2024

Tenable Enclave Security enables discovery, assessment and analysis of IT assets

Tenable Enclave Security enables discovery, assessment and analysis of IT assets 2024-09-19 at 12:01 By Industry News Tenable launched Tenable Enclave Security, a solution that supports the needs of customers operating in highly secure environments, such as those that are classified or otherwise air-gapped. Backed by Tenable Security Center, Tenable Enclave Security protects IT assets […]

Tenable Enclave Security enables discovery, assessment and analysis of IT assets Read More »

Earth Baxia Uses Spear-Phishing and GeoServer Exploit to Target APAC

Earth Baxia Uses Spear-Phishing and GeoServer Exploit to Target APAC 2024-09-19 at 11:47 By We observed Earth Baxia carrying out targeted attacks against APAC countries that involved advanced techniques like spear-phishing and customized malware, with data suggesting that the group operates from China. This article is an excerpt from Trend Micro Research, News and Perspectives

Earth Baxia Uses Spear-Phishing and GeoServer Exploit to Target APAC Read More »

SiFive shifts from RISC-V cores for AI chips to designing its own full-fat accelerator

SiFive shifts from RISC-V cores for AI chips to designing its own full-fat accelerator 2024-09-19 at 11:32 By Tobias Mann Seems someone’s looking for an Arm wrestle SiFive, having designed RISC-V CPU cores for various AI chips, is now offering to license the blueprints for its own homegrown full-blown machine-learning accelerator.… This article is an

SiFive shifts from RISC-V cores for AI chips to designing its own full-fat accelerator Read More »

Edera raises $5 million to improve Kubernetes security

Edera raises $5 million to improve Kubernetes security 2024-09-19 at 11:32 By Industry News Edera announced it has raised $5 million in a seed round led by 645 Ventures and Eniac Ventures with participation from FPV Ventures, Generationship, Precursor Ventures and Rosecliff Ventures. Angel investors include Joe Beda, Filippo Valsorda, Mandy Andress, Jeff Behl and

Edera raises $5 million to improve Kubernetes security Read More »

Broadcom CEO predicts hyperscalers poised to build million-accelerator clusters

Broadcom CEO predicts hyperscalers poised to build million-accelerator clusters 2024-09-19 at 11:16 By Simon Sharwood Hock Tan reckons the silicon sales cycle is about to swing up, sharply, too Broadcom CEO Hock Tan has predicted his hyperscale semiconductor customers will continue building AI clusters for another three to five years, with each generation of machines

Broadcom CEO predicts hyperscalers poised to build million-accelerator clusters Read More »

Tor insists its network is safe after German cops convict CSAM dark-web admin

Tor insists its network is safe after German cops convict CSAM dark-web admin 2024-09-19 at 11:16 By Iain Thomson Outdated software blamed for cracks in the armor The Tor project has insisted its privacy-preserving powers remain potent, countering German reports that user anonymity on its network can be and has been compromised by police.… This

Tor insists its network is safe after German cops convict CSAM dark-web admin Read More »

Top ICS Vulnerabilities This Week: Critical Bugs in Rockwell Automation, Siemens, and Viessmann

Top ICS Vulnerabilities This Week: Critical Bugs in Rockwell Automation, Siemens, and Viessmann 2024-09-19 at 09:18 By dakshsharma16 Key Takeaways Overview Cyble Research and Intelligence Labs (CRIL) has observed multiple vulnerabilities in its Weekly Industrial Control System (ICS) Vulnerability Intelligence Report. This report provides a comprehensive overview of critical vulnerabilities disclosed from September 10 to September

Top ICS Vulnerabilities This Week: Critical Bugs in Rockwell Automation, Siemens, and Viessmann Read More »

CISA Adds Progress WhatsUp Gold and MSHTML Vulnerabilities to Known Exploited Vulnerabilities Catalog

CISA Adds Progress WhatsUp Gold and MSHTML Vulnerabilities to Known Exploited Vulnerabilities Catalog 2024-09-19 at 09:18 By dakshsharma16 Key Takeaways Overview The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added vulnerabilities affecting the Microsoft Windows MSHTML Platform and Progress WhatsUp Gold network monitoring solution to its Known Exploited Vulnerabilities catalog (KEV) after proofs of

CISA Adds Progress WhatsUp Gold and MSHTML Vulnerabilities to Known Exploited Vulnerabilities Catalog Read More »

GitLab Patches Critical SAML Authentication Bypass Flaw in CE and EE Editions

GitLab Patches Critical SAML Authentication Bypass Flaw in CE and EE Editions 2024-09-19 at 08:31 By GitLab has released patches to address a critical flaw impacting Community Edition (CE) and Enterprise Edition (EE) that could result in an authentication bypass. The vulnerability is rooted in the ruby-saml library (CVE-2024-45409, CVSS score: 10.0), which could allow

GitLab Patches Critical SAML Authentication Bypass Flaw in CE and EE Editions Read More »

Differential privacy in AI: A solution creating more problems for developers?

Differential privacy in AI: A solution creating more problems for developers? 2024-09-19 at 08:01 By Help Net Security In the push for secure AI models, many organizations have turned to differential privacy. But is the very tool meant to protect user data holding back innovation? Developers face a tough choice: balance data privacy or prioritize

Differential privacy in AI: A solution creating more problems for developers? Read More »

How digital wallets work, and best practices to use them safely

How digital wallets work, and best practices to use them safely 2024-09-19 at 07:31 By Help Net Security With the adoption of digital wallets and the increasing embedding of consumer digital payments into daily life, ensuring security measures is essential. According to a McKinsey report, digital payments are now mainstream and continually evolving, bringing advancements

How digital wallets work, and best practices to use them safely Read More »

Essential metrics for effective security program assessment

Essential metrics for effective security program assessment 2024-09-19 at 07:02 By Mirko Zorz In this Help Net Security interview, Alex Spivakovsky, VP of Research & Cybersecurity at Pentera, discusses essential metrics for evaluating the success of security programs. Spivakovsky explains how automation and proactive testing can reveal vulnerabilities and improve overall security posture. What are

Essential metrics for effective security program assessment Read More »

Data disposal and cyber hygiene: Building a culture of security within your organization

Data disposal and cyber hygiene: Building a culture of security within your organization 2024-09-19 at 06:31 By Help Net Security Data breach episodes have been constantly rising with the number of data breach victims crossing 1 billion in the first half of 2024. A recent Data Breach Report 2023 by Verizon confirms that 74% of

Data disposal and cyber hygiene: Building a culture of security within your organization Read More »

Security leaders consider banning AI coding due to security risks

Security leaders consider banning AI coding due to security risks 2024-09-19 at 06:02 By Help Net Security 92% of security leaders have concerns about the use of AI-generated code within their organization, according to Venafi. Tension between security and developer teams 83% of security leaders say their developers currently use AI to generate code, with

Security leaders consider banning AI coding due to security risks Read More »

LinkedIn started harvesting people’s posts for training AI without asking for opt-in

LinkedIn started harvesting people’s posts for training AI without asking for opt-in 2024-09-19 at 05:16 By Simon Sharwood You’ll have to opt out if you don’t like it – EU and a few others excepted LinkedIn started harvesting user-generated content to train its AI without asking for permission, angering netizens.… This article is an excerpt

LinkedIn started harvesting people’s posts for training AI without asking for opt-in Read More »

Google dodges €1.5B EU ads antitrust fine after appeal win

Google dodges €1.5B EU ads antitrust fine after appeal win 2024-09-19 at 01:21 By Brandon Vigliarolo Qualcomm, on the other hand, wasn’t so lucky Google has some thank-you cards to send, as the European Union’s General Court (GC) has nullified a €1.49 billion ($1.66 billion) fine levied against the tech giant for anti-competitive advertising behavior. …

Google dodges €1.5B EU ads antitrust fine after appeal win Read More »

FBI boss says China ‘burned down’ 260,000-device botnet when confronted by Feds

FBI boss says China ‘burned down’ 260,000-device botnet when confronted by Feds 2024-09-19 at 00:17 By Iain Thomson Plus: Wray tells how bureau helps certain victims negotiate with ransomware crooks China-backed spies are said to have tore down their own 260,000-device botnet after the FBI and its international pals went after them.… This article is

FBI boss says China ‘burned down’ 260,000-device botnet when confronted by Feds Read More »

Scroll to Top