Uncategorized

How did a CrowdStrike config file crash millions of Windows computers? We take a closer look 2024-07-24 at 00:02 By Thomas Claburn Maybe next time some staged rollouts? A bit of QA too? Analysis  Last week, at 0409 UTC on July 19, 2024, antivirus maker CrowdStrike released an update to its widely used Falcon platform […]

FTC opens investigation into ‘surveillance pricing’ that gouges consumers 2024-07-23 at 21:31 By Brandon Vigliarolo Ever shop in an incognito window to avoid paying more? This one’s for you The US Federal Trade Commission (FTC) has launched an investigation into “surveillance pricing,” a phenomenon likely familiar to anyone who’s bought something in an incognito browser

Administrators have update lessons to learn from the CrowdStrike outage 2024-07-23 at 20:31 By Richard Speed How could this happen to us? We were supposed to be two versions behind? If administrators have learned anything from the CrowdStrike chaos, it’s to understand exactly what delayed updates mean – or don’t mean – in the anti-malware

Sam Altman’s basic income experiment finds that money can indeed buy happiness 2024-07-23 at 20:01 By Brandon Vigliarolo But not necessarily health The results of the largest universal basic income (UBI) trial program in the United States – this one backed by billionaire Sam Altman, no less – are in and entirely unsurprising.… This article

US Secret Service Director Kimberly Cheatle resigns 2024-07-23 at 19:46 By Kimberly Cheatle resigns following the recent assassination attempt against former president Donald Trump.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Unchecked AI threatens consumer privacy — Regulation is crucial 2024-07-23 at 19:16 By As AI becomes increasingly embedded into society, there is a pressing need for regulatory guardrails and governance policies to protect consumer privacy and data rights. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Kamala Harris has a long history with Silicon Valley that could help – or hurt 2024-07-23 at 19:01 By Brandon Vigliarolo The presumptive Democratic nominee has gone back and forth with Big Tech Analysis  With Joe Biden out of the US Presidential race, his VP Kamala Harris is poised to become the Democratic Party’s nominee,

Cybercrooks spell trouble with typosquatting domains amid CrowdStrike crisis 2024-07-23 at 18:31 By Connor Jones Latest trend follows various malware campaigns that began just hours after IT calamity Thousands of typosquatting domains are now registered to exploit the desperation of IT admins still struggling to recover from last week’s CrowdStrike outage, researchers say.… This article

Alphabet’s reported $23B bet on Wiz fizzles out 2024-07-23 at 17:46 By Richard Speed Cybersecurity outfit to go its own way to IPO and $1B ARR On the day of Alphabet’s Q2 earnings call, cybersecurity firm Wiz has walked from a $23 billion takeover bid by Google’s parent company.… This article is an excerpt from

Failure to follow proper procedures caused US-wide AT&T outage, FCC says 2024-07-23 at 17:01 By Dan Robinson America’s second largest wireless carrier taking steps to prevent a repeat of 12-hour downtime in February An AT&T cellular outage lasting more than 12 hours that prevented US customers from accessing services including 911 was caused by misconfigured

Chinese Hackers Target Taiwan and US NGO with MgBot Malware 2024-07-23 at 16:31 By Organizations in Taiwan and a U.S. non-governmental organization (NGO) based in China have been targeted by a Beijing-affiliated state-sponsored hacking group called Daggerfly using an upgraded set of malware tools. The campaign is a sign that the group “also engages in

Now as many as 10,000 SAP jobs to be hit by restructure 2024-07-23 at 16:16 By Lindsay Clark Revenue and underlying profit please markets in Q2 as German software giant retains focus on costs SAP has expanded the number of jobs affected by its restructuring program by up to 20 percent after generating higher revenue

CrowdStrike CEO summoned to explain epic fail to US Homeland Security 2024-07-23 at 15:31 By Richard Speed Boss faces grilling over disatrous software snafu The US House Committee on Homeland Security has requested public testimony from CrowdStrike CEO George Kurtz in the wake of the chaos caused by a faulty update.… This article is an

The ‘2024 Fraudlympics’ highlight rising trends in global fraud 2024-07-23 at 15:16 By An awareness campaign displays fraud data across a range of countries, industries and categories.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

New ICS Malware ‘FrostyGoop’ Targeting Critical Infrastructure 2024-07-23 at 14:46 By Cybersecurity researchers have discovered what they say is the ninth Industrial Control Systems (ICS)-focused malware that has been used in a disruptive cyber attack targeting an energy company in the Ukrainian city of Lviv earlier this January. Industrial cybersecurity firm Dragos has dubbed the

Arch-based CachyOS promises speed but trips over its laces 2024-07-23 at 14:31 By Liam Proven Strictly for performance fiends with ultra-modern kit who want a distro to match Hands-on  CachyOS is a performance-optimized rebuild of Arch Linux, with a simpler installer and dozens of desktops and options to tweak. Stable reliability, not so much.… This

ESA’s meteorite bricks hit Lego stores, but don’t get your wallet out just yet 2024-07-23 at 13:46 By Richard Speed In space, no one can hear you scream when you step on one ESA’s space brick has landed in LEGO® stores, but you can’t buy the 3D-printed items to add to your own creations.… This

How to Securely Onboard New Employees Without Sharing Temporary Passwords 2024-07-23 at 13:31 By The initial onboarding stage is a crucial step for both employees and employers. However, this process often involves the practice of sharing temporary first-day passwords, which can expose organizations to security risks. Traditionally, IT departments have been cornered into either sharing

Magento Sites Targeted with Sneaky Credit Card Skimmer via Swap Files 2024-07-23 at 13:31 By Threat actors have been observed using swap files in compromised websites to conceal a persistent credit card skimmer and harvest payment information. The sneaky technique, observed by Sucuri on a Magento e-commerce site’s checkout page, allowed the malware to survive

Ukrainian Institutions Targeted Using HATVIBE and CHERRYSPY Malware 2024-07-23 at 13:31 By The Computer Emergency Response Team of Ukraine (CERT-UA) has alerted of a spear-phishing campaign targeting a scientific research institution in the country with malware known as HATVIBE and CHERRYSPY. The agency attributed the attack to a threat actor it tracks under the name