Uncategorized

Warren Buffett voices AI fears, likens tech to atom bomb 2024-05-06 at 21:47 By Tobias Mann ‘Used in a pro-social way, it’s got terrific benefits to society. But, I don’t know how you make sure that happens’ Video  You can add Berkshire Hathaway chief Warren Buffett to the list of folks worried about the implications […]

Cheyenne supercomputer sells at auction for just $480K 2024-05-06 at 20:46 By Brandon Vigliarolo And you thought consumer electronics suffered from depreciation The Cheyenne Supercomputer, a 5.34 peak PFLOPS behemoth that was once one of the fastest systems in the world, has just been sold at auction for $480,085. … This article is an excerpt from

Consultant charged over $1.5M extortion scheme against IT giant 2024-05-06 at 20:05 By Connor Jones Accused of stealing data after losing his job A cybersecurity expert could face a 20-year prison sentence after being accused of allegedly trying to extort a multinational IT infrastructure services biz out of $1.5 million.… This article is an excerpt

Misconfigurations drive 80% of security exposures 2024-05-06 at 19:03 By An analysis of more than 40 million exposures provides a view the current exposure landscape, revealing 80% are driven by misconfigurations. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Three years on from Biden infosec EO, and we’re still trying to check all the boxes 2024-05-06 at 18:17 By Brandon Vigliarolo It’s taking time, but isn’t a dead issue, US Government Accountability Office security director Marisol Cruz Cain says interview  It’s been several years since President Biden signed an executive order to improve America’s

Critical Tinyproxy Flaw Opens Over 50,000 Hosts to Remote Code Execution 2024-05-06 at 17:46 By More than 50% of the 90,310 hosts have been found exposing a Tinyproxy service on the internet that’s vulnerable to a critical unpatched security flaw in the HTTP/HTTPS proxy tool. The issue, tracked as CVE-2023-49606, carries a CVSS score of 9.8 out of

Holistic security design 2024-05-06 at 17:31 By Security leaders can mitigate vulnerability, reduce risk and keep people safe with thoughtful security design. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Trustwave Takes Home Global Infosec Award for 2024 Best Solution Managed Detection and Response (MDR) Service Provider 2024-05-06 at 17:16 By For the second consecutive year, Cyber Defense Magazine honored Trustwave with a 2024 Global InfoSec Award for Best Solution Managed Detection and Response (MDR) Service Provider. This article is an excerpt from Trustwave Blog View Original

Is political polarization affecting your security program? 2024-05-06 at 17:16 By Top security leaders discuss management strategies to navigate political polarization in an organization. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

China-Linked Hackers Suspected in ArcaneDoor Cyberattacks Targeting Network Devices 2024-05-06 at 17:02 By The recently uncovered cyber espionage campaign targeting perimeter network devices from several vendors, including Cisco, may have been the work of China-linked actors, according to new findings from attack surface management firm Censys. Dubbed ArcaneDoor, the activity is said to have commenced around July 2023, with

CISA says ‘no more’ to decades-old directory traversal bugs 2024-05-06 at 16:46 By Connor Jones Recent attacks on healthcare thrust infosec agency into alert mode CISA is calling on the software industry to stamp out directory traversal vulnerabilities following recent high-profile exploits of the 20-year-old class of bugs.… This article is an excerpt from The

Robinhood crypto business slapped with SEC Wells Notice 2024-05-06 at 16:03 By Cointelegraph by Zoltan Vardai The SEC is planning to file an “enforcement action” against Robinhood’s cryptocurrency business, according to the Wells Notice. This article is an excerpt from Cointelegraph.com News View Original Source

Guardians of the Gateway: Identity and Access Management Best Practices 2024-05-06 at 16:02 By David Broggy This is Part 10 in my ongoing project to cover 30 cybersecurity topics in 30 weekly blog posts. The full series can be found here. This article is an excerpt from SpiderLabs Blog View Original Source

It Costs How Much?!? The Financial Pitfalls of Cyberattacks on SMBs 2024-05-06 at 15:01 By Cybercriminals are vipers. They’re like snakes in the grass, hiding behind their keyboards, waiting to strike. And if you’re a small- and medium-sized business (SMB), your organization is the ideal lair for these serpents to slither into.  With cybercriminals becoming more

Xiaomi Android Devices Hit by Multiple Flaws Across Apps and System Components 2024-05-06 at 13:31 By Multiple security vulnerabilities have been disclosed in various applications and system components within Xiaomi devices running Android. “The vulnerabilities in Xiaomi led to access to arbitrary activities, receivers and services with system privileges, theft of arbitrary files with system privileges, [and]

Undersea bit barn biz offers 90-day trial of submerged server system 2024-05-06 at 11:31 By Dan Robinson Testing platform for those ‘unfamiliar with the subsea environment’ Subsea Cloud is offering potential customers the chance to try out its underwater datacenter facilities for up to 90 days before making any further commitments, in a bid to

New ‘Cuckoo’ Persistent macOS Spyware Targeting Intel and Arm Macs 2024-05-06 at 11:31 By Cybersecurity researchers have discovered a new information stealer targeting Apple macOS systems that’s designed to set up persistence on the infected hosts and act as a spyware. Dubbed Cuckoo by Kandji, the malware is a universal Mach-O binary that’s capable of running on

Ten years ago Microsoft bought Nokia’s phone unit – then killed it as a tax write-off 2024-05-05 at 21:01 By Iain Thomson When bad management meets bad software, even great hardware is useless Retrospective  Ten years ago Microsoft absorbed the handset division of Nokia. The world’s biggest operating systems vendor was going mobile in a

End-to-end encryption may be the bane of cops, but they can’t close that Pandora’s Box 2024-05-05 at 16:46 By Brandon Vigliarolo Internet Society’s Robin Wilton tells us the war on privacy won’t be won by the plod interview  Police can complain all they like about strong end-to-end encryption making their jobs harder, but it doesn’t

Dating apps kiss’n’tell all sorts of sensitive personal info 2024-05-04 at 21:16 By Jessica Lyons Privacy Not Included label slapped on 22 of 25 top lonely-hearts corners Dating apps ask people to disclose all kinds of personal information in the hope of them finding love, or at least a hook-up.… This article is an excerpt