March 2024

Cisco Issues Patch for High-Severity VPN Hijacking Bug in Secure Client 2024-03-08 at 10:46 By Cisco has released patches to address a high-severity security flaw impacting its Secure Client software that could be exploited by a threat actor to open a VPN session with that of a targeted user. The networking equipment company described the […]

QEMU Emulator Exploited as Tunneling Tool to Breach Company Network 2024-03-08 at 10:46 By Threat actors have been observed leveraging the QEMU open-source hardware emulator as tunneling software during a cyber attack targeting an unnamed “large company” to connect to their infrastructure. While a number of legitimate tunneling tools like Chisel, FRP, ligolo, ngrok, and Plink have

AI mishaps are surging – and now they’re being tracked like software bugs 2024-03-08 at 09:32 By Katyanna Quach The Register speaks to the folks behind the AI Incident Database Interview  False images of Donald Trump supported by made-up Black voters, middle-schoolers creating pornographic deepfakes of their female classmates, and Google’s Gemini chatbot failing to

CISA Warns of Actively Exploited JetBrains TeamCity Vulnerability 2024-03-08 at 09:16 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical security flaw impacting JetBrains TeamCity On-Premises software to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The vulnerability, tracked as CVE-2024-27198 (CVSS score: 9.8), refers to an authentication

Euro-cloud consortium issues ultimatum to Microsoft: Fix your licensing or else 2024-03-08 at 08:38 By Paul Kunert Redmond hasn’t budged on deals that make its wares cheaper on Azure, and regulators are circling A group of cloud infrastructure providers in Europe has delivered an ultimatum to Microsoft: End the “unjustified feature and pricing discriminations against

Broadcom says VMware to grow revenue by double-digit percentages all year 2024-03-08 at 07:19 By Simon Sharwood Networking silicon surges, Carbon Black to be kept in the fold Broadcom has told investors its strategy of forcing VMware customers to buy only big bundles of software will see revenue increase by “double-digit percentage sequentially, quarter over

Product spotlight on crisis management & communications 2024-03-08 at 07:03 By Security magazine highlights crisis management platforms, alert systems and mass-communication channels. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

From gates, guns & guards to encryption, endpoints & erasure 2024-03-08 at 07:03 By Security leaders should consider how everyday habits can drastically improve security measures surrounding intellectual property protection. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Font security ‘still a Helvetica of a problem’ says Australian graphics outfit Canva 2024-03-08 at 06:07 By Laura Dobberstein Who knew that unzipping a font archive could unleash a malicious file Online graphic design platform Canva went looking for security problems in fonts, and found three – in “strange places.”… This article is an excerpt

India plans 10,000-GPU sovereign AI supercomputer 2024-03-08 at 04:46 By Simon Sharwood Puts $1.2 billion on the table for AI skills and local LLMs, tells private enterprise it expects help India’s government has approved a ₹10,300 Crore ($1.24 billion) funding package to bolster the nation’s AI infrastructure.… This article is an excerpt from The Register

Securing open source software: Whose job is it, anyway? 2024-03-08 at 03:16 By Jessica Lyons CISA announces more help, and calls on app makers to step up The US government and some of the largest open source foundations and package repositories have announced a series of initiatives intended to improve software supply-chain security, while also

Apple may have made itself a target before the EU’s Digital Markets Act comes into force 2024-03-08 at 02:17 By Lindsay Clark iPhone giant’s $2B fine shows the bloc is serious about regulation Experts say Apple has made itself a target for regulators as the EU introduces stringent new rules under the Digital Markets Act

Boeing paper trail goes cold over door plug blowout 2024-03-08 at 00:18 By Richard Speed Safety watchdog bemoans lack of cooperation with probe Boeing has come in for criticism from the US National Transportation Safety Board (NTSB) over documentation detailing who was responsible for failures in the Alaska Airlines Flight 1282 door plug attachment.… This