June 2024

New Malware Targets Exposed Docker APIs for Cryptocurrency Mining

New Malware Targets Exposed Docker APIs for Cryptocurrency Mining 2024-06-18 at 13:17 By Cybersecurity researchers have uncovered a new malware campaign that targets publicly exposed Docket API endpoints with the aim of delivering cryptocurrency miners and other payloads. Included among the tools deployed is a remote access tool that’s capable of downloading and executing more […]

New Malware Targets Exposed Docker APIs for Cryptocurrency Mining Read More »

Apple’s Macintosh 128K on a Pi Pico gets thumbs-up from Upton

Apple’s Macintosh 128K on a Pi Pico gets thumbs-up from Upton 2024-06-18 at 12:45 By Richard Speed Just because you could definitely means you should The Raspberry Pi has long been popular with retrocomputing enthusiasts, and its microcontroller – the RP2040 – can also be used for various emulation purposes, now including the original Apple

Apple’s Macintosh 128K on a Pi Pico gets thumbs-up from Upton Read More »

Critical RCE flaws in vCenter Server fixed (CVE-2024-37079, CVE-2024-37080)

Critical RCE flaws in vCenter Server fixed (CVE-2024-37079, CVE-2024-37080) 2024-06-18 at 12:16 By Zeljka Zorz VMware by Broadcom has fixed two critical vulnerabilities (CVE-2024-37079, CVE-2024-37080) affecting VMware vCenter Server and products that contain it: vSphere and Cloud Foundation. “A malicious actor with network access to vCenter Server may trigger these vulnerabilities by sending a specially

Critical RCE flaws in vCenter Server fixed (CVE-2024-37079, CVE-2024-37080) Read More »

Ada and Zangemann: Fancy reading your kids a book about FOSS?

Ada and Zangemann: Fancy reading your kids a book about FOSS? 2024-06-18 at 11:46 By Liam Proven It’s not every tech conference that has story-reading sessions… but maybe they should Devconf.cz  Free Software Foundation Europe president Matthias Kirshner’s picture book Ada and Zangemann explains the concepts of FOSS to school kids… and managers, marketing people,

Ada and Zangemann: Fancy reading your kids a book about FOSS? Read More »

eBook: The Art & Science of Secure Software Development

eBook: The Art & Science of Secure Software Development 2024-06-18 at 11:46 By Help Net Security Software security requires a creative and disciplined approach. It involves having the vision to develop secure strategy, tactics, and execution. Excelling in the discipline demands thinking through the entire software lifecycle and enforcing security as a first-thought process. The

eBook: The Art & Science of Secure Software Development Read More »

VMware Issues Patches for Cloud Foundation, vCenter Server, and vSphere ESXi

VMware Issues Patches for Cloud Foundation, vCenter Server, and vSphere ESXi 2024-06-18 at 11:31 By VMware has released updates to address critical flaws impacting Cloud Foundation, vCenter Server, and vSphere ESXi that could be exploited to achieve privilege escalation and remote code execution. The list of vulnerabilities is as follows – CVE-2024-37079 & CVE-2024-37080 (CVSS

VMware Issues Patches for Cloud Foundation, vCenter Server, and vSphere ESXi Read More »

Datadog App Builder helps accelerate issue remediation

Datadog App Builder helps accelerate issue remediation 2024-06-18 at 11:01 By Industry News Datadog launched Datadog App Builder, a low-code development tool that helps teams create self-service applications and integrate them securely into their monitoring stacks. These customized apps help accelerate issue remediation at scale by enabling both technical and business users to take action

Datadog App Builder helps accelerate issue remediation Read More »

Singapore Police Extradites Malaysians Linked to Android Malware Fraud

Singapore Police Extradites Malaysians Linked to Android Malware Fraud 2024-06-18 at 11:01 By The Singapore Police Force (SPF) has announced the extradition of two men from Malaysia for their alleged involvement in a mobile malware campaign targeting citizens in the country since June 2023. The unnamed individuals, aged 26 and 47, engaged in scams that

Singapore Police Extradites Malaysians Linked to Android Malware Fraud Read More »

