2023

Bad.Build Flaw in Google Cloud Build Raises Concerns of Privilege Escalation 19/07/2023 at 12:49 By Cybersecurity researchers have uncovered a privilege escalation vulnerability in Google Cloud that could enable malicious actors tamper with application images and infect users, leading to supply chain attacks. The issue, dubbed Bad.Build, is rooted in the Google Cloud Build service, according to

Meet the guy trying to drag HM Treasury’s data strategy into the 21st century 19/07/2023 at 12:17 By Lindsay Clark John Kelly is building approach around Microsoft, but there’s room for flexibility Interview  The UK government is to spend £1.2 trillion in the current financial year overseen mainly by HM Treasury, the department also responsible

Norway bans Meta’s behavioral advertising with threats of wrist-slap fines 19/07/2023 at 10:32 By Brandon Vigliarolo Won’t someone think of Zuck’s pocket change? Norwegian data protection authorities have temporarily banned Meta from tracking users for the purposes of serving ads, and threatened the US company with fines of one million Kroner per day if it

U.S. Government Blacklists Cytrox and Intellexa Spyware Vendors for Cyber Espionage 19/07/2023 at 09:49 By The U.S. government on Tuesday added two foreign commercial spyware vendors, Cytrox and Intellexa, to an economic blocklist for weaponizing cyber exploits to gain unauthorized access to devices and “threatening the privacy and security of individuals and organizations worldwide.” This

Zero-Day Attacks Exploited Critical Vulnerability in Citrix ADC and Gateway 19/07/2023 at 06:33 By Citrix is alerting users of a critical security flaw in NetScaler Application Delivery Controller (ADC) and Gateway that it said is being actively exploited in the wild. Tracked as CVE-2023-3519 (CVSS score: 9.8), the issue relates to a case of code injection that could result in unauthenticated

Meta trots out Llama 2 AI models, invites devs to hop on 19/07/2023 at 04:04 By Katyanna Quach As Microsoft warns it’ll charge $30 per user per month for Copilot for Business Llama 2, Meta’s latest collection of large language models, can now be downloaded for free and commercial use is supported.… This article is

US adds Euro spyware makers to its export naughty list 19/07/2023 at 02:52 By Jessica Lyons Hardcastle Predator dev joins Pegasus slinger The US government on Tuesday added commercial spyware makers Intellexa and Cytrox to its Entity List, saying the duo are a possible threat to national security.… This article is an excerpt from The

JumpCloud says ‘nation state’ gang hit some customers 19/07/2023 at 02:03 By Jessica Lyons Hardcastle Enough to make you hopping mad JumpCloud says a “sophisticated nation-state” attacker broke into its IT systems and targeted some of its customers.… This article is an excerpt from The Register View Original Source