Uncategorized

How threat hunting secures organizations: A proactive security strategy 2024-05-20 at 15:16 By Threat hunting is not a set-it-and-forget-it operation; it is an ongoing journey that adapts as the threat landscape shifts.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Defending Your Commits From Known CVEs With GitGuardian SCA And Git Hooks 2024-05-20 at 15:16 By All developers want to create secure and dependable software. They should feel proud to release their code with the full confidence they did not introduce any weaknesses or anti-patterns into their applications. Unfortunately, developers are not writing their own code for

HMRC must grow ‘intelligent client’ function to sort out post-Brexit tech issues – watchdog 2024-05-20 at 15:01 By Lindsay Clark Already delayed, IBM and Deloitte’s ‘Single Trade Window’ presents SaaSy challenge’s to tax collector The UK’s public spending watchdog is warning that the nation’s tax collector needs be become an “intelligent client” in its handling

Cyber Criminals Exploit GitHub and FileZilla to Deliver Cocktail Malware 2024-05-20 at 14:02 By A “multi-faceted campaign” has been observed abusing legitimate services like GitHub and FileZilla to deliver an array of stealer malware and banking trojans such as Atomic (aka AMOS), Vidar, Lumma (aka LummaC2), and Octo by impersonating credible software like 1Password, Bartender

Slack tweaks its principles in response to user outrage at AI slurping 2024-05-20 at 13:46 By Richard Speed Several people are typing. And something might be learning… Salesforce division Slack has responded to criticism by users outraged that its privacy principles allowed the messaging service to slurp customer data for AI training unless specifically told

British Library’s candid ransomware comms driven by ’emotional intelligence’ 2024-05-20 at 12:46 By Connor Jones It quickly realized ‘dry’ progress updates weren’t cutting it CyberUK  Emotional intelligence was at the heart of the British Library’s widely hailed response to its October ransomware attack, according to CEO Roly Keating.… This article is an excerpt from The

So you’ve built the best tablet, Apple. Show us why it matters 2024-05-20 at 11:46 By Rupert Goodwins Has Cupertino been trolling us all along? Opinion  Apple! What the hell were you smoking? How can a market leader worth $2.9 trillion make such a massive marketing mistake as the advert for the latest iPad?… This

Chinese telco gear may become verboten on German networks 2024-05-20 at 09:31 By Laura Dobberstein Industry reportedly pressuring digital ministry not to cut the cord Germany may soon remove Huawei and ZTE equipment from its 5G networks, according to media reports.… This article is an excerpt from The Register View Original Source

Latrodectus Malware Loader Emerges as IcedID’s Successor in Phishing Campaigns 2024-05-20 at 09:31 By Cybersecurity researchers have observed a spike in email phishing campaigns starting early March 2024 that delivers Latrodectus, a nascent malware loader believed to be the successor to the IcedID malware. “These campaigns typically involve a recognizable infection chain involving oversized JavaScript files

Google Cloud shows it can break things for lots of customers – not just one at a time 2024-05-20 at 07:46 By Simon Sharwood Deleted about 40 old networks, causing late Friday fun In the week after its astounding deletion of Australian pension fund UniSuper’s entire account, you might think Google Cloud would be on

15 companies account for 62% of global attack surface 2024-05-20 at 07:01 By A concentration of cyber risk and an increase in the exploitation of third-party vulnerabilities may pose a threat to national security and the global economy.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Among AI infrastructure hopefuls, Qualcomm has become an unlikely ally 2024-05-19 at 19:31 By Tobias Mann The enemy of my enemy is my best friend Analysis  With its newly formed partnership with Arm server processor designer Ampere Computing, Qualcomm is slowly establishing itself as AI infrastructure startups’ best friend.… This article is an excerpt from

Chinese Nationals Arrested for Laundering $73 Million in Pig Butchering Crypto Scam 2024-05-19 at 13:31 By The U.S. Department of Justice (DoJ) has charged two arrested Chinese nationals for allegedly orchestrating a pig butchering scam that laundered at least $73 million from victims through shell companies. The individuals, Daren Li, 41, and Yicheng Zhang, 38,

Grandoreiro Banking Trojan Resurfaces, Targeting Over 1,500 Banks Worldwide 2024-05-19 at 11:16 By The threat actors behind the Windows-based Grandoreiro banking trojan have returned in a global campaign since March 2024 following a law enforcement takedown in January. The large-scale phishing attacks, likely facilitated by other cybercriminals via a malware-as-a-service (MaaS) model, target over 1,500 banks across

An attorney says she saw her library reading habits reflected in mobile ads. That’s not supposed to happen 2024-05-18 at 20:16 By Thomas Claburn Follow us down this deep rabbit hole of privacy policy after privacy policy Feature  In April, attorney Christine Dudley was listening to a book on her iPhone while playing a game

Gawd, after that week, we wonder what’s next for China and the Western world 2024-05-18 at 15:46 By Iain Thomson For starters: Crypto, import tariffs, and Microsoft shipping out staff Kettle  It’s been a fairly troubling week in terms of the relationship between China and the Western world.… This article is an excerpt from The

Gentoo and NetBSD ban ‘AI’ code, but Debian doesn’t – yet 2024-05-18 at 11:46 By Liam Proven The problem isn’t just that LLM-bot generated code is bad – it’s where it came from Comment  The Debian project has decided against joining Gentoo Linux and NetBSD in rejecting program code generated with the assistance of LLM

How two brothers allegedly swiped $25M in a 12-second Ethereum heist 2024-05-18 at 09:31 By Matthew Connatser Feds scoff at blockchain integrity while software bug said to have been at heart of the matter The US Department of Justice has booked two brothers on allegations that they exploited open source software used in the Ethereum

Aussie cops probe MediSecure’s ‘large-scale ransomware data breach’ 2024-05-18 at 02:46 By Jessica Lyons Throw another healthcare biz on the barby, mate Australian prescriptions provider MediSecure is the latest healthcare org to fall victim to a ransomware attack, with crooks apparently stealing patients’ personal and health data.… This article is an excerpt from The Register

Leasing North American datacenters before they’re finished is so hot right now 2024-05-18 at 01:01 By Matthew Connatser Yup, demand’s that strong Since 2023, the leasing rate for datacenters in North America that haven’t even been fully built yet has shot up and now stands at 84 percent for the first quarter of this year.…