2023

Critical GitHub Vulnerability Exposes 4,000+ Repositories to Repojacking Attack 12/09/2023 at 15:01 By A new vulnerability disclosed in GitHub could have exposed thousands of repositories at risk of repojacking attacks, new findings show. The flaw “could allow an attacker to exploit a race condition within GitHub’s repository creation and username renaming operations,” Checkmarx security researcher […]

Friends don’t let friends use AI to chat 12/09/2023 at 14:18 By Katyanna Quach Science shocker: Real BFFs understand authenticity and sincerity can’t be machine-generated People feel less confident in their friendships if they discover that their buddies have been sending them messages written with the help of AI.… This article is an excerpt from

The future of the cloud sure looks like it’ll be paved in even more custom silicon 12/09/2023 at 13:47 By Tobias Mann You’re probably using cloud providers bespoke chips already and not even know it As cloud datacenters grow ever larger and complex, providers are increasingly developing their own chips to eke out performance, efficiency,

7 Steps to Kickstart Your SaaS Security Program 12/09/2023 at 13:46 By SaaS applications are the backbone of modern businesses, constituting a staggering 70% of total software usage. Applications like Box, Google Workplace, and Microsoft 365 are integral to daily operations. This widespread adoption has transformed them into potential breeding grounds for cyber threats. Each

Chinese Redfly Group Compromised a Nation’s Critical Grid in 6-Month ShadowPad Campaign 12/09/2023 at 13:46 By A threat actor called Redfly has been linked to a compromise of a national grid located in an unnamed Asian country for as long as six months earlier this year using a known malware referred to as ShadowPad. “The attackers managed to

Sophisticated Phishing Campaign Deploying Agent Tesla, OriginBotnet, and RedLine Clipper 12/09/2023 at 13:46 By A sophisticated phishing campaign is using a Microsoft Word document lure to distribute a trifecta of threats, namely Agent Tesla, OriginBotnet, and OriginBotnet, to gather a wide range of information from compromised Windows machines. “A phishing email delivers the Word document

Microsoft’s Surface Duo phone hangs up, drops out of support 12/09/2023 at 12:47 By Richard Speed Remember Microsoft’s first attempt at an Android foldable? Of course you don’t Microsoft has drawn a discreet veil over another of its attempts to become relevant in the mobile hardware space. The original Surface Duo has dropped out of

Lawyer’s Microsoft email snafu goes from $1.75M lawsuit to Ctrl+Alt+Settle 12/09/2023 at 12:17 By Jude Karabus Accused software giant of MFA error that rendered work address useless The New Jersey attorney who sued Microsoft for $1.75 million claiming verification gremlins had cut him off from his paid work email filed for voluntary dismissal on Friday.…