September 2023

Do You Really Trust Your Web Application Supply Chain? 20/09/2023 at 14:01 By Well, you shouldn’t. It may already be hiding vulnerabilities. It’s the modular nature of modern web applications that has made them so effective. They can call on dozens of third-party web components, JS frameworks, and open-source tools to deliver all the different

React to this headline:

Fresh Wave of Malicious npm Packages Threaten Kubernetes Configs and SSH Keys 20/09/2023 at 14:01 By Cybersecurity researchers have discovered a fresh batch of malicious packages in the npm package registry that are designed to exfiltrate Kubernetes configurations and SSH keys from compromised machines to a remote server. Sonatype said it has discovered 14 different

React to this headline:

Sophisticated Phishing Campaign Targeting Chinese Users with ValleyRAT and Gh0st RAT 20/09/2023 at 14:01 By Chinese-language speakers have been increasingly targeted as part of multiple email phishing campaigns that aim to distribute various malware families such as Sainbox RAT, Purple Fox, and a new trojan called ValleyRAT. “Campaigns include Chinese-language lures and malware typically associated

React to this headline:

Chan Zuckerberg org to spin up 1,000+ H100 GPU cluster for AI medical research 20/09/2023 at 13:48 By Katyanna Quach Plus: DeepMind trained model to predict genetically mutated DNA strings The Chan Zuckerberg Initiative, founded by Meta boss Mark Zuckerberg and his wife Priscilla Chan, is to build one of the world’s largest GPU clusters,

React to this headline:

Signal Messenger Introduces PQXDH Quantum-Resistant Encryption 20/09/2023 at 13:02 By Encrypted messaging app Signal has announced an update to the Signal Protocol to add support for quantum resistance by upgrading the Extended Triple Diffie-Hellman (X3DH) specification to Post-Quantum Extended Diffie-Hellman (PQXDH). “With this upgrade, we are adding a layer of protection against the threat of

React to this headline:

As TikTok surveils staff’s office hours, research indicates WFH is good for planet 20/09/2023 at 12:33 By Paul Kunert Not leaving home for work cuts an individual’s carbon footprint by 54%, says research As TikTok becomes the latest tech biz to demand employees return to the office, deploying an app to monitor this, research indicates

React to this headline:

Scientists suggest possible solution to space-induced bone loss 20/09/2023 at 11:36 By Brandon Vigliarolo Douglas Adams was right! Mice may hold key to exploring the universe One of the foremost health risks for astronauts may have a cure en route. A specially-formulated medication has been shown to prevent bone loss in mice, and perhaps humans,

React to this headline:

GitLab Releases Urgent Security Patches for Critical Vulnerability 20/09/2023 at 11:16 By GitLab has shipped security patches to resolve a critical flaw that allows an attacker to run pipelines as another user. The issue, tracked as CVE-2023-5009 (CVSS score: 9.6), impacts all versions of GitLab Enterprise Edition (EE) starting from 13.12 and prior to 16.2.7 as well

React to this headline: