2023

Seiko watches 60K personal data records tick away in BlackCat ransomware heist 25/10/2023 at 16:47 By Connor Jones Investigations ongoing as full extent of July breach is questioned Seiko Group, the Japanese company known best for its timekeeping business, has published a fresh update on its July ransomware attack, revealing that the group behind it

Nation State Hackers Exploiting Zero-Day in Roundcube Webmail Software 25/10/2023 at 16:47 By The threat actor known as Winter Vivern has been observed exploiting a zero-day flaw in Roundcube webmail software on October 11, 2023, to harvest email messages from victims’ accounts. “Winter Vivern has stepped up its operations by using a zero-day vulnerability in Roundcube,” ESET

Critical OAuth Flaws Uncovered in Grammarly, Vidio, and Bukalapak Platforms 25/10/2023 at 16:47 By Critical security flaws have been disclosed in the Open Authorization (OAuth) implementation of popular online services such as Grammarly, Vidio, and Bukalapak, building upon previous shortcomings uncovered in Booking[.]com and Expo. The weaknesses, now addressed by the respective companies following responsible disclosure

CEO Satya Nadella thinks Microsoft hung up on Windows Phone too soon 25/10/2023 at 16:02 By Richard Speed ‘There could have been ways we could have made it work’ Microsoft CEO Satya Nadella regrets the abrupt termination of the Windows Phone project.… This article is an excerpt from The Register View Original Source

5 ways HR leaders can help organizations mitigate insider risk 25/10/2023 at 16:01 By From an HR perspective, people are the engine that fuels innovation in the modern enterprise. However, for security teams, humans are often regarded as the “weakest link” in the security chain. This article is an excerpt from Subscribe to Security Magazine’s

HPE starts Hybrid Cloud push, will herd users into GreenLake subs service 25/10/2023 at 15:32 By Dan Robinson Unit aims to ‘take share in storage, scale private cloud, and expand into infrastructure software’ HPE’s Hybrid Cloud unit starts operations next month, yet it is unclear if the hardware giant can persuade more customers that its

Leaders chat security in times of permacrisis at SECURITY 500 Conference 25/10/2023 at 15:16 By In a panel discussion, security leaders will share how teams have responded to risks associated with simultaneous and prolonged geopolitical tensions and global crises. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

AWS says it wants in on the European sovereign cloud game 25/10/2023 at 15:03 By Dan Robinson Appealing to growing crowd that wants data outside US jurisdiction Amazon is planning to launch a dedicated sovereign cloud for customers in Europe with stringent data residency requirements, and claims this will be physically and logically separate from

The Rise of S3 Ransomware: How to Identify and Combat It 25/10/2023 at 15:02 By In today’s digital landscape, around 60% of corporate data now resides in the cloud, with Amazon S3 standing as the backbone of data storage for many major corporations.  Despite S3 being a secure service from a reputable provider, its pivotal role in

Act Now: VMware Releases Patch for Critical vCenter Server RCE Vulnerability 25/10/2023 at 14:16 By VMware has released security updates to address a critical flaw in the vCenter Server that could result in remote code execution on affected systems. The issue, tracked as CVE-2023-34048 (CVSS score: 9.8), has been described as an out-of-bounds write vulnerability in the