Tiny solid-state battery promises to pack a punch in pocket gadgets

Tiny solid-state battery promises to pack a punch in pocket gadgets 2024-06-18 at 10:31 By Matthew Connatser TDK tech envisioned as successor to button cells – if it works as promised Japan’s TDK Corporation claims its new solid-state battery design has a hundred times the energy density of its previous products.… This article is an

Tiny solid-state battery promises to pack a punch in pocket gadgets Read More »

VMware by Broadcom warns of two critical vCenter flaws, plus a nasty sudo bug

VMware by Broadcom warns of two critical vCenter flaws, plus a nasty sudo bug 2024-06-18 at 09:16 By Simon Sharwood Specially crafted network packet could allow remote code execution and access to VM fleets VMware by Broadcom has revealed a pair of critical-rated flaws in vCenter Server – the tool used to manage virtual machines

VMware by Broadcom warns of two critical vCenter flaws, plus a nasty sudo bug Read More »

Tencent ponders banning infomercials hosted by ‘virtual humans’ on its flagship video service

Tencent ponders banning infomercials hosted by ‘virtual humans’ on its flagship video service 2024-06-18 at 08:31 By Simon Sharwood Beijing’s interest in generative AI has its limits Chinese web giant Tencent has floated the idea of banning AI-generated videos on its Weixin Channel service, in the grounds that they are low–quality content.… This article is

Tencent ponders banning infomercials hosted by ‘virtual humans’ on its flagship video service Read More »

How to create your cybersecurity “Google Maps”: A step-by-step guide for security teams

How to create your cybersecurity “Google Maps”: A step-by-step guide for security teams 2024-06-18 at 08:01 By Help Net Security Cybersecurity isn’t just about firewalls and antivirus. It’s about understanding how your defenses, people, and processes work together. Just like Google Maps revolutionized navigation, process mapping can revolutionize how you understand and manage your security

How to create your cybersecurity “Google Maps”: A step-by-step guide for security teams Read More »

Enhancing security through collaboration with the open-source community

Enhancing security through collaboration with the open-source community 2024-06-18 at 07:32 By Mirko Zorz In this Help Net Security interview, Alan DeKok, CEO at NetworkRADIUS, discusses the need for due diligence in selecting and maintaining open-source tools, and brings out the potential risks and benefits of collaborating with the open-source community to enhance software security.

Enhancing security through collaboration with the open-source community Read More »

Mass exploitation is the new primary attack vector for ransomware

Mass exploitation is the new primary attack vector for ransomware 2024-06-18 at 07:01 By Help Net Security The cyber threat landscape in 2023 and 2024 has been dominated by mass exploitation, according to WithSecure. Edge service KEV vulnerability trends 64% of all edge service and infrastructure Common Vulnerabilities and Exposures (CVEs) in the Known Exploited

Mass exploitation is the new primary attack vector for ransomware Read More »

NTT uses scattered monitors to trick your brain into seeing 3D images

NTT uses scattered monitors to trick your brain into seeing 3D images 2024-06-18 at 06:46 By Simon Sharwood Because not everyone’s walking around wearing augmented reality goggles yet Japan’s IT services and telecoms giant NTT Corporation has devised a tech that makes 3D images visible in augmented reality applications without requiring special equipment or even

NTT uses scattered monitors to trick your brain into seeing 3D images Read More »

Preparing for a post-quantum future

Preparing for a post-quantum future 2024-06-18 at 06:31 By Help Net Security Post-quantum cryptography (PQC) is a hot topic. A recent paper from Tsinghua University raised doubts about lattice-based cryptography for PQC, though an error was found. This has sparked questions about the strength of soon-to-be-standardized PQC algorithms. In this Help Net Security video, Kevin

Preparing for a post-quantum future Read More »

42% plan to use API security for AI data protection

42% plan to use API security for AI data protection 2024-06-18 at 06:01 By Help Net Security While 75% of enterprises are implementing AI, 72% report significant data quality issues and an inability to scale data practices, according to F5. Data and the systems companies put in place to obtain, store, and secure it are

42% plan to use API security for AI data protection Read More »

Scroll to Top