2024

Feel free to ignore GenAI for now – a new kind of software developer is being born

Feel free to ignore GenAI for now – a new kind of software developer is being born 2024-09-23 at 14:31 By Richard Speed Kubernetes whizz says devs can redefine their roles and capitalize on coding ML rewards Interview  Software industry veteran and developer advocate Kelsey Hightower, well known for his contributions to the Kubernetes community, […]

Feel free to ignore GenAI for now – a new kind of software developer is being born Read More »

Critical Flaw in Microchip ASF Exposes IoT Devices to Remote Code Execution Risk

Critical Flaw in Microchip ASF Exposes IoT Devices to Remote Code Execution Risk 2024-09-23 at 14:01 By A critical security flaw has been disclosed in the Microchip Advanced Software Framework (ASF) that, if successfully exploited, could lead to remote code execution. The vulnerability, tracked as CVE-2024-7490, carries a CVSS score of 9.5 out of a

Critical Flaw in Microchip ASF Exposes IoT Devices to Remote Code Execution Risk Read More »

Discord Introduces DAVE Protocol for End-to-End Encryption in Audio and Video Calls

Discord Introduces DAVE Protocol for End-to-End Encryption in Audio and Video Calls 2024-09-23 at 14:01 By Popular social messaging platform Discord has announced that it’s rolling out a new custom end-to-end encrypted (E2EE) protocol to secure audio and video calls. The protocol has been dubbed DAVE, short for Discord’s audio and video end-to-end encryption (“E2EE

Discord Introduces DAVE Protocol for End-to-End Encryption in Audio and Video Calls Read More »

Why Do Criminals Love Phishing-as-a-Service Platforms?

Why Do Criminals Love Phishing-as-a-Service Platforms? 2024-09-23 at 13:01 By Rodel Mendrez Phishing-as-a-Service (PaaS) platforms have become the go-to tool for cybercriminals, to launch sophisticated phishing campaigns targeting the general public and businesses, especially in the financial services sector. This article is an excerpt from SpiderLabs Blog View Original Source

Why Do Criminals Love Phishing-as-a-Service Platforms? Read More »

NHS drops another billion on tech in the hope of finally going digital

NHS drops another billion on tech in the hope of finally going digital 2024-09-23 at 12:46 By Lindsay Clark Framework promised last year set to reach value of up to £2.5B after chat with supply chain The UK’s health system has added £1 billion to a tech deal for software and infrastructure after an “engagement”

NHS drops another billion on tech in the hope of finally going digital Read More »

Bitdefender debuts GravityZone PHASR, enhancing security through user behavior analysis

Bitdefender debuts GravityZone PHASR, enhancing security through user behavior analysis 2024-09-23 at 12:16 By Industry News Bitdefender has unveiled Bitdefender GravityZone Proactive Hardening and Attack Surface Reduction (PHASR), a technology that transforms how defense-in-depth-security is applied and managed across businesses. GravityZone PHASR analyzes individual user behavior such as application use, resource privileges, and others, clustering

Bitdefender debuts GravityZone PHASR, enhancing security through user behavior analysis Read More »

AI to power the corporate Windows 11 refresh? Nobody’s buying that

AI to power the corporate Windows 11 refresh? Nobody’s buying that 2024-09-23 at 11:46 By Rupert Goodwins Microsoft should look to Apple for lessons in flogging dead horses Opinion  In the early 2010s, Intel’s PR did the tech press rounds with a hot story. We’re so far ahead in chip fab, they said, that nobody

AI to power the corporate Windows 11 refresh? Nobody’s buying that Read More »

Did you hear the one about the help desk chap who abused privileges to prank his mate?

Did you hear the one about the help desk chap who abused privileges to prank his mate? 2024-09-23 at 10:51 By Matthew JC Powell The result was no joke, thanks to a Microsoft glitch Who, Me?  Welcome, dear reader, to another instalment of Who, Me? in which Reg readers share tales of techie woe to

Did you hear the one about the help desk chap who abused privileges to prank his mate? Read More »

Undetected Android Spyware Targeting Individuals In South Korea

Undetected Android Spyware Targeting Individuals In South Korea 2024-09-23 at 10:51 By rohansinhacyblecom Key Takeaways Overview Cyble Research and Intelligence Labs (CRIL) has uncovered a previously undetected Android spyware campaign targeting individuals in South Korea, which has been active since June 2024. The spyware leverages an Amazon AWS S3 bucket as its Command and Control

