Uncategorized

Jenkins jitters as 45,000 servers still vulnerable to RCE attacks after patch released 2024-01-30 at 20:01 By Connor Jones Multiple publicly available exploits have since been published for the critical flaw The number of public-facing installs of Jenkins servers vulnerable to a recently disclosed critical vulnerability is in the tens of thousands.… This article is […]

Brazilian Feds Dismantle Grandoreiro Banking Trojan, Arresting Top Operatives 2024-01-30 at 19:31 By A Brazilian law enforcement operation has led to the arrest of several Brazilian operators in charge of the Grandoreiro malware. The Federal Police of Brazil said it served five temporary arrest warrants and 13 search and seizure warrants in the states of São Paulo, Santa Catarina,

SAP dangles juicy carrot to pull users on board with cloud-first vision 2024-01-30 at 19:02 By Lindsay Clark Limited-time offer may reduce cost of migration by up to 50% SAP is rolling out an incentive package to encourage users to adopt its cloud transformation programs, RISE with SAP and GROW with SAP.… This article is

URGENT: Upgrade GitLab – Critical Workspace Creation Flaw Allows File Overwrite 2024-01-30 at 18:46 By GitLab once again released fixes to address a critical security flaw in its Community Edition (CE) and Enterprise Edition (EE) that could be exploited to write arbitrary files while creating a workspace. Tracked as CVE-2024-0402, the vulnerability has a CVSS score of

ESA salutes Galileo satellite system meeting aviation standards 2024-01-30 at 18:16 By Richard Speed It’s all in the software The European Space Agency (ESA) has celebrated the Galileo satellite navigation system meeting civil aviation standards governing flight phases from take-off to landing and explained how the feat was done.… This article is an excerpt from

Reg story prompts fresh security bulletin, review of Juniper Networks’ CVE process 2024-01-30 at 17:32 By Connor Jones Vendor gets tangled in its own web of undisclosed vulnerabilities Juniper Networks has disclosed separate vulnerabilities it was previously accused of concealing, and apologized to customers for the error in communication.… This article is an excerpt from

There was a 39% surge in data exfiltration cyberattacks in 2023 2024-01-30 at 17:32 By According to a report, the number of organizations claiming to have been a victim of ransomware in the past 12 months more than doubled. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Research shows cybercriminals’ motivation shifts to data exfiltration 2024-01-30 at 17:08 By A new report shows ransomware attacks are increasing again and reveals a change in strategy among cybercriminals. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

AI is changing search, for better or for worse 2024-01-30 at 16:47 By Thomas Claburn Bing hasn’t much benefited from its AI infusion but Google’s rivals sense an opening Feature  Ask Google’s Bard chatbot about the future of search and you’ll get a summary of trends that suggest there’s more to search than finding keywords

Raspberry Pi on IPO plans: ‘We want to be ready when the markets are ready’ 2024-01-30 at 16:16 By Richard Speed Bankers appointed, but CEO insists nothing will change while he’s in charge The Raspberry Pi company is again preparing the ground for an initial public offering (IPO), appointing bankers Peel Hunt and Jefferies ahead

China-Linked Hackers Target Myanmar’s Top Ministries with Backdoor Blitz 2024-01-30 at 16:16 By The China-based threat actor known as Mustang Panda is suspected to have targeted Myanmar’s Ministry of Defence and Foreign Affairs as part of twin campaigns designed to deploy backdoors and remote access trojans. The findings come from CSIRT-CTI, which said the activities took place

Windows 3.11 trundles on as job site pleads for ‘driver updates’ on German trains 2024-01-30 at 15:25 By Richard Speed Remember making Windows and DOS talk to a network? You could go back to the future with this assignment If you were thinking about forcing an AI to write a job ad for an administrator

UK lawmakers say live facial recognition lacks a legal basis 2024-01-30 at 14:51 By Lindsay Clark Lords warn Home Secretary there is nothing to regulate wider trawl of large populations A UK committee in its upper house has written to Home Secretary James Cleverly to warn of the lack of legal basis for the use

Techie resurrects teletext on a vintage BBC Master 2024-01-30 at 13:48 By Richard Speed You can get Ceefax via a Pi, but behold it in its most exotic of habitats Got an old BBC computer in the loft, a spare Raspberry Pi gathering dust in a drawer, and a yearning to return to the days

Leaked email: Unit4 ERP system leaves some school staff with ‘nil pay’ 2024-01-30 at 13:17 By Lindsay Clark ‘Primary focus’ is ‘welfare of our staff as we resolve any errors,’ says UK council after rollout of £30M SAP replacement Exclusive  After schools in Surrey went live on a new £30 million HR, payroll and finance

Top Security Posture Vulnerabilities Revealed 2024-01-30 at 13:16 By Each New Year introduces a new set of challenges and opportunities for strengthening our cybersecurity posture. It’s the nature of the field – the speed at which malicious actors carry out advanced persistent threats brings a constant, evolving battle for cyber resilience. The excitement in cybersecurity

Italian Data Protection Watchdog Accuses ChatGPT of Privacy Violations 2024-01-30 at 13:16 By Italy’s data protection authority (DPA) has notified ChatGPT-maker OpenAI of supposedly violating privacy laws in the region. “The available evidence pointed to the existence of breaches of the provisions contained in the E.U. GDPR [General Data Protection Regulation],” the Garante per la

Fairberry project brings a hardware keyboard to the Fairphone 2024-01-30 at 12:26 By Liam Proven Miss hardware QWERTY? Warm up your soldering iron and 3D printer Hardware hacker’s non-trivial project to weld a Blackberry keyboard to an Android fondleslab is being updated with an off-the-shelf PCB.… This article is an excerpt from The Register View

UK biometrics boss bows out, bemoaning bureaucratic blunders 2024-01-30 at 11:48 By Connor Jones Questionable institutional change and myriad IT issues pervade the governance landscape The farewell report written by the UK’s biometrics and surveillance commissioner highlights a litany of failings in the Home Office’s approach to governing the technology.… This article is an excerpt

New ZLoader Malware Variant Surfaces with 64-bit Windows Compatibility 2024-01-30 at 11:31 By Threat hunters have identified a new campaign that delivers the ZLoader malware, resurfacing nearly two years after the botnet’s infrastructure was dismantled in April 2022. A new variant of the malware is said to have been in development since September 2023, Zscaler ThreatLabz said