2024

Thousands of Fortinet instances vulnerable to actively exploited flaw 2024-10-14 at 15:32 By Connor Jones No excuses for not patching this nine-month-old issue More than 86,000 Fortinet instances remain vulnerable to the critical flaw that attackers started exploiting last week, according to Shadowserver’s data.… This article is an excerpt from The Register View Original Source

Fidelity Investments data breach impacts more than 77,000 customers 2024-10-14 at 15:16 By Fidelity Investments announced it experienced a data breach. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

39% of consumers admit to using generative AI on a weekly basis 2024-10-14 at 15:16 By Twenty-seven percent of employed survey respondents use privacy tools and settings to protect workplace information when using generative AI. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Nation-State Attackers Exploiting Ivanti CSA Flaws for Network Infiltration 2024-10-14 at 15:16 By A suspected nation-state adversary has been observed weaponizing three security flaws in Ivanti Cloud Service Appliance (CSA) a zero-day to perform a series of malicious actions. That’s according to findings from Fortinet FortiGuard Labs, which said the vulnerabilities were abused to gain

5 Steps to Boost Detection and Response in a Multi-Layered Cloud 2024-10-14 at 15:16 By The link between detection and response (DR) practices and cloud security has historically been weak. As global organizations increasingly adopt cloud environments, security strategies have largely focused on “shift-left” practices—securing code, ensuring proper cloud posture, and fixing misconfigurations. However, this

Supply Chain Attacks Exploit Entry Points in Python, npm, and Open-Source Ecosystems 2024-10-14 at 15:16 By Cybersecurity researchers have found that entry points could be abused across multiple programming ecosystems like PyPI, npm, Ruby Gems, NuGet, Dart Pub, and Rust Crates to stage software supply chain attacks. “Attackers can leverage these entry points to execute

THN Cybersecurity Recap: Top Threats, Tools and Trends (Oct 7 – Oct 13) 2024-10-14 at 15:16 By Hey there, it’s your weekly dose of “what the heck is going on in cybersecurity land” – and trust me, you NEED to be in the loop this time. We’ve got everything from zero-day exploits and AI gone

The best use for those latest manycore chips? AI, say server vendors 2024-10-14 at 15:03 By Dan Robinson PC makers might not be able to sell the idea – big iron has a better chance Analysis  Anyone wondering what the target market is for manycore monster chips – like AMD’s newly unveiled 5th Gen Epyc

Get more licenses for less with SAP price tiering, advise experts 2024-10-14 at 14:32 By Lindsay Clark German ERP vendor entices users to cloud, but be aware of how the system works, ITAM experts warn SAP’s tiered pricing sometimes means it is cheaper for users to buy more software licenses than they need under its

UK ponders USB-C as common charging standard 2024-10-14 at 13:11 By Dan Robinson Will it also plug into some common sense? UK government has kicked off a consultation on whether the country should have a common standard for charging electrical devices, and if this needs to be the same as the USB-C connector the EU

Critical Veeam Vulnerability Exploited to Spread Akira and Fog Ransomware 2024-10-14 at 12:01 By Threat actors are actively attempting to exploit a now-patched security flaw in Veeam Backup & Replication to deploy Akira and Fog ransomware. Cybersecurity vendor Sophos said it has been tracking a series of attacks in the past month leveraging compromised VPN

Smart homes may be a bright idea, just not for the dim bulbs who live in ’em 2024-10-14 at 11:41 By Rupert Goodwins How many Reg hacks does it take to change a light fitting…? Opinion  Smart homes aren’t smart. Simultaneously sinister and stupid, maybe, but not smart. We have been sold a pup, a

Crypto-apocalypse soon? Chinese researchers find a potential quantum attack on classical encryption 2024-10-14 at 09:35 By Laura Dobberstein With an off-the-shelf D-Wave machine Chinese researchers claim they have found a way to use D-Wave’s quantum annealing systems to develop a promising attack on classical encryption.… This article is an excerpt from The Register View Original

Boeing again delays the 777X – the plane that’s supposed to turn things around 2024-10-14 at 08:35 By Simon Sharwood Also warns it will fire thousands and keep making losses in space Aerospace outfit Boeing has again delayed its 777X jet – a product on which hot has hung all its hopes to help it