Uncategorized

FTC wants Microsoft’s relationship with OpenAI under the microscope 11/12/2023 at 19:17 By Richard Speed Hey Bing, how can I invest billions in a company but not break antitrust laws? Microsoft’s OpenAI headaches might not be going away following reports that now the US Federal Trade Commission (FTC) is considering an investigation into the Windows […]

Red Roof announces data breach 11/12/2023 at 19:16 By Red Roof confirmed that the organization experienced a data breach in late September of 2023. The breach did not involve any Red Roof guest data. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Two years on, 1 in 4 apps still vulnerable to Log4Shell 11/12/2023 at 18:17 By Connor Jones Lack of awareness still blamed for patching apathy despite it being among most infamous bugs of all time Two years after the Log4Shell vulnerability in the open source Java-based Log4j logging utility was disclosed, circa one in four

Another day, another delay to first Vulcan Centaur launch 11/12/2023 at 17:17 By Richard Speed Mission to the Moon likely to slip to 2024 following dress rehearsal issues United Launch Alliance’s heavy-lift launch vehicle Vulcan Centaur is facing yet another delay after the company was unable to complete a Wet Dress Rehearsal on December 8.…

Lack of encryption the primary reason for sensitive data loss 11/12/2023 at 17:17 By New study reveals that organizations appear to struggle in their ability to assess and remediate data encryption risks and policy violations. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Lazarus Group Using Log4j Exploits to Deploy Remote Access Trojans 11/12/2023 at 17:17 By The notorious North Korea-linked threat actor known as the Lazarus Group has been attributed to a new global campaign that involves the opportunistic exploitation of security flaws in Log4j to deploy previously undocumented remote access trojans (RATs) on compromised hosts. Cisco Talos is

Researchers Unmask Sandman APT’s Hidden Link to China-Based KEYPLUG Backdoor 11/12/2023 at 17:17 By Tactical and targeting overlaps have been discovered between the enigmatic advanced persistent threat (APT) called Sandman and a China-based threat cluster that’s known to use a backdoor known as KEYPLUG. The assessment comes jointly from SentinelOne, PwC, and the Microsoft Threat Intelligence team

Intel shows off backside power and stacked transistors at IEDM 11/12/2023 at 16:35 By Dan Robinson Chip giant claims demo tech could ‘significantly’ improve device density Intel is looking to new options for its future chips including 3D stacking of transistors to enable greater density, extending backside power, and use of gallium nitride for greater

How hard is your network really, comms watchdog asks telcos 11/12/2023 at 16:16 By Dan Robinson Ofcom opens consultation on resilience requirements… power backup for mobile networks, anyone? Britain’s comms regulator is asking telecoms providers for updated guidance on how resilient their networks are, given modern society’s increasing reliance on digital services.… This article is

Playbook: Your First 100 Days as a vCISO – 5 Steps to Success 11/12/2023 at 15:01 By In an increasingly digital world, no organization is spared from cyber threats. Yet, not every organization has the luxury of hiring a full-time, in-house CISO. This gap in cybersecurity leadership is where you, as a vCISO, come in.

SpyLoan Scandal: 18 Malicious Loan Apps Defraud Millions of Android Users 11/12/2023 at 15:01 By Cybersecurity researchers have discovered 18 malicious loan apps for Android on the Google Play Store that have been collectively downloaded over 12 million times. “Despite their attractive appearance, these services are in fact designed to defraud users by offering them high-interest-rate loans

Webinar — Psychology of Social Engineering: Decoding the Mind of a Cyber Attacker 11/12/2023 at 14:16 By In the ever-evolving cybersecurity landscape, one method stands out for its chilling effectiveness – social engineering. But why does it work so well? The answer lies in the intricate dance between the attacker’s mind and human psychology. Our

UK mulls next-gen satellite subsidies for Brit companies 11/12/2023 at 14:02 By Dan Robinson Almost £100M in handouts available for LEO connectivity projects UK government may subsidize Brit companies working on low Earth orbit satellite connectivity projects – the aim being to support comms for remote parts of the country and boost the domestic satellite

VictoriaMetrics takes organic growth over investor pressure 11/12/2023 at 13:34 By Richard Speed Keeping the lights on with an enterprise product while staying true to your roots Interview  Monitoring biz VictoriaMetrics is relatively unusual in its field. It is yet to accept external investment, preferring instead to try to grow organically rather than being forced

The 15-inch MacBook Air just nails it 11/12/2023 at 11:36 By Simon Sharwood Vast battery life, zippy performance, and rich speakers make an impressive package Desktop Tourism  When I speak to laptop-makers about their wares, they often admit that the benchmark in their field is the MacBook Air. Ever since its 2008 debut, Apple’s minimalist

SpyLoan Scandal: 18 Malicious Loan Apps Defraud Millions of Android Users 11/12/2023 at 11:02 By Cybersecurity researchers have discovered 18 malicious loan apps for Android on the Google Play Store that have been collectively downloaded over 12 million times. “Despite their attractive appearance, these services are in fact designed to defraud users by offering them high-interest-rate loans

Trust us, says EU, our AI Act will make AI trustworthy by banning the nasty ones 11/12/2023 at 09:33 By Laura Dobberstein Big Tech plays the ‘this might hurt innovation’ card for rules that bar predictive policing, workplace emotion assessments The European Union (EU) on Saturday reached provisional agreement on the AI Act – a

New PoolParty Process Injection Techniques Outsmart Top EDR Solutions 11/12/2023 at 09:16 By A new collection of eight process injection techniques, collectively dubbed PoolParty, could be exploited to achieve code execution in Windows systems while evading endpoint detection and response (EDR) systems. SafeBreach researcher Alon Leviev said the methods are “capable of working across all processes without any

Doom turns 30, so its creators celebrate seminal first-person shooter’s contribution to IT careers 11/12/2023 at 08:47 By Simon Sharwood And the joy of slaughtering demons as John Romero himself delivers a frag-tastic new level Seminal first-person shooter Doom marked the thirtieth anniversary of its release on December 10, and co-creator John Romero marked the

The threat landscape in H1 2023 11/12/2023 at 08:04 By Ransomware, AI and malware featured in top threat actors in H1 2023. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source