2024

Most CISOs feel unprepared for new compliance regulations

Most CISOs feel unprepared for new compliance regulations 2024-07-26 at 06:31 By Help Net Security With the new stringent regulations, including the SEC’s cybersecurity disclosure rules in the USA and the Digital Operational Resilience Act (DORA) in the EU, a significant challenge is emerging for many organizations, according to Onyxia Cyber. CISO role has changed […]

Most CISOs feel unprepared for new compliance regulations Read More »

North Korean chap charged for attacks on US hospitals, NASA – and even China

North Korean chap charged for attacks on US hospitals, NASA – and even China 2024-07-26 at 06:01 By Simon Sharwood Microsoft, Mandiant, weigh in with info about methods used by Andariel gang alleged to have made many, many, heists The US Department of Justice on Thursday charged a North Korean national over a series of

North Korean chap charged for attacks on US hospitals, NASA – and even China Read More »

New infosec products of the week: July 26, 2024

New infosec products of the week: July 26, 2024 2024-07-26 at 06:01 By Help Net Security Here’s a look at the most interesting products from the past week, featuring releases from GitGuardian, LOKKER, Permit.io, Secure Code Warrior, and Strata Identity. GitGuardian’s tool helps companies discover developer leaks on GitHub GitGuardian released a tool to help

New infosec products of the week: July 26, 2024 Read More »

Malware crew Stargazers Goblin used 3,000 GitHub accounts to make bank

Malware crew Stargazers Goblin used 3,000 GitHub accounts to make bank 2024-07-26 at 04:46 By Matthew Connatser May even have targeted other malware gangs, and infosec researchers Infosec researchers have discovered a network of over three thousand malicious GitHub accounts used to spread malware, targeting groups including gamers, malware researchers, and even other threat actors

Malware crew Stargazers Goblin used 3,000 GitHub accounts to make bank Read More »

CrowdStrike update blunder may cost world billions – and insurance ain’t covering it all

CrowdStrike update blunder may cost world billions – and insurance ain’t covering it all 2024-07-26 at 03:46 By Matthew Connatser We offer this formula instead: RND(100.0)*(10^9) The cost of CrowdStrike’s apocalyptic Falcon update that brought down millions of Windows computers last week may be in the billions of dollars, and insurance isn’t covering most of

CrowdStrike update blunder may cost world billions – and insurance ain’t covering it all Read More »

Sam Altman wants a US-led freedom coalition to fight authoritarian AI

Sam Altman wants a US-led freedom coalition to fight authoritarian AI 2024-07-26 at 02:17 By Brandon Vigliarolo Team America AI Police? Sam Altman has called for a US-led coalition of nations to ensure AI remains a vehicle for freedom and democracy, and not a tool for authoritarians to keep themselves in power and dominate others. …

Sam Altman wants a US-led freedom coalition to fight authoritarian AI Read More »

Beware of fake CrowdStrike domains pumping out Lumma infostealing malware

Beware of fake CrowdStrike domains pumping out Lumma infostealing malware 2024-07-26 at 01:46 By Jessica Lyons PSA: Only accept updates via official channels … ironically enough CrowdStrike is the latest lure being used to trick Windows users into downloading and running the notorious Lumma infostealing malware, according to the security shop’s threat intel team, which

Beware of fake CrowdStrike domains pumping out Lumma infostealing malware Read More »

OpenAI unveils AI search engine SearchGPT – not that you’re allowed to use it yet

OpenAI unveils AI search engine SearchGPT – not that you’re allowed to use it yet 2024-07-25 at 23:31 By Matthew Connatser Launching in Beta is so 2014. We’re in the pre-Beta limited sign-up era now After months of speculation, shy and retiring OpenAI has showed the world a glimpse of its very own web search

OpenAI unveils AI search engine SearchGPT – not that you’re allowed to use it yet Read More »

FYI: Data from deleted GitHub repos may not actually be deleted

FYI: Data from deleted GitHub repos may not actually be deleted 2024-07-25 at 23:01 By Thomas Claburn And the forking Microsoft-owned code warehouse doesn’t see this as much of a problem Researchers at Truffle Security have found, or arguably rediscovered, that data from deleted GitHub repositories (public or private) and from deleted copies (forks) of

FYI: Data from deleted GitHub repos may not actually be deleted Read More »

North Korean Charged in Ransomware Attacks on American Hospitals

North Korean Charged in Ransomware Attacks on American Hospitals 2024-07-25 at 22:46 By Associated Press A man who allegedly carried out attacks for a North Korean military intelligence agency has been indicted in a conspiracy to hack healthcare firms, NASA, military bases and other entities. The post North Korean Charged in Ransomware Attacks on American

North Korean Charged in Ransomware Attacks on American Hospitals Read More »

Oracle’s Java pricing brews bitter taste, subscribers spill over to OpenJDK

Oracle’s Java pricing brews bitter taste, subscribers spill over to OpenJDK 2024-07-25 at 21:16 By Lindsay Clark Following licensing changes, 86% of users head for the door. Coincidence? Only 14 percent of Oracle Java subscribers plan to stay on Big Red’s runtime environment, according to a study following the introduction of an employee-based subscription model.…

Oracle’s Java pricing brews bitter taste, subscribers spill over to OpenJDK Read More »

Uncle Sam accuses telco IT pro of decade-long spying campaign for China

Uncle Sam accuses telco IT pro of decade-long spying campaign for China 2024-07-25 at 20:31 By Connor Jones Beijing has a long history of recruiting US residents to carry out various espionage activities The US is looking to prosecute a Chinese immigrant over claims he has been drip-feeding information of interest to Beijing since at

Uncle Sam accuses telco IT pro of decade-long spying campaign for China Read More »

Microsoft adds generative search to its Bing engine

Microsoft adds generative search to its Bing engine 2024-07-25 at 19:49 By Richard Speed Looks a lot like Google’s AI Overviews, hopefully without some of the early unfortunate summaries Microsoft is adding generative search to Bing despite the search engine’s market share showing no increase after prior AI tech additions.… This article is an excerpt

Microsoft adds generative search to its Bing engine Read More »

Chainguard Raises $140 Million, Expands Tech to Secure AI Workloads

Chainguard Raises $140 Million, Expands Tech to Secure AI Workloads 2024-07-25 at 19:49 By Ryan Naraine Software supply chain security startup Chainguard raises a $140 million Series C round that values the company at $1.2 billion. The post Chainguard Raises $140 Million, Expands Tech to Secure AI Workloads appeared first on SecurityWeek. This article is

Chainguard Raises $140 Million, Expands Tech to Secure AI Workloads Read More »

North Korean Hackers Shift from Cyber Espionage to Ransomware Attacks

North Korean Hackers Shift from Cyber Espionage to Ransomware Attacks 2024-07-25 at 18:01 By A North Korea-linked threat actor known for its cyber espionage operations has gradually expanded into financially-motivated attacks that involve the deployment of ransomware, setting it apart from other nation-state hacking groups linked to the country. Google-owned Mandiant is tracking the activity

North Korean Hackers Shift from Cyber Espionage to Ransomware Attacks Read More »

STMicroelectronics sees sharp decline in Q2 earnings amid weak auto sector demand

STMicroelectronics sees sharp decline in Q2 earnings amid weak auto sector demand 2024-07-25 at 17:31 By Dan Robinson NXP Semiconductors and Texas Instruments also hit by slowdown Euro chipmaker STMicroelectronics saw revenue and net income slump in Q2 of this year, blaming low demand in the automotive sector while orders elsewhere failed to meet expectations,

STMicroelectronics sees sharp decline in Q2 earnings amid weak auto sector demand Read More »

You should probably fix this 5-year-old critical Docker vuln fairly sharpish

You should probably fix this 5-year-old critical Docker vuln fairly sharpish 2024-07-25 at 17:01 By Connor Jones For some unknown reason, initial patch was omitted from later versions Docker is warning users to rev their Docker Engine into patch mode after it realized a near-maximum severity vulnerability had been sticking around for five years.… This

You should probably fix this 5-year-old critical Docker vuln fairly sharpish Read More »

Scroll to Top