Uncategorized

China-Linked Hackers Used ROOTROT Webshell in MITRE Network Intrusion 2024-05-07 at 17:01 By The MITRE Corporation has offered more details into the recently disclosed cyber attack, stating that the first evidence of the intrusion now dates back to December 31, 2023. The attack, which came to light last month, singled out MITRE’s Networked Experimentation, Research, and Virtualization Environment […]

Palantir’s CEO calls ‘woke’ a ‘central risk to Palantir, America and the world’ 2024-05-07 at 16:46 By Lindsay Clark Oh, and Alex Karp’s forecasts disappoint the market after strong revenue growth Analytics platform biz Palantir saw its share price dip yesterday despite posting on-the-nose revenue growth of 21 percent year-over-year to reach $634 million in

TSMC fully booked on advanced packaging until 2025 2024-05-07 at 16:16 By Laura Dobberstein TrendForce warns of ‘potential crowding out effects on HBM’ TSMC’s advanced packaging capacity is fully booked for the next two years, thanks to Nvidia and AMD needs, according to reports that echo an earlier earnings call.… This article is an excerpt

Spanish startups say ‘no más’ to Microsoft cloud dominance 2024-05-07 at 15:47 By Richard Speed Group alleges anticompetitive behavior Microsoft is facing a complaint over alleged anticompetitive practices in the Spanish cloud market.… This article is an excerpt from The Register View Original Source

80% of data experts believe AI increases data security challenges 2024-05-07 at 15:01 By A new report reveals that a majority of data experts agree that artificial intelligence is increasing data security challenges. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

New Case Study: The Malicious Comment 2024-05-07 at 14:46 By How safe is your comments section? Discover how a seemingly innocent ‘thank you’ comment on a product page concealed a malicious vulnerability, underscoring the necessity of robust security measures. Read the full real-life case study here.  When is a ‘Thank you’ not a ‘Thank you’? When it’s a

The truth about KEV: CISA’s vuln deadlines good influence on private-sector patching 2024-05-07 at 14:32 By Connor Jones More work to do as most deadlines are missed and worst bugs still take months to fix The deadlines associated with CISA’s Known Exploited Vulnerabilities (KEV) catalog only apply to federal agencies, but fresh research shows they’re

Physical security biz exposes 1.2M files via unprotected database 2024-05-07 at 13:46 By Connor Jones Thousands of guards’ ID cards and CCTV snaps of suspects found online Exclusive  A UK-based physical security business let its guard down, exposing nearly 1.3 million documents via a public-facing database, according to an infosec researcher.… This article is an

Google Simplifies 2-Factor Authentication Setup (It’s More Important Than Ever) 2024-05-07 at 13:31 By Google on Monday announced that it’s simplifying the process of enabling two-factor authentication (2FA) for users with personal and Workspace accounts. Also called, 2-Step Verification (2SV), it aims to add an extra layer of security to users’ accounts to prevent takeover attacks in

A tale of two Chinas: Our tech governance isn’t perfect, but we still get to say no 2024-05-07 at 12:46 By Rupert Goodwins Too many folks who should know better saying info-slurping tactics of Big Tech are just as bad Opinion  Which China do you want? The innovative good global citizen, adding to the storehouse

Russian Operator of BTC-e Crypto Exchange Pleads Guilty to Money Laundering 2024-05-07 at 12:46 By A Russian operator of a now-dismantled BTC-e cryptocurrency exchange has pleaded guilty to money laundering charges from 2011 to 2017. Alexander Vinnik, 44, was charged in January 2017 and taken into custody in Greece in July 2017. He was subsequently extradited to the U.S. in

First 9front release of the year is called DO NOT INSTALL 2024-05-07 at 11:31 By Liam Proven Possibly its most helpful codename yet 9front, the most active project continuing development of the sequel to Unix, Plan 9 from Bell Labs, emitted a new version. We did not follow its advice.… This article is an excerpt

Council claims database pain forced it to drop apostrophes from street names 2024-05-07 at 10:31 By Brandon Vigliarolo What next, trouble at tmill? A row in the UK has locals and council members at odds over apostrophes, and yes – this does actually have a tech angle. … This article is an excerpt from The Register

Building security bridges 2024-05-07 at 07:16 By Farhan Sahito, Partner at Privanova, shares the development of his 20-year career including both physical and cybersecurity. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Ransomware evolves from mere extortion to ‘psychological attacks’ 2024-05-07 at 05:16 By Jessica Lyons Crims SIM swap execs’ kids to freak out their parents, Mandiant CTO says RSAC  Ransomware infections and extortion attacks have become “a psychological attack against the victim organization,” as criminals use increasingly personal and aggressive tactics to force victims to pay

Google, Meta, Spotify break Apple’s device fingerprinting rules – new claim 2024-05-07 at 04:16 By Thomas Claburn And the iOS titan doesn’t seem that bothered with this data leaking out Last week, Apple began requiring iOS developers justify the use of a specific set of APIs that could be used for device fingerprinting. Yet the

Dear Stack Overflow denizens, thanks for helping train OpenAI’s billion-dollar LLMs 2024-05-07 at 03:46 By Thomas Claburn Microsoft-backed super-lab gets access to answers – and code forum gets its own AI Stack Overflow, a community-driven Q&A site, and OpenAI, maker of AI models, have agreed to work to improve each other’s products, the latest deal

Fed-run LockBit site back from the dead and vows to really spill the beans on gang 2024-05-07 at 02:46 By Matthew Connatser After very boring first reveal, this could be the real deal Cops around the world have relaunched LockBit’s website after they shut it down in February – and it’s now counting down the

Semiconductor digital twins to sip $285M from America’s CHIPS Act funding pool 2024-05-07 at 00:32 By Brandon Vigliarolo Fake it until you make it, literally The US government on Monday earmarked $285 million in CHIPS Act funding for the development of semiconductor digital twins.… This article is an excerpt from The Register View Original Source

Mastodon delays fix for link previews DDoSing websites 2024-05-06 at 23:01 By Matthew Connatser Decentralization is great, except when many servers grab data from a site Mastodon has pushed back an update that would have addressed the issue of link previews creating accidental distributed denial of service (DDoS) attacks.… This article is an excerpt from