September 2024

UPS supplier’s password policy flip-flops from unlimited, to 32, then 64 characters 2024-09-23 at 15:16 By Connor Jones That ‘third party’ person sure is responsible for a lot of IT blunders, eh? A major IT hardware manufacturer is correcting a recent security update after customers complained of a password character limit being introduced when there

React to this headline:

THN Cybersecurity Recap: Last Week’s Top Threats and Trends (September 16-22) 2024-09-23 at 15:16 By Hold on tight, folks, because last week’s cybersecurity landscape was a rollercoaster! We witnessed everything from North Korean hackers dangling “dream jobs” to expose a new malware, to a surprising twist in the Apple vs. NSO Group saga. Even the

React to this headline:

Why ‘Never Expire’ Passwords Can Be a Risky Decision 2024-09-23 at 15:16 By Password resets can be frustrating for end users. Nobody likes being interrupted by the ‘time to change your password’ notification – and they like it even less when the new passwords they create are rejected by their organization’s password policy. IT teams

React to this headline:

Feel free to ignore GenAI for now – a new kind of software developer is being born 2024-09-23 at 14:31 By Richard Speed Kubernetes whizz says devs can redefine their roles and capitalize on coding ML rewards Interview  Software industry veteran and developer advocate Kelsey Hightower, well known for his contributions to the Kubernetes community,

React to this headline:

Critical Flaw in Microchip ASF Exposes IoT Devices to Remote Code Execution Risk 2024-09-23 at 14:01 By A critical security flaw has been disclosed in the Microchip Advanced Software Framework (ASF) that, if successfully exploited, could lead to remote code execution. The vulnerability, tracked as CVE-2024-7490, carries a CVSS score of 9.5 out of a

React to this headline:

Discord Introduces DAVE Protocol for End-to-End Encryption in Audio and Video Calls 2024-09-23 at 14:01 By Popular social messaging platform Discord has announced that it’s rolling out a new custom end-to-end encrypted (E2EE) protocol to secure audio and video calls. The protocol has been dubbed DAVE, short for Discord’s audio and video end-to-end encryption (“E2EE

React to this headline:

Axiom Space puts a brave face on claims of dire finances 2024-09-23 at 13:31 By Richard Speed Losing money on missions, space station delayed, but ‘we will not be deterred’ Axiom Space CEO Dr Kam Ghaffarian is attempting to reassure customers after an interview that did not go entirely to plan.… This article is an

React to this headline:

NHS drops another billion on tech in the hope of finally going digital 2024-09-23 at 12:46 By Lindsay Clark Framework promised last year set to reach value of up to £2.5B after chat with supply chain The UK’s health system has added £1 billion to a tech deal for software and infrastructure after an “engagement”

React to this headline:

AI to power the corporate Windows 11 refresh? Nobody’s buying that 2024-09-23 at 11:46 By Rupert Goodwins Microsoft should look to Apple for lessons in flogging dead horses Opinion  In the early 2010s, Intel’s PR did the tech press rounds with a hot story. We’re so far ahead in chip fab, they said, that nobody

React to this headline:

Did you hear the one about the help desk chap who abused privileges to prank his mate? 2024-09-23 at 10:51 By Matthew JC Powell The result was no joke, thanks to a Microsoft glitch Who, Me?  Welcome, dear reader, to another instalment of Who, Me? in which Reg readers share tales of techie woe to

React to this headline:

Chinese server-maker Inspur claims it’s on track for better liquid cooling with ‘railway sleeper’ design 2024-09-23 at 10:31 By Laura Dobberstein Beijing is happy at surging sales and production capacity, falling energy requirements Chinese server-maker and contract manufacturer Inspur has detailed a memory cooling tech it claims doubles the heat dissipation efficiency of traditional air

React to this headline:

New PondRAT Malware Hidden in Python Packages Targets Software Developers 2024-09-23 at 10:31 By Threat actors with ties to North Korea have been observed using poisoned Python packages as a way to deliver a new malware called PondRAT as part of an ongoing campaign. PondRAT, according to new findings from Palo Alto Networks Unit 42,

React to this headline:

Move over, Cobalt Strike. Splinter’s the new post-exploit menace in town 2024-09-23 at 10:01 By Jessica Lyons No malware crew linked to this latest red-teaming tool yet Attackers are using Splinter, a new post-exploitation tool, to wreak havoc in victims’ IT environments after initial infiltration, utilizing capabilities such as executing Windows commands, stealing files, collecting

React to this headline:

Chinese Hackers Exploit GeoServer Flaw to Target APAC Nations with EAGLEDOOR Malware 2024-09-23 at 09:16 By A suspected advanced persistent threat (APT) originating from China targeted a government organization in Taiwan, and possibly other countries in the Asia-Pacific (APAC) region, by exploiting a recently patched critical security flaw impacting OSGeo GeoServer GeoTools. The intrusion activity,

React to this headline: