2024

Verizon hit with whopping $847M verdict for infringing 5G and hotspot patents 2024-07-01 at 18:02 By Jude Karabus Must be hard to face a huge, unexpected bill, amirite? In one of the most massive patent verdicts in legal history, a federal jury in East Texas has ordered cellular giant Verizon to pay patentholder General Access […]

OSHA announces additional workplace safety initiatives 2024-07-01 at 17:46 By The Occupational Safety and Health Administration (OSHA) announced additional funding for workplace safety initiatives, including additional training. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Nasty regreSSHion bug in OpenSSH puts around 700K Linux boxes at risk 2024-07-01 at 17:16 By Connor Jones Full system takeovers on the cards, for those with enough patience to pull it off Glibc-based Linux systems are vulnerable to a new bug (CVE-2024-6387) in OpenSSH’s server (sshd) and should upgrade to the latest version.… This

Beijing says state owns China’s rare earth metals 2024-07-01 at 16:36 By Dan Robinson Better management of critical materials or retaliation for sanctions? Beijing has decreed that rare earth metals belong to the state under new regulations said to be aimed at protecting supplies in the name of national security, but which will be seen

CapraRAT Spyware Disguised as Popular Apps Threatens Android Users 2024-07-01 at 16:16 By The threat actor known as Transparent Tribe has continued to unleash malware-laced Android apps as part of a social engineering campaign to target individuals of interest. “These APKs continue the group’s trend of embedding spyware into curated video browsing applications, with a

Indian Software Firm’s Products Hacked to Spread Data-Stealing Malware 2024-07-01 at 16:16 By Installers for three different software products developed by an Indian company named Conceptworld have been trojanized to distribute information-stealing malware. The installers correspond to Notezilla, RecentX, and Copywhiz, according to cybersecurity firm Rapid7, which discovered the supply chain compromise on June 18,

Clockwork Blue: Automating Security Defenses with SOAR and AI 2024-07-01 at 16:01 By David Broggy It’s impractical to operate security operations alone, using manual human processes. Finding opportunities to automate SecOps is an underlying foundation of Zero Trust and an essential architecture component for enterprise-scale SOCs. Let’s discuss what SOAR is, its common uses, and

Asda kisses Walmart goodbye with half a billion dollar tech breakup bill 2024-07-01 at 15:31 By Lindsay Clark Project including SAP upgrade beset by cost increases and delays The UK’s third-largest grocery retailer has spent £430 million ($544 million) on its IT separation from US giant Walmart.… This article is an excerpt from The Register

Recovery point objectives 101: Planning for cyberattacks 2024-07-01 at 15:16 By Recovery point objectives and data recovery capabilities are foundational to a solid disaster recovery plan.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

End-to-End Secrets Security: Making a Plan to Secure Your Machine Identities 2024-07-01 at 15:01 By At the heart of every application are secrets. Credentials that allow human-to-machine and machine-to-machine communication. Machine identities outnumber human identities by a factor of 45-to-1 and represent the majority of secrets we need to worry about. According to CyberArk’s recent

New OpenSSH Vulnerability Could Lead to RCE as Root on Linux Systems 2024-07-01 at 15:01 By OpenSSH maintainers have released security updates to contain a critical security flaw that could result in unauthenticated remote code execution with root privileges in glibc-based Linux systems. The vulnerability has been assigned the CVE identifier CVE-2024-6387. It resides in

Juniper Networks flings out emergency patches for perfect 10 router vuln 2024-07-01 at 14:46 By Connor Jones Get ’em while they’re hot A critical vulnerability affecting Juniper Networks routers forced the vendor to issue emergency patches last week, and users are advised to apply them as soon as possible.… This article is an excerpt from