Uncategorized

US indicts two over socially engineered $230M+ crypto heist 2024-09-20 at 20:32 By Connor Jones Just one victim milked of nearly a quarter of a billion bucks Two individuals are in cuffs and facing serious charges in connection to a major theft of cryptocurrency worth more than $230 million from a single victim.… This article

Majority of Redis users considering alternatives after less permissive licensing move 2024-09-20 at 19:47 By Lindsay Clark Valkey leads interest in FOSS alternatives after database slinger tightens terms Around 70 percent of Redis users are considering alternatives after the database company made a shift away from permissive open source licensing.… This article is an excerpt

Configuration flaw puts ServiceNow Knowledge Base articles at risk 2024-09-20 at 19:16 By More than 1,000 ServiceNow Knowledge Base articles were found to be misconfigured. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Ivanti patches exploited admin command execution flaw 2024-09-20 at 18:46 By Connor Jones Fears over chained attacks affecting EOL product The US Cybersecurity and Infrastructure Security Agency (CISA) just added the latest Ivanti weakness to its Known Exploited Vulnerability (KEV) catalog, a situation sure to annoy some – given that it’s yet another path traversal

Microsoft on a roll for terrible rebranding with Windows App 2024-09-20 at 17:46 By Richard Speed If you hadn’t guessed, that’s the artist formerly known as Remote Desktop Microsoft’s breathtaking ability to rename things badly carries on with the Windows App, a hub to stream Windows from a variety of sources.… This article is an

Europol Shuts Down Major Phishing Scheme Targeting Mobile Phone Credentials 2024-09-20 at 17:01 By Law enforcement authorities have announced the takedown of an international criminal network that leveraged a phishing platform to unlock stolen or lost mobile phones. The phishing-as-a-service (PhaaS) platform, called iServer, is estimated to have claimed more than 483,000 victims globally, led

Datacenters bleed watts and cash – all because they’re afraid to flip a switch 2024-09-20 at 16:31 By Tobias Mann Flip on OS-level governors and power profiles, cut energy use by ’25 – 50 percent’ Datacenter power consumption has become a major concern in recent years, as utilities struggle to keep up with growing demand

FTC investigates video streaming and social media for data collection 2024-09-20 at 16:06 By A report found that companies collected and could indefinitely retain troves of data, including information from data brokers, and about both users and non-users of their platforms.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original

Europe’s largest city council: Oracle ERP allocated £2B in transactions to wrong year 2024-09-20 at 15:31 By Lindsay Clark Workers forced to manually correct setup that struggles to produce auditable accounts after customizations The Oracle finance system implemented by stricken Birmingham City Council allocated £2 billion ($2.65 billion) in cash to the wrong financial year,

Jerry J. Tavares appointed as OSAC Executive Director 2024-09-20 at 15:16 By The Overseas Security Advisory Council (OSAC) has announced the appointment of a new Executive Director, Supervisory Special Agent Jerry J. Tavares. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Passwordless AND Keyless: The Future of (Privileged) Access Management 2024-09-20 at 14:46 By In IT environments, some secrets are managed well and some fly under the radar. Here’s a quick checklist of what kinds of secrets companies typically manage, including one type they should manage: Passwords [x] TLS certificates [x] Accounts [x] SSH keys ???

Disney kicks Slack to the curb, looks to Microsoft Teams for a happily ever after 2024-09-20 at 14:31 By Richard Speed Definitely not punishment for someone leaking internal data There’s no fairy tale ending for Slack at entertainment behemoth Disney following reports that the Salesforce-owned messaging service will be ditched in favor of Microsoft Teams.…

Iranian APT UNC1860 Linked to MOIS Facilitates Cyber Intrusions in Middle East 2024-09-20 at 13:46 By An Iranian advanced persistent threat (APT) threat actor likely affiliated with the Ministry of Intelligence and Security (MOIS) is now acting as an initial access facilitator that provides remote access to target networks. Google-owned Mandiant is tracking the activity

While HashiCorp plays license roulette, Virter rolls out to rescue FOSS VM testing 2024-09-20 at 13:32 By Liam Proven BSL shenanigans continue to make waves Open Source Summit Europe 2024  Virter is a useful little tool if you often create – and then remove – VMs to try stuff. It’s arguably carried on the ripples

Cybercrooks strut away with haute couture Harvey Nichols data 2024-09-20 at 12:31 By Connor Jones Nothing high-end about the sparsely detailed, poorly publicized breach High-end British department store Harvey Nichols is writing to customers to confirm some of their data was exposed in a recent cyberattack.… This article is an excerpt from The Register View

Green recycling goals? Pending EU directive could hammer used mobile market 2024-09-20 at 11:46 By Paul Kunert Bloc’s USB-C rules forecast to disrupt supply, barring 8 million imported phones from reaching Europe’s ports The impending Radio Equipment Directive in the EU is forecast to render eight million used smartphones, or two in five units, no

Chrome Users Can Now Sync Passkeys Across Devices with New Google PIN Feature 2024-09-20 at 10:46 By Google on Thursday unveiled a Password Manager PIN to let Chrome web users sync their passkeys across Windows, macOS, Linux, ChromeOS, and Android devices. “This PIN adds an additional layer of security to ensure your passkeys are end-to-end