Uncategorized

ASML could brick Taiwan’s chipmaking machines in case of uninvited guests 2024-05-21 at 16:16 By Dan Robinson If I can’t have you, then no one will! Chipmaking equipment supplier ASML reportedly has the means to remotely disable its advanced machinery in the hands of TSMC, should China invade Taiwan.… This article is an excerpt from […]

SolarMarker Malware Evolves to Resist Takedown Attempts with Multi-Tiered Infrastructure 2024-05-21 at 16:16 By The persistent threat actors behind the SolarMarker information-stealing malware have established a multi-tiered infrastructure to complicate law enforcement takedown efforts, new findings from Recorded Future show. “The core of SolarMarker’s operations is its layered infrastructure, which consists of at least two clusters: a

Good news: The iPad Pro 13 is a bit more repairable 2024-05-21 at 15:46 By Richard Speed Bad news? The Apple Pencil Pro is *not* The Apple iPad Pro 13 has a secret lurking within its sleek lines. A battery that is not nightmarishly hard to replace. Relatively.… This article is an excerpt from The

Report: Generative AI bots are susceptible to user manipulation 2024-05-21 at 15:16 By Generative AI bots can be manipulated by users of any skill level — not just cyber experts. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Five Core Tenets Of Highly Effective DevSecOps Practices 2024-05-21 at 15:16 By One of the enduring challenges of building modern applications is to make them more secure without disrupting high-velocity DevOps processes or degrading the developer experience. Today’s cyber threat landscape is rife with sophisticated attacks aimed at all different parts of the software supply

Nutanix starts thinking outside the VM – with extra help from Dell 2024-05-21 at 15:01 By Simon Sharwood Brings its storage stack to AWS’s EKS but still has time to improve its hypervisor NEXT  Nutanix used its annual NEXT conference to reveal it has started thinking outside the VM by making its storage stack available

With ransomware whales becoming so dominant, would-be challengers ask ‘what’s the point?’ 2024-05-21 at 14:16 By Connor Jones Fewer rivals on the scene as big-gang success soars The number of new ransomware strains in circulation has more than halved over the past 12 months, suggesting there is little need for innovation given the success of

Researchers Uncover Flaws in Python Package for AI Models and PDF.js Used by Firefox 2024-05-21 at 14:16 By A critical security flaw has been disclosed in the llama_cpp_python Python package that could be exploited by threat actors to achieve arbitrary code execution. Tracked as CVE-2024-34359 (CVSS score: 9.7), the flaw has been codenamed Llama Drama by software supply chain

Long-term supported distros’ kernel policies are all wrong 2024-05-21 at 13:31 By Liam Proven Or so says CIQ, which coincidentally has issues obtaining RHEL’s kernel sources Comment  A new hire at Rocky Linux creator CIQ is rocking the LTS-Linux-distro boat – by shining a spotlight on the elephant in the room (or one of the

Windows 11 to Deprecate NTLM, Add AI-Powered App Controls and Security Defenses 2024-05-21 at 13:16 By  Microsoft on Monday confirmed its plans to deprecate NT LAN Manager (NTLM) in Windows 11 in the second half of the year, as it announced a slew of new security measures to harden the widely-used desktop operating system. “Deprecating

BT delays deadline for digital landline switch off date 2024-05-21 at 12:46 By Paul Kunert Telco told they must protect vulnerable in race to turn off Public Switched Telephone Network BT has extended the deadline for migrating customers off the copper-based Public Switched Telephone Network (PSTN) to digital landlines to give more time to vulnerable

Microsoft Power BI users warned over pace of Fabric migration 2024-05-21 at 11:46 By Lindsay Clark Users given less than three months to move to the new platform for some services, analyst points out As Microsoft Build in Seattle kicks off today, one analyst has pointed out that the Redmond software giant is giving users

NextGen Healthcare Mirth Connect Under Attack – CISA Issues Urgent Warning 2024-05-21 at 11:01 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a security flaw impacting NextGen Healthcare Mirth Connect to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The flaw, tracked as CVE-2023-43208 (CVSS score: N/A), concerns a case of unauthenticated remote

Google’s €1B Finnish datacenter expansion to heat the local community 2024-05-21 at 10:31 By Tobias Mann AI might take your job, but you’ll be toasty warm while you starve Google plans to invest €1 billion to expand its datacenter campus in Finland – a move that will both bolster its AI compute capacity and reclaim

“Linguistic Lumberjack” Vulnerability Discovered in Popular Logging Utility Fluent Bit 2024-05-21 at 10:01 By Cybersecurity researchers have discovered a critical security flaw in a popular logging and metrics utility called Fluent Bit that could be exploited to achieve denial-of-service (DoS), information disclosure, or remote code execution. The vulnerability, tracked as CVE-2024-4323, has been codenamed Linguistic Lumberjack by Tenable

Alleged $100M dark-web drug kingpin, 23, arrested 2024-05-21 at 09:31 By Laura Dobberstein DoJ claims he used platform’s last days to extort its users A 23-year-old Taiwanese man was arrested in New York for allegedly running the $100 million global dark web narcotics e-commerce operation known as Incognito Market.… This article is an excerpt from

ScarJo voices anger at OpenAI’s unauthorized sound-alike 2024-05-21 at 09:31 By Simon Sharwood Sam Altman liked the sound of a fictional ScarBot, which makes this all a bit creepy Audio  Movie megastar Scarlett Johansson has complained that one of the voices OpenAI’s ChatGPT uses in voice interactions sounds eerily like her own – despite having

Twenty-three year old alleged dark net drug kingpin arrested 2024-05-21 at 09:16 By Laura Dobberstein DoJ claims he used platform’s last days to extort its users A 23-year old Taiwanese man was arrested in New York for allegedly running the $100 million global dark web narcotics e-commerce operation known as Incognito Market, according to a

Consolidation is coming to corporate security technology 2024-05-21 at 07:16 By Technology within the corporate security industry is ripe for consolidation and a better way to operate. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Big Tech is not much help when fighting a junta, and FOSS doesn’t ride to the rescue 2024-05-21 at 06:46 By Simon Sharwood Opponents of Myanmar’s internet-nobbling military government don’t like when Facebook asks for their real names Big Tech isn’t much help if you’re an activist trying to work against a military junta, and