December 2024

How to Plan a New (and Improved!) Password Policy for Real-World Security Challenges 2024-12-04 at 13:12 By Many organizations struggle with password policies that look strong on paper but fail in practice because they’re too rigid to follow, too vague to enforce, or disconnected from real security needs. Some are so tedious and complex that […]

React to this headline:

U.S. is the to generator of anonymous open source contributions 2024-12-04 at 12:04 By A new report has revealed the United States and Russia are the highest generators of open source projects.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

Researchers Uncover Backdoor in Solana’s Popular Web3.js npm Library 2024-12-04 at 12:04 By Cybersecurity researchers are alerting to a software supply chain attack targeting the popular @solana/web3.js npm library that involved pushing two malicious versions capable of harvesting users’ private keys with an aim to drain their cryptocurrency wallets. The attack has been detected in

React to this headline:

Fresh releases of Xfce, Mint, Cinnamon desktops out in time for the holidays 2024-12-04 at 11:34 By Liam Proven Cinnamon 6.4 is already out and Xfce 4.20 is very nearly ready Fancy spending time refreshing your setup over the holidays? Two of the more popular Windows-style FOSS desktops are about to drop new point releases,

React to this headline:

Eurocops take down ‘secure’ criminal chat system known as Matrix 2024-12-04 at 10:40 By Iain Thomson They took the red pill French and Dutch police have taken down the Matrix chat app, which was designed by criminals for criminals to be a secure encrypted messaging tool.… This article is an excerpt from The Register View

React to this headline:

Musk and Trump to fall out in 2025, predicts analyst 2024-12-04 at 09:33 By Laura Dobberstein Differing China tech policy agendas will send bromance into ‘it’s complicated’ status Canalys Forums APAC  The CEO and founder of channel-centric analyst house Canalys has predicted that the alliance between president-elect Donald Trump and aspiring oligarch Elon Musk will

React to this headline:

Joint Advisory Warns of PRC-Backed Cyber Espionage Targeting Telecom Networks 2024-12-04 at 09:21 By A joint advisory issued by Australia, Canada, New Zealand, and the U.S. has warned of a broad cyber espionage campaign undertaken by People’s Republic of China (PRC)-affiliated threat actors targeting telecommunications providers. “Identified exploitations or compromises associated with these threat actors’

React to this headline:

£1B lawsuit targets Microsoft for allegedly overcharging Windows customers on other clouds 2024-12-04 at 08:34 By Brandon Vigliarolo Yes, we’ve been over this before – several times, in fact Microsoft has been sued in the UK to the tune of more than £1 billion over claims Redmond has been overcharging businesses for Windows Server licenses

React to this headline:

Binance accused of tax evasion by India’s finance minister 2024-12-04 at 07:38 By Simon Sharwood Nation wants almost $100 million from 17 crypto exchanges – most of it from Binance India’s Finance Ministry has alleged crypto exchange Binance evaded almost $85 million in tax – the vast majority of around $96 million it claims digi-dollar

React to this headline:

Veeam Issues Patch for Critical RCE Vulnerability in Service Provider Console 2024-12-04 at 07:38 By Veeam has released security updates to address a critical flaw impacting Service Provider Console (VSPC) that could pave the way for remote code execution on susceptible instances. The vulnerability, tracked as CVE-2024-42448, carries a CVSS score of 9.9 out of

React to this headline:

Critical SailPoint IdentityIQ Vulnerability Exposes Files to Unauthorized Access 2024-12-04 at 07:38 By A critical security vulnerability has been disclosed in SailPoint’s IdentityIQ identity and access management (IAM) software that allows unauthorized access to content stored within the application directory. The flaw, tracked as CVE-2024-10905, has a CVSS score of 10.0, indicating maximum severity. It

React to this headline: