2024

High-Severity Flaw in PostgreSQL Allows Hackers to Exploit Environment Variables 2024-11-15 at 09:49 By Cybersecurity researchers have disclosed a high-severity security flaw in the PostgreSQL open-source database system that could allow unprivileged users to alter environment variables, and potentially lead to code execution or information disclosure. The vulnerability, tracked as CVE-2024-10979, carries a CVSS score

EU stings Meta for nearly a billion bucks over competition-trampling Facebook Marketplace 2024-11-15 at 09:33 By Brandon Vigliarolo Mark Z does not like this The European Union has fined Facebook parent Meta €797.72 million ($843 million) for antitrust violations connected to its online classified service Facebook Marketplace. … This article is an excerpt from The Register

Microsoft Power Pages misconfigurations exposing sensitive data 2024-11-15 at 08:50 By Jessica Lyons NHS supplier that leaked employee info fell victim to fiddly access controls that can leave databases dangling online Private businesses and public-sector organizations are unwittingly exposing millions of people’s sensitive information to the public internet because they misconfigure Microsoft’s Power Pages website

Bitfinex Hacker Sentenced to 5 Years, Guilty of Laundering $10.5 Billion in Bitcoin 2024-11-15 at 08:34 By Ilya Lichtenstein, who pleaded guilty to the 2016 hack of cryptocurrency stock exchange Bitfinex, has been sentenced to five years in prison, the U.S. Department of Justice (DoJ) announced Thursday. Lichtenstein was charged for his involvement in a

Google decides Europe’s political ad rules are too hard to implement at scale 2024-11-15 at 07:33 By Simon Sharwood Will stop accepting ads instead before TTPA comes into force Google has decided the European Union’s Regulation on Transparency and Targeting of Political Advertising will be so hard to comply with it’s better off not trying.…

CISA Flags Critical Palo Alto Network Flaws Actively Exploited in the Wild 2024-11-15 at 07:33 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday warned that two more flaws impacting the Palo Alto Networks Expedition have come under active exploitation in the wild. To that, it has added the vulnerabilities to its Known

Inside The 2024 Security Benchmark Report 2024-11-15 at 07:18 By Rachelle Blair-Frasier, Editor in Chief at Security magazine, presents a selection of findings from The 2024 Security Benchmark Report. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Your favorite security leadership podcasts 2024-11-15 at 07:18 By Security leaders share their favorite industry podcasts. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Airbus A380 flew for 300 hours with tool left inside engine 2024-11-15 at 06:49 By Laura Dobberstein Nothing bad happened – except to the nylon tool An Airbus A380 operated by Australian airline Qantas clocked over 290 hours of flight time despite a tool having been left inside one of its engines, according to a

Lenovo China clones the ThinkPad X1 Carbon with an old, slow, local x86 2024-11-15 at 05:33 By Simon Sharwood Four-core crawler can’t beat current – or ancient – AMDs or Intels Lenovo’s Chinese operation has created a premium laptop based around a slow and out-of-date x86-compatible processor – but at least it’s locally designed.… This

WP Engine revs Automattic lawsuit with antitrust claim 2024-11-15 at 03:33 By Thomas Claburn Revised sueball over WordPress brawl tries Sherman Antitrust Act on for size WP Engine, a hosting provider for websites running open source WordPress software, has revised its legal complaint against rival Automattic and its CEO Matthew Mullenweg to include antitrust allegations.…

Congress ponders underwater alien civilizations, human hybrids, and other unexplained stuff 2024-11-15 at 01:48 By Iain Thomson Because life’s not weird enough in the United States these days Video  The US government has known about aliens since the 1940s, but kept the truth from us all, according to testimony offered at a Wednesday session of

Fortinet patches VPN app flaw that could give rogue users, malware a privilege boost 2024-11-15 at 00:33 By Jessica Lyons Plus a bonus hard-coded local API key A now-patched, high-severity bug in Fortinet’s FortiClient VPN application potentially allows a low-privilege rogue user or malware on a vulnerable Windows system to gain higher privileges from another