Uncategorized

Raspberry Robin Returns: New Malware Campaign Spreading Through WSF Files 2024-04-10 at 16:49 By Cybersecurity researchers have discovered a new Raspberry Robin campaign wave that propagates the malware through malicious Windows Script Files (WSFs) since March 2024. “Historically, Raspberry Robin was known to spread through removable media like USB drives, but over time its distributors […]

Rust rustles up fix for 10/10 critical command injection bug on Windows 2024-04-10 at 16:31 By Connor Jones BatBadBut hits Erlang, Go, Python, Ruby as well Programmers are being urged to update their Rust versions after the security experts working on the language addressed a critical vulnerability that could lead to malicious command injections on

Beware: GitHub’s Fake Popularity Scam Tricking Developers into Downloading Malware 2024-04-10 at 16:13 By Threat actors are now taking advantage of GitHub’s search functionality to trick unsuspecting users looking for popular repositories into downloading spurious counterparts that serve malware. The latest assault on the open-source software supply chain involves concealing malicious code within Microsoft Visual

Virtually and actually, LXC 6 and Incus 6 are here – both LTS versions 2024-04-10 at 15:38 By Liam Proven There’s a new version of Canonical’s LXD too, but its community fork seems to be thriving The community fork of what is now Canonical’s in-house virtualization tool seems to be doing well, with major new

Security leaders weigh in on the White House’s order regarding AI 2024-04-10 at 15:19 By The White House held a press call in regard to the federal government’s approach to AI, and security leaders are sharing their thoughts.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

AI boom is boosting demand even for HDDs, raising prices by up to 20% since Q3 2024-04-10 at 14:33 By Matthew Connatser No computer part, even spinning rust, is safe from the hype cycle Hard drives are now being sold at elevated prices and the sector is even experiencing shortages thanks to AI-driven demand, which

Hands-on Review: Cynomi AI-powered vCISO Platform 2024-04-10 at 14:33 By The need for vCISO services is growing. SMBs and SMEs are dealing with more third-party risks, tightening regulatory demands and stringent cyber insurance requirements than ever before. However, they often lack the resources and expertise to hire an in-house security executive team. By outsourcing security

X fixes URL blunder that could enable convincing social media phishing campaigns 2024-04-10 at 13:46 By Connor Jones Poorly implemented rule allowed miscreants to deceive users with trusted URLs Elon Musk’s X has apparently fixed an embarrassing issue implemented earlier in the week that royally bungled URLs on the social media platform formerly known as

Researchers Uncover First Native Spectre v2 Exploit Against Linux Kernel 2024-04-10 at 13:32 By Cybersecurity researchers have disclosed what they say is the “first native Spectre v2 exploit” against the Linux kernel on Intel systems that could be exploited to read sensitive data from the memory. The exploit, called Native Branch History Injection (BHI), can

SAP transformation program a ‘euphemism’ for job cuts, claims European Works Council 2024-04-10 at 12:48 By Lindsay Clark 8,000 roles affected worldwide, but Germany will bear heaviest losses A SAP transformation program has been slammed by the European Works Council as a mask for making job cuts.… This article is an excerpt from The Register

Webinar: Learn How to Stop Hackers from Exploiting Hidden Identity Weaknesses 2024-04-10 at 12:17 By We all know passwords and firewalls are important, but what about the invisible threats lurking beneath the surface of your systems? Identity Threat Exposures (ITEs) are like secret tunnels for hackers – they make your security way more vulnerable than

Intel CEO suggests AI can help to create a one-person Unicorn 2024-04-10 at 11:33 By Tobias Mann And possibly replace entire business units too Intel Vision  In his Intel Vision Keynote on Tuesday CEO Pat Gelsinger outlined a scenario in which AI will eventually automate entire offices – or potentially even whole businesses.… This article

US-EAST-1 region is not the cloudy crock it’s made out to be, claims AWS EC2 boss 2024-04-10 at 10:31 By Simon Sharwood It’s the region where stuff gets stressed at scale first, says Dave Brown, as he plots variants of Amazon’s Outposts Amazon Web Services’ US-EAST-1 region is not a problem child – it’s the

Chrome Enterprise Premium promises extra security – for a fee 2024-04-10 at 09:31 By Thomas Claburn Paying for browsers is no longer a memory from the 1990s Cloud Next  Hoping to upsell freeloading corporate users of its Chrome browser, Google has announced Chrome Enterprise Premium – which comes with a dash of AI security sauce

Microsoft brings World of Warcraft and other Blizzard titles back to China 2024-04-10 at 08:47 By Laura Dobberstein Battle with NetEase ends, peace deal will see games cross the Great Firewall – in both directions Microsoft’s acquisition of Activision Blizzard has produced an unexpected dividend: the developer’s signature games will once again be playable in

Microsoft Fixes 149 Flaws in Huge April Patch Release, Zero-Days Included 2024-04-10 at 08:19 By Microsoft has released security updates for the month of April 2024 to remediate a record 149 flaws, two of which have come under active exploitation in the wild. Of the 149 flaws, three are rated Critical, 142 are rated Important, three

There was a 72% increase in cloud infrastructure incidents in 2023 2024-04-10 at 07:17 By Identity-based threats are on the rise. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Credential phishing accounted for 91% of active threat reports 2024-04-10 at 07:17 By Email accounts become a frequent attack victim for threat actors. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Critical ‘BatBadBut’ Rust Vulnerability Exposes Windows Systems to Attacks 2024-04-10 at 06:32 By A critical security flaw in the Rust standard library could be exploited to target Windows users and stage command injection attacks. The vulnerability, tracked as CVE-2024-24576, has a CVSS score of 10.0, indicating maximum severity. That said, it only impacts scenarios where batch

Huawei Cloud reveals the dynamic traffic allocation system it uses to cut bandwidth bills 2024-04-10 at 05:46 By Laura Dobberstein Created during COVID to handle video boom and sliced bandwidth costs by 30 percent Huawei has released details of how it manages its own cloud with a dynamic traffic allocation system optimized by machine learning