Uncategorized

Software innovation just isn’t what it used to be, and Moxie Marlinspike blames Agile 2024-08-09 at 17:16 By Brandon Vigliarolo Layers of abstraction and speedy development have left engineers unable to understand what lies beneath black hat  There’s a rot at the heart of modern software development that’s destroying innovation, and infosec legend Moxie Marlinspike […]

New Flaws in Sonos Smart Speakers Allow Hackers to Eavesdrop on Users 2024-08-09 at 17:16 By Cybersecurity researchers have uncovered weaknesses in Sonos smart speakers that could be exploited by malicious actors to clandestinely eavesdrop on users. The vulnerabilities “led to an entire break in the security of Sonos’s secure boot process across a wide

Pro-Iran groups lay groundwork for ‘chaos and violence’ as US election meddling intensifies 2024-08-09 at 16:16 By Connor Jones Political officials, advisors targeted in cyber attacks as fake news sites deliver lefty zingers Microsoft says Iran’s efforts to influence the November US presidential election have gathered pace recently and there are signs that point toward

NASA’s NEOWISE asteroid spotter turned off for the final time 2024-08-09 at 15:46 By Richard Speed A mission that was supposed to last for less than a year went on for more than a decade NASA’s comeback kid, the NEOWISE spacecraft, was this week shut down for the final time as its transmitter was turned

Report reveals 10% increase in the exploitation of old CVEs 2024-08-09 at 15:16 By The exploitation of old common vulnerabilities and exposures (CVEs) rose by 10% from 2023 to 2024. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Core Python developer suspended for three months 2024-08-09 at 15:01 By Thomas Claburn Code of Conduct violations include allegations that posts created ‘atmosphere of FUD’ The Python Steering Council has decided to suspend a core Python developer for three months for alleged Code of Conduct violations.… This article is an excerpt from The Register View

Apple tries again to make EU DMA officials happy – with new fees 2024-08-09 at 14:16 By Thomas Claburn Meanwhile, UK watchdog contemplates breaking Cupertino’s WebKit rule Apple this week revised its alternative contractual terms for devs selling apps in the European Union – a revision that was immediately dismissed by critics as more “malicious

CMA launches full blown probe of Amazon’s Anthropic tie-up 2024-08-09 at 13:31 By Paul Kunert Poor cloud titans, just trying to give a helping hand to AI startups valued at billions of dollars Britain’s competition regulator is embarking on a full blown deep dive into Amazon’s multi-billion dollar investments in Anthropic to ascertain if the

Intel’s processor failures: A cautionary tale of business vs engineering 2024-08-09 at 11:46 By Steven J. Vaughan-Nichols Chipzilla taking some punches but could it stay down? Opinion  Just like Boeing, once upon a time, Intel was the darling of the engineering world. Both companies were the premier tech companies in their day, but those days

DOJ Charges Nashville Man for Helping North Koreans Get U.S. Tech Jobs 2024-08-09 at 10:32 By The U.S. Department of Justice (DoJ) on Thursday charged a 38-year-old individual from Nashville, Tennessee, for allegedly running a “laptop farm” to help get North Koreans remote jobs with American and British companies. Matthew Isaac Knoot is charged with

What’s going on with AMD funding a CUDA translation layer, then nuking it? 2024-08-09 at 09:32 By Tobias Mann We guess the House of Zen wants all you HIP kids to ROCm out with its own runtimes instead Analysis  AMD’s legal team appears to have clawed back control of much of the ZLUDA project’s code

CISA Warns of Hackers Exploiting Legacy Cisco Smart Install Feature 2024-08-09 at 09:16 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has disclosed that threat actors are abusing the legacy Cisco Smart Install (SMI) feature with the aim of accessing sensitive data. The agency said it has seen adversaries “acquire system configuration files by

It’s 2024 and we’re just getting round to stopping browsers insecurely accessing 0.0.0.0 2024-08-09 at 08:46 By Jessica Lyons Can’t reach someone’s private server on localhost from outside? No problem A years-old security oversight has been addressed in basically all web browsers – Chromium-based browsers, including Microsoft Edge and Google Chrome, WebKit browsers like Apple’s

Leading by example 2024-08-09 at 07:16 By Industry leaders discuss their approaches to security and creating a positive culture from the top down. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Will practitioner make perfect? 2024-08-09 at 07:16 By Security leaders discuss the future of ASIS International as new CEO is announced. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

HP Inc loves China – but wants to reduce the risks it presents 2024-08-09 at 07:01 By Simon Sharwood Amid reports that PC production will shift elsewhere, supply chain boss emphasizes agility HP Inc loves China and wants to keep making and designing products there, but also loves the idea of diversifying its operations to

Report blasts Boeing and NASA over shoddy quality that’s delayed SLS blastoff 2024-08-09 at 04:48 By Iain Thomson Space Launch System overspent, underbuilt, and overdue, finds government probe Boeing and NASA have come in for scathing criticism from the US Federal Trade Commission, which examined the next generation of Space Launch System rockets.… This article

Hello? Are you talking on a Cisco SPA300 or SPA500 IP phone? Now’s the time to junk ’em 2024-08-09 at 03:47 By Iain Thomson Multiple critical flaws found and they won’t be fixed A boffin from British defence contractor BAE has found three critical flaws in Cisco’s Small Business SPA300 and SPA500 IP phones –

Ransomware groups are better at web app security than you, says researcher 2024-08-09 at 02:33 By Brandon Vigliarolo Could we please start taking this seriously? Black Hat  One would hope that, after years of telling businesses to secure their systems, enterprises would have better web app security than cybercriminals do. But research presented at Black