Uncategorized

ZenHammer comes down on AMD Zen 2 and 3 systems 2024-03-25 at 18:17 By Thomas Claburn Boffins demonstrate Rowhammer memory meddling on AMD DDR4 hardware ZenHammer would be the perfect name for a heavy metal band, but alas, it’s an AMD-focused variant of the decade-old Rowhammer attack that compromises computers by flipping bits of memory.… […]

Tech trade union confirms cyberattack behind IT, email outage 2024-03-25 at 17:47 By Connor Jones Systems have been pulled offline as a precaution Exclusive  The Communications Workers Union (CWU), which represents hundreds of thousands of employees in sectors across the UK economy including tech and telecoms, is currently working to mitigate a cyberattack.… This article

Mozilla fixes $100,000 Firefox zero-days following two-day hackathon 2024-03-25 at 17:17 By Connor Jones Users may have to upgrade twice to protect their browsers Mozilla has swiftly patched a pair of critical Firefox zero-days after a researcher debuted them at a Vancouver cybersec competition.… This article is an excerpt from The Register View Original Source

GoFetch security exploit can’t be disabled on M1 and M2 Apple chips 2024-03-25 at 16:47 By Matthew Connatser For now, cryptographic work should be run on slower Icestorm cores The GoFetch vulnerability found on Apple M-series and Intel Raptor Lake CPUs has been further unpacked by the researchers who first disclosed it.… This article is

Boeing top brass stand down amid safety turbulence 2024-03-25 at 16:17 By Brandon Vigliarolo They were all planning on leaving anyway, company claims The door plug on Boeing’s C-suite has flown off, taking the CEO, board chair, and head of its commercial airplane division with it.… This article is an excerpt from The Register View

The way Apple, Alphabet implemented DMA rules ‘seems to be at odds’ with law 2024-03-25 at 15:47 By Paul Kunert European Commission says 12-month investigation could lead to fine of up to 10% of global revenue The European Commission is opening its first official probes under the Digital Markets Act with a focus on curbing

Gelsinger woos Musk as Intel seeks to drum up Foundry Services business 2024-03-25 at 15:18 By Dan Robinson It’s just not economical for Chipzilla to be the factories only customer these days Intel is keen to get its Foundry Services strategy off the ground and draw in more customers. With this in mind, it’s made

Fujitsu’s 30-year-old UK customs system just keeps hanging on 2024-03-25 at 14:56 By Lindsay Clark After declaring the end of CHIEF at least five times in as many years, HMRC hopes this June 2024 date will stick The UK’s tax collector has named the date for migrating from a 30-year-old customs IT system for the

Key Lesson from Microsoft’s Password Spray Hack: Secure Every Account 2024-03-25 at 14:56 By In January 2024, Microsoft discovered they’d been the victim of a hack orchestrated by Russian-state hackers Midnight Blizzard (sometimes known as Nobelium). The concerning detail about this case is how easy it was to breach the software giant. It wasn’t a highly technical

Hackers Hijack GitHub Accounts in Supply Chain Attack Affecting Top-gg and Others 2024-03-25 at 14:56 By Unidentified adversaries orchestrated a sophisticated attack campaign that has impacted several individual developers as well as the GitHub organization account associated with Top.gg, a Discord bot discovery site. “The threat actors used multiple TTPs in this attack, including account

A new report discusses emerging global threats 2024-03-25 at 14:17 By Emerging geopolitical threats may contribute to security risks for international travelers and organizations.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

How would you sum up a decade of Kubernetes? 2024-03-25 at 14:01 By Richard Speed The CNCF is looking for a tenth anniversary logo Logowatch  Are you feeling creative? To celebrate ten years of Kubernetes, the Cloud Native Computing Foundation (CNCF) is seeking a design for an anniversary logo. Perhaps just the letters A and

The UK Digital Information Bill: Brexit dividend or data disaster? 2024-03-25 at 13:17 By James Castro-Edwards, Data protection Partner, Arnold and Porter Move could ‘weaken’ Brits’ personal data rights when info is transferred outside Europe Comment  The UK government’s proposed data protection law reform seeks to create a more business-friendly regime, though its implementation could

UK health department republishes £330M Palantir contract with fewer ██████ 2024-03-25 at 12:33 By Lindsay Clark As Good Law Project considers response, ICO slams failure to comply with FoI request The UK health department has republished its contracts with US spy-tech company Palantir, blanking out fewer sections, following a warning from legal campaigners.… This article

New “GoFetch” Vulnerability in Apple M-Series Chips Leaks Secret Encryption Keys 2024-03-25 at 11:46 By A new security shortcoming discovered in Apple M-series chips could be exploited to extract secret keys used during cryptographic operations. Dubbed GoFetch, the vulnerability relates to a microarchitectural side-channel attack that takes advantage of a feature known as data memory-dependent prefetcher

Iran-Linked MuddyWater Deploys Atera for Surveillance in Phishing Attacks 2024-03-25 at 10:31 By The Iran-affiliated threat actor tracked as MuddyWater (aka Mango Sandstorm or TA450) has been linked to a new phishing campaign in March 2024 that aims to deliver a legitimate Remote Monitoring and Management (RMM) solution called Atera. The activity, which took place from March

SoftIron rolls its own server virt stack to joins the ‘let’s get VMware’ crowd 2024-03-25 at 09:48 By Simon Sharwood Banks on allowing BYO external storage to make migrations less painful Artisanal server vendor SoftIron smells blood in the water since Broadcom’s acquisition of VMware led to considerable price hikes for many users, so has

That Asian meal you eat on holidays could launder money for North Korea 2024-03-25 at 08:47 By Simon Sharwood United Nations finds IT contract and crypto scams are just two of DPRK’s illicit menu items If you dine out at an Asian restaurant on your next holiday, the United Nations thinks your meal could help

Beijing issues list of approved CPUs – with no Intel or AMD 2024-03-25 at 06:19 By Simon Sharwood 2024 may be the year of Linux On The Arm-or-RISC-desktop as China moves away from Western tech AMD and Intel are not present on a list of processors approved by China’s Information Security Evaluation Center.… This article

The future of data privacy and compliance (and how to stop it) 2024-03-25 at 06:19 By Organizations face ever-increasing pressure to adapt to new realities.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source