Uncategorized

Sierra:21 – Flaws in Sierra Wireless Routers Expose Critical Sectors to Cyber Attacks 06/12/2023 at 15:01 By A collection of 21 security flaws have been discovered in Sierra Wireless AirLink cellular routers and open-source software components like TinyXML and OpenNDS. Collectively tracked as Sierra:21, the issues expose over 86,000 devices across critical sectors like energy, healthcare, waste management, retail, […]

New Report: Unveiling the Threat of Malicious Browser Extensions 06/12/2023 at 15:01 By Compromising the browser is a high-return target for adversaries. Browser extensions, which are small software modules that are added to the browser and can enhance browsing experiences, have become a popular browser attack vector. This is because they are widely adopted among

‘Wobbly spacetime’ is latest stab at unifying physics 06/12/2023 at 14:47 By Lindsay Clark Grudge match between quantum mechanics and general relativity attracts new effort to find harmony Since the early 20th century, physicists have struggled to marry theories governing the very big with those for the very small.… This article is an excerpt from

Veteran editors Notepad++ and Geany hit milestone versions 06/12/2023 at 14:17 By Liam Proven There are still good, modern, graphical text editors that are not Electron-based One of the best FOSS text editors for Windows, Notepad++, is turning 20, while cross platform Geany just hit version 2.0 as it turns 18 years old.… This article

Scaling Security Operations with Automation 06/12/2023 at 14:01 By In an increasingly complex and fast-paced digital landscape, organizations strive to protect themselves from various security threats. However, limited resources often hinder security teams when combatting these threats, making it difficult to keep up with the growing number of security incidents and alerts. Implementing automation throughout

Hackers Exploited ColdFusion Vulnerability to Breach Federal Agency Servers 06/12/2023 at 14:01 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned of active exploitation of a high-severity Adobe ColdFusion vulnerability by unidentified threat actors to gain initial access to government servers. “The vulnerability in ColdFusion (CVE-2023-26360) presents as an improper access control issue and exploitation of

Europe signs off on up to €1.2B in state aid for homegrown cloud project 06/12/2023 at 13:18 By Richard Speed Vendor to speak unto vendor with first results expected in 2027 The European Commission is to provide up to €1.2 billion in public funding for the IPCEI Cloud project and expects a further €1.4 billion

Atlassian Releases Critical Software Fixes to Prevent Remote Code Execution 06/12/2023 at 13:11 By Atlassian has released software fixes to address four critical flaws in its software that, if successfully exploited, could result in remote code execution. The list of vulnerabilities is below – CVE-2022-1471 (CVSS score: 9.8) – Deserialization vulnerability in SnakeYAML library that can lead to remote code

And the winner of the horrible Microsoft Paint sweater is … 06/12/2023 at 12:32 By Richard Speed Sure, we’ll send you to the Moon. But a return will cost you Competition  We have a winner. After much discussion, tears, tantrums, and tea, Microsoft’s knitted monstrosity is going to a reader who has clearly had a

Digital memories are disappearing and not even AI or Google can help 06/12/2023 at 11:47 By Mark Pesce Technology allows us to keep more of our stuff than previously possible – but what use is it if we can’t find it? Column  I have too many artefacts detailing my digital history, which is stored on

Getty’s image-scraping sueball against Stability AI will go to trial in the UK 06/12/2023 at 10:47 By Katyanna Quach Computer-generated image maker fails to quash case on its claimed home turf Getty’s lawsuit against Stability AI, claiming the startup “unlawfully copied and processed millions of images protected by copyright” from its photo archive, will go

Atlassian security advisory reveals four fresh critical flaws – in mail with dead links 06/12/2023 at 10:03 By Simon Sharwood Bitbucket, Confluence and Jira all in danger, again. Sigh Atlassian has emailed its customers to warn of four critical vulnerabilities, but the message had flaws of its own – the links it contained weren’t live

Microsoft issues deadline for end of Windows 10 support – it’s pay to play for security 06/12/2023 at 09:47 By Thomas Claburn Limited options will be available into 2028, for an undisclosed price Microsoft on Tuesday warned that full security support for Windows 10 will end on October 14, 2025, but offered a lifeline for

NTT Data to monitor ten million hotel guests and sell data about their sleep 06/12/2023 at 08:47 By Simon Sharwood It’ll be opt in at a capsule hotel chain NTT Data has opened a hotel at which it plans to watch people sleep, as part of a plan to watch ten million people slumber so

Qualcomm Releases Details on Chip Vulnerabilities Exploited in Targeted Attacks 06/12/2023 at 08:47 By Chipmaker Qualcomm has released more information about three high-severity security flaws that it said came under “limited, targeted exploitation” back in October 2023. The vulnerabilities are as follows – CVE-2023-33063 (CVSS score: 7.8) – Memory corruption in DSP Services during a remote call from

Cisco intros AI to find firewall flaws, warns this sort of thing can’t be free 06/12/2023 at 07:32 By Simon Sharwood Predicts cybercrims will find binary brainboxes harder to battle Cisco’s executive veep for security Jeetu Patel has predicted that AI will change the infosec landscape, but that end users will eventually pay for the

India’s Moon mission pulled off another trick: an experimental orbital sequel 06/12/2023 at 06:03 By Simon Sharwood Swift software development effort saw Chandrayaan-3 propulsion module make an unexpected return to Earth India has revealed an unexpected sequel to its Chandrayaan-3 Moon lander mission.… This article is an excerpt from The Register View Original Source

Boffins devise ‘universal backdoor’ for image models to cause AI hallucinations 06/12/2023 at 04:18 By Thomas Claburn Data poisoning appears open to all Three Canada-based computer scientists have developed what they call a universal backdoor for poisoning large image classification models.… This article is an excerpt from The Register View Original Source

Fancy Bear goes phishing in US, European high-value networks 06/12/2023 at 03:17 By Jessica Lyons Hardcastle GRU-linked crew going after our code warns Microsoft – Outlook not good Fancy Bear, the Kremlin’s cyber-spy crew, has been exploiting two previously patched bugs for large-scale phishing campaigns against high-value targets – like government, defense, and aerospace agencies in

Citrix pulls the plug on its User Group Community 06/12/2023 at 02:18 By Simon Sharwood To be replaced by virtual community and ‘in-person event experience’ hosted by vendor Citrix has pulled the plug on its user group.… This article is an excerpt from The Register View Original Source