Undetected Android Spyware Targeting Individuals In South Korea Read More »

Chinese server-maker Inspur claims it’s on track for better liquid cooling with ‘railway sleeper’ design

Chinese server-maker Inspur claims it’s on track for better liquid cooling with ‘railway sleeper’ design 2024-09-23 at 10:31 By Laura Dobberstein Beijing is happy at surging sales and production capacity, falling energy requirements Chinese server-maker and contract manufacturer Inspur has detailed a memory cooling tech it claims doubles the heat dissipation efficiency of traditional air

Chinese server-maker Inspur claims it’s on track for better liquid cooling with ‘railway sleeper’ design Read More »

New PondRAT Malware Hidden in Python Packages Targets Software Developers

New PondRAT Malware Hidden in Python Packages Targets Software Developers 2024-09-23 at 10:31 By Threat actors with ties to North Korea have been observed using poisoned Python packages as a way to deliver a new malware called PondRAT as part of an ongoing campaign. PondRAT, according to new findings from Palo Alto Networks Unit 42,

New PondRAT Malware Hidden in Python Packages Targets Software Developers Read More »

Move over, Cobalt Strike. Splinter’s the new post-exploit menace in town

Move over, Cobalt Strike. Splinter’s the new post-exploit menace in town 2024-09-23 at 10:01 By Jessica Lyons No malware crew linked to this latest red-teaming tool yet Attackers are using Splinter, a new post-exploitation tool, to wreak havoc in victims’ IT environments after initial infiltration, utilizing capabilities such as executing Windows commands, stealing files, collecting

Move over, Cobalt Strike. Splinter’s the new post-exploit menace in town Read More »

Chinese Hackers Exploit GeoServer Flaw to Target APAC Nations with EAGLEDOOR Malware

Chinese Hackers Exploit GeoServer Flaw to Target APAC Nations with EAGLEDOOR Malware 2024-09-23 at 09:16 By A suspected advanced persistent threat (APT) originating from China targeted a government organization in Taiwan, and possibly other countries in the Asia-Pacific (APAC) region, by exploiting a recently patched critical security flaw impacting OSGeo GeoServer GeoTools. The intrusion activity,

Chinese Hackers Exploit GeoServer Flaw to Target APAC Nations with EAGLEDOOR Malware Read More »

AT&T intends to quit VMware, Broadcom claims in legal broadside

AT&T intends to quit VMware, Broadcom claims in legal broadside 2024-09-23 at 08:16 By Simon Sharwood Counter-arguments in support spat paint unflattering picture of telco giant’s IT estate Broadcom has claimed that AT&T plans to stop using VMware software, but has been tardy about making the move.… This article is an excerpt from The Register

AT&T intends to quit VMware, Broadcom claims in legal broadside Read More »

Certainly: Open-source offensive security toolkit

Certainly: Open-source offensive security toolkit 2024-09-23 at 07:31 By Mirko Zorz Certainly is an open-source offensive security toolkit designed to capture extensive traffic across various network protocols in bit-flip and typosquatting scenarios. Built-in protocols: DNS, HTTP(S), IMAP(S), SMTP(S). “The reason why we created Certainly was to simplify the process of capturing and collecting requests that

Certainly: Open-source offensive security toolkit Read More »

Offensive cyber operations are more than just attacks

Offensive cyber operations are more than just attacks 2024-09-23 at 07:01 By Mirko Zorz In this Help Net Security interview, Christopher Jones, Chief Technology Officer and Chief Data Officer at Nightwing, talks about some key misconceptions and complexities surrounding offensive cyber operations. Many myths stem from a simplistic view of these operations, ranging from direct

Offensive cyber operations are more than just attacks Read More »

Paid open-source maintainers spend more time on security

Paid open-source maintainers spend more time on security 2024-09-23 at 06:31 By Help Net Security Paid maintainers are 55% more likely to implement critical security and maintenance practices than unpaid maintainers and are dedicating more time to implementing security practices like those included in industry standards like the OpenSSF Scorecard and the NIST Secure Software

Paid open-source maintainers spend more time on security Read More »

The surge in cyber insurance and what it means for your business

The surge in cyber insurance and what it means for your business 2024-09-23 at 06:01 By Help Net Security The cyber insurance market is set for explosive growth as organizations increasingly seek financial protection against rising cyber threats. This surge in demand reflects a broader shift in how businesses approach risk management, viewing cyber insurance

The surge in cyber insurance and what it means for your business Read More »

Scroll to Top