Uncategorized

Popular Rust Crate liblzma-sys Compromised with XZ Utils Backdoor Files 2024-04-12 at 18:46 By “Test files” associated with the XZ Utils backdoor have made their way to a Rust crate known as liblzma-sys, new findings from Phylum reveal. liblzma-sys, which has been downloaded over 21,000 times to date, provides Rust developers with bindings to the liblzma implementation, an underlying library […]

Microsoft breach allowed Russian spies to steal emails from US government 2024-04-12 at 17:46 By Dan Robinson Affected federal agencies must comb through mails, reset API keys and passwords The US Cybersecurity and Infrastructure Security Agency (CISA) warns that Russian spies who gained access to Microsoft’s email system were able to steal sensitive data, including

Microsoft gives Hyper-V ceilings a Herculean hike 2024-04-12 at 16:31 By Simon Sharwood Windows Server 2025 will let you run a VM with 2,048 vCPUs, 240 TB RAM, and 68 network adapters Microsoft has announced new scalability ceilings for its Hyper-V hypervisor.… This article is an excerpt from The Register View Original Source

IT biz trials gadget deliveries by drone to sidestep traffic and emissions 2024-04-12 at 15:46 By Dan Robinson It’s a bird! It’s a plane! It’s a hard drive! A UK IT maintenance outfit is testing out drones to deliver equipment to customers, claiming this will help with sustainability measures of all things.… This article is

Report finds that only 5% of businesses have a cyber expert 2024-04-12 at 15:16 By Although cybersecurity is vital to an organization’s financial success, many companies do not have a designated cyber expert.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Code Keepers: Mastering Non-Human Identity Management 2024-04-12 at 15:01 By Identities now transcend human boundaries. Within each line of code and every API call lies a non-human identity. These entities act as programmatic access keys, enabling authentication and facilitating interactions among systems and services, which are essential for every API call, database query, or storage

UK county council misses deadline for £7.3M RISE with SAP system launch 2024-04-12 at 14:46 By Lindsay Clark Gloucestershire reluctant to set new date in S/4HANA migration saga The UK’s Gloucestershire County Council has failed to introduce its new £7.3 million ($9.3 million) cloud-based SAP system in time for the new financial year, as its

GCC 14 dropping IA64 support is final nail in the coffin for Itanium architecture 2024-04-12 at 13:46 By Liam Proven Linux kernel cut it loose, now leading FOSS compiler lands depth-charge on Itanic GNU Compiler Collection (GCC) 14 should appear any month now, and when it does, it will no longer build binaries for IA64

Zero-Day Alert: Critical Palo Alto Networks PAN-OS Flaw Under Active Attack 2024-04-12 at 13:16 By Palo Alto Networks is warning that a critical flaw impacting its PAN-OS software used in its GlobalProtect gateways is being exploited in the wild. Tracked as CVE-2024-3400, the issue has a CVSS score of 10.0, indicating maximum severity. “A command injection

Iranian MuddyWater Hackers Adopt New C2 Tool ‘DarkBeatC2’ in Latest Campaign 2024-04-12 at 13:16 By The Iranian threat actor known as MuddyWater has been attributed to a new command-and-control (C2) infrastructure called DarkBeatC2, becoming the latest such tool in its arsenal after SimpleHarm, MuddyC3, PhonyC2, and MuddyC2Go. “While occasionally switching to a new remote administration tool or changing their

Linux Foundation is leading fight against fauxpen source 2024-04-12 at 12:46 By Steven J. Vaughan-Nichols Shifts its transmission from vendor neutral into open source gear Opinion  Since its founding, the Linux Foundation has been a vendor-neutral supporter of Linux and open source software. Now, though, it’s actively promoting such open source projects as OpenTofu and

British watchdog has ‘real concerns’ about the staggering love-in between cloud giants and AI upstarts 2024-04-12 at 09:31 By Thomas Claburn Billions in investment? Yeeeah, right – looks more like ensuring only select few developers thrive The UK’s competition watchdog sniffed around the AI industry with a bit more interest than usual on Thursday at

Sneaky Credit Card Skimmer Disguised as Harmless Facebook Tracker 2024-04-12 at 09:01 By Cybersecurity researchers have discovered a credit card skimmer that’s concealed within a fake Meta Pixel tracker script in an attempt to evade detection. Sucuri said that the malware is injected into websites through tools that allow for custom code, such as WordPress plugins like Simple

French issue alerte rouge after local governments knocked offline by cyber attack 2024-04-12 at 08:47 By Jessica Lyons Embarrassing, as its officials are in the US to discuss Olympics cyber threats Several French municipal governments’ services have been knocked offline following a “large-scale cyber attack” on their shared servers.… This article is an excerpt from

Apple stops warning of ‘state-sponsored’ attacks, now alerts about ‘mercenary spyware’ 2024-04-12 at 08:01 By Laura Dobberstein Report claims India’s government, which is accused of using Pegasus at home, was displeased Apple has made a significant change to the wording of its threat notifications, opting not to attribute attacks to a specific source or perpetrator,

U.S. Federal Agencies Ordered to Hunt for Signs of Microsoft Breach and Mitigate Risks 2024-04-12 at 07:46 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday issued an emergency directive (ED 24-02) urging federal agencies to hunt for signs of compromise and enact preventive measures following the recent compromise of Microsoft’s systems that

Mentorship key in building security careers 2024-04-12 at 07:16 By Security leaders share the impact mentorship has had on furthering their careers in the industry. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

When solution providers host industry conferences 2024-04-12 at 07:16 By How to choose which security conferences to attend, exhibit at, or present at depends on many different factors. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Kristine Raad joins General Motors as Chief Security Officer 2024-04-12 at 07:16 By Kristine Raad has announced a new position as a Chief Security Officer at General Motors. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

VMware’s end-user compute products probably have a new brand: Omnissa 2024-04-12 at 06:16 By Simon Sharwood As the rest of Virtizilla’s users face a pause in support and education services due to apparent SAP-to-Oracle migration VMware’s end user compute products appear likely to be rebranded as Omnissa after being sold off.… This article is an