2024

Critical GitHub Enterprise Server Flaw Allows Authentication Bypass 2024-05-21 at 20:31 By GitHub has rolled out fixes to address a maximum severity flaw in the GitHub Enterprise Server (GHES) that could allow an attacker to bypass authentication protections. Tracked as CVE-2024-4985 (CVSS score: 10.0), the issue could permit unauthorized access to an instance without requiring prior authentication. […]

Google now ‘third-largest’ in datacenter processors 2024-05-21 at 20:16 By Dan Robinson Custom silicon mounting up, says report from semiconductor researcher TechInsights Google announced a long-rumored datacenter CPU last month, but the Chocolate Factory may already be the third-largest designer of datacenter processors, according to research.… This article is an excerpt from The Register View

NYC Comptroller and hedge funds urge Tesla shareholders to deny Musk $50B windfall 2024-05-21 at 19:31 By Matthew Connatser Bloc also recommends kicking Elon’s brother and Rupert Murdoch’s son off the board New York City’s Comptroller and seven financial firms are recommending that Tesla shareholders give a thumbs-down to the electric car maker’s ~$50 billion

Financial consequences of ignoring security debt in 2024 2024-05-21 at 19:17 By What might have once seemed like an unavoidable security debt is now leaving vulnerabilities open to exploitation and manipulation. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

5 Top EDR Use Cases 2024-05-21 at 19:02 By Alisha Smith When preventative measures fail, these five actions can save you This article is an excerpt from Broadcom Software Blogs View Original Source

Microsoft extends reach of Copilot AI helpers 2024-05-21 at 18:46 By Thomas Claburn Assistive software is being modified to exchange data with different services At Microsoft, “it’s Copilots all the way down for us.”… This article is an excerpt from The Register View Original Source

Prepare your audits: EU Commission approves first-of-its-kind AI Act 2024-05-21 at 18:16 By Brandon Vigliarolo ‘High-risk’ AIs will have hoops to jump through if they want to keep doing business in Europe The EU Council has given final approval to the bloc’s landmark AI Act, setting the stage for enactment of a benchmark first-of-its-kind AI

Malware Delivery via Cloud Services Exploits Unicode Trick to Deceive Users 2024-05-21 at 18:16 By A new attack campaign dubbed CLOUD#REVERSER has been observed leveraging legitimate cloud storage services like Google Drive and Dropbox to stage malicious payloads. “The VBScript and PowerShell scripts in the CLOUD#REVERSER inherently involves command-and-control-like activities by using Google Drive and Dropbox as

Hunger for more HBM capacity could cause shortage DRAM-a 2024-05-21 at 18:01 By Laura Dobberstein Analyst’s warns of another unfortunate side effect of AI Industry preference for high bandwidth memory (HBM) has the potential to cause a DRAM supply shortage unless more manufacturing lines are built quickly, TrendForce is warning.… This article is an excerpt

55 years ago, Apollo 10’s crew turned the airwaves blue 2024-05-21 at 17:16 By Richard Speed Shockingly, astronauts can curse when in high-stress situations It has been 55 years since Apollo 10 slipped into lunar orbit. The mission? To rehearse nearly every part of Apollo 11’s landing except the part where it would actually land.…

Private equity offer for MariaDB gets thumbsup from shareholders 2024-05-21 at 17:01 By Lindsay Clark From SPAC and back as 68% say yes MariaDB shareholders have backed a private equity takeover offer for the troubled database vendor.… This article is an excerpt from The Register View Original Source

ASML could brick Taiwan’s chipmaking machines in case of uninvited guests 2024-05-21 at 16:16 By Dan Robinson If I can’t have you, then no one will! Chipmaking equipment supplier ASML reportedly has the means to remotely disable its advanced machinery in the hands of TSMC, should China invade Taiwan.… This article is an excerpt from

SolarMarker Malware Evolves to Resist Takedown Attempts with Multi-Tiered Infrastructure 2024-05-21 at 16:16 By The persistent threat actors behind the SolarMarker information-stealing malware have established a multi-tiered infrastructure to complicate law enforcement takedown efforts, new findings from Recorded Future show. “The core of SolarMarker’s operations is its layered infrastructure, which consists of at least two clusters: a

Good news: The iPad Pro 13 is a bit more repairable 2024-05-21 at 15:46 By Richard Speed Bad news? The Apple Pencil Pro is *not* The Apple iPad Pro 13 has a secret lurking within its sleek lines. A battery that is not nightmarishly hard to replace. Relatively.… This article is an excerpt from The

Report: Generative AI bots are susceptible to user manipulation 2024-05-21 at 15:16 By Generative AI bots can be manipulated by users of any skill level — not just cyber experts. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Five Core Tenets Of Highly Effective DevSecOps Practices 2024-05-21 at 15:16 By One of the enduring challenges of building modern applications is to make them more secure without disrupting high-velocity DevOps processes or degrading the developer experience. Today’s cyber threat landscape is rife with sophisticated attacks aimed at all different parts of the software supply