversity that have defined his career.
He made it clear that, in his view, hiring efforts focused on inclusion inherently mean a decline in competence. He even cited articles that referenced FAA hiring initiatives for people with disabilities and dwarfism treating them as proof of systemic failure.
DeepSeek, the Chinese AI startup known for its DeepSeek-R1 LLM model, has publicly exposed two databases containing sensitive user and operational information.
Wiz Research discovered this exposure during a security assessment of DeepSeek's external infrastructure.
The security firm found two publicly accessible database instances at oauth2callback.deepseek.com:9000 and dev.deepseek.com:9000 that allowed arbitrary SQL queries via a web interface without requiring authentication.
The databases contained a 'log_stream' table that stored sensitive internal logs dating from January 6, 2025, containing:
"This level of access posed a critical risk to DeepSeek's own security and for its end-users," comments Wiz.
Wiz says it could execute more intrusive queries but limited its exploration to enumeration to keep its research within certain ethical constraints.
In any case, Wiz informed DeepSeek of the matter, and the company promptly addressed the exposure, so the databases are no longer public.
=====
KuCoin's operator, PEKEN Global Limited, pleaded guilty to operating an unlicensed money-transmitting business and agreed to pay $297 million in penalties to settle charges in the U.S.
0
The US Cybersecurity and Infrastructure Security Agency (CISA) is warning that Contec CMS8000 devices, a widely used healthcare patient monitoring device, include a backdoor that quietly sends patient data to a remote IP address and downloads and executes files on the device.
0
Google blocked 2.3 million Android app submissions to the Play Store in 2024 due to violations of its policies that made them potentially risky for users.
0
Babbel was developed by a team of over 100 expert linguists to help you quickly learn to speak a new language. The app has lessons for 14 different languages, and you'll have time to study as much as you want with a lifetime subscription. It's only $129.99 (reg. $599) to get Babbel for life, but that won't last long.
0
The New York Blood Center (NYBC), one of the world's largest independent blood collection and distribution organizations, says a Sunday ransomware attack forced it to reschedule some appointments.
0
Remote work is now an essential part of many businesses, requiring organizations to rethink how they provide secure and efficient access to corporate resources. Learn from TruGrid about the advantages of cloud-based RDP versus RDP over VPN, especially in the context of security, performance, and cost-effectiveness.
0
GitHub is mitigating an ongoing incident causing problems with multiple services, including performing pull requests, creating or viewing issues, and even viewing repositories and commits.
0
A new attack called 'Browser Syncjacking' demonstrates the possibility of using a seemingly benign Chrome extension to take over a victim's device through the browser.
3
Microsoft has removed a safeguard hold that prevented devices with Auto HDR enabled from installing the Windows 11 2024 Update due to gaming issues.
0
Europol and German law enforcement confirmed the arrest of two suspects and the seizure of 17 servers in Operation Talent, which took down Cracked and Nulled, two of the largest hacking forums with over 10 million users.
0
Whether you're a solo entrepreneur, small business owner, or content creator, the AI Magicx platform helps streamline tasks that used to take hours. And with the Rune Plan Lifetime Subscription now available for just $69.99 (reg. $99.99) using the code TAKE30 at checkout, there's no better time to get started.
0
A ChatGPT jailbreak flaw, dubbed "Time Bandit," allows you to bypass OpenAI's safety guidelines when asking for detailed instructions on sensitive topics, including the creation of weapons, information on nuclear topics, and malware creation.
4
A new variant of the Mirai-based botnet malware Aquabot has been observed actively exploiting CVE-2024-41710, a command injection vulnerability in Mitel SIP phones.
0
DogWifTools has disclosed on its official Discord channel that its software has been compromised by a supply chain attack that impacted its Windows client, infecting users with malware.
0
Three vulnerabilities discovered in the open-source PHP package Voyager for managing Laravel applications could be used for remote code execution attacks.
0
Kraken was one of the many crypto firms targeted by the Securities and Exchange Commission under former Chair Gary Gensler’s leadership.
In February 2023, the SEC launched a probe into Kraken for allegedly violating US securities laws by failing to register its staking service with the government agency.
The SEC argued that Kraken failed to provide proper risk disclosure to staking clients, who relinquish control of their staked tokens to validators to earn rewards.
Former SEC Director of Enforcement Gurbir S. Grewal also accused the exchange of advertising “outsized returns untethered to any economic realities” to clients.
The SEC lawsuit accused Kraken of co-mingling customer funds and fulfilling the role of exchange, broker, dealer and clearing agency without obtaining the proper licensing from government regulators.
Kraken fired back and argued that the SEC did not have the authority to regulate the cryptocurrency markets, as it was not given that authority by the US Congress.
An order from Judge Orrick threw out Kraken’s major questions doctrine defense. Source: Court Listener
On Jan. 24, Judge William Orrick issued an order throwing out Kraken's defense that the SEC lacked the authority to regulate digital assets.
However, the judge also told Kraken’s legal team that they could raise the issue again at a later stage in the lawsuit.
Magazine: Godzilla vs. Kong: SEC faces fierce battle against crypto’s legal firepower
:max_bytes(150000):strip_icc()/GettyImages-2188532306-266234926e084092863d16aa69a29454.jpg)
Staking is a process by which crypto investors can pledge and lock their tokens to a pool which is then used toward validating transactions. Successful validators receive rewards for verifying information on the blockchain, and those rewards are shared with investors who staked their assets.
Kraken Pro users in 37 states and two territories will be able to stake 17 digital assets including Ethereum (ETHUSD), Solana (SOLUSD), Polkadot (DOTUSD), and Cardano (ADAUSD).
Read the original article on Investopedia
BEA News: Gross Domestic Product by State and Personal Income by S...
