Uncategorized

Cryptojackers steal AWS credentials from GitHub in 5 minutes 30/10/2023 at 21:47 By Connor Jones Researchers just scratching surface of their understanding of campaign dating back to 2020 Security researchers have uncovered a multi-year cryptojacking campaign they claim autonomously clones GitHub repositories and steals their exposed AWS credentials.… This article is an excerpt from The […]

Linux will soon offer switchable x86-32 binary support 30/10/2023 at 20:47 By Liam Proven And other novelties likely next year in kernel 6.7 The merge window has opened for what will become Linux version 6.7, and below we’ve compiled some things that are likely to be included in the new release.… This article is an

Digital Millennium Copyright Act celebrates a quarter century of takedown notices 30/10/2023 at 20:02 By Richard Speed Tracing DMCA’s dubious legacy over 25 tech-turbulent years It has been 25 years since the Digital Millennium Copyright Act (DMCA) was signed into US law by President Bill Clinton, ushering in an era of intellectual property (IP) protection

Pro-Hamas Hacktivists Targeting Israeli Entities with Wiper Malware 30/10/2023 at 20:01 By A pro-Hamas hacktivist group has been observed using a new Linux-based wiper malware dubbed BiBi-Linux Wiper, targeting Israeli entities amidst the ongoing Israeli-Hamas war. “This malware is an x64 ELF executable, lacking obfuscation or protective measures,” Security Joes said in a new report published today. “It

Western Digital execs vote to split biz in two: HDD and flash 30/10/2023 at 19:33 By Dan Robinson Latest decision follows failure of Kioxia merger and pressure from activist investor Elliott Management Western Digital is to split into two separate entities, one formed from the NAND flash memory division and the other from the hard

Tech bros still cling to sexist stereotypes, forgetting female pioneers who coded their path 30/10/2023 at 18:47 By Lindsay Clark Research sheds light on attitudes holding industry back Almost one in five men in IT explain why fewer females work in the profession by arguing that “women are naturally less well suited to tech roles

45% of Americans avoid accessing sensitive information on public Wi-Fi 30/10/2023 at 18:46 By According to a public Wi-Fi security survey by NordVPN, almost 70% of U.S. respondents prefer mobile internet for public online activities. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Stanford schooled in cybersecurity after Akira claims ransomware attack 30/10/2023 at 18:02 By Connor Jones This marks the third criminal intrusion at the institution in as many years Stanford University has confirmed it is “investigating a cybersecurity incident” after an attack last week by the Akira ransomware group.… This article is an excerpt from The

Broadcom, VMware insist merger to ‘close soon’ but China is playing hard to get 30/10/2023 at 17:17 By Dan Robinson Regulatory red dragon keeping silent with a day left until deadline VMware and Broadcom are trying to quell investor fears that China’s competition regulator could kill the proposed $61 billion merger, issuing a joint statement

Report shows 1265% increase in phishing emails since ChatGPT launched 30/10/2023 at 16:31 By A new report reveals a 967% increase in credential phishing attempts year-over-year, the number one access point to organizational breaches. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Blue Origin pulls sheets off cargo lunar lander prototype 30/10/2023 at 16:17 By Richard Speed NASA: Nice rocket, but what about the dust? Jeff Bezos’ Blue Origin has unveiled a mockup of the cargo version of its Blue Moon lunar lander ahead of a crewed version intended for NASA’s Artemis program.… This article is an

New Webinar: 5 Must-Know Trends Impacting AppSec 30/10/2023 at 16:16 By Modern web app development relies on cloud infrastructure and containerization. These technologies scale on demand, handling millions of daily file transfers – it’s almost impossible to imagine a world without them. However, they also introduce multiple attack vectors that exploit file uploads when working

Terrorist fundraising: Is crypto really to blame? 30/10/2023 at 16:02 By Cointelegraph By Andrew Singer The industry is reeling as governments, legislators, and even investors ask if its networks are being exploited by terrorists. A sense of proportion may be needed. This article is an excerpt from Cointelegraph.com News View Original Source

Microsoft calls time on Windows Insider MVP program 30/10/2023 at 15:47 By Richard Speed Unwavering loyalty and devotion rewarded with termination Microsoft has decided to axe the Windows Insider MVP program, which is now scheduled to be discontinued at the end of the year.… This article is an excerpt from The Register View Original Source

How to hold IT security strategy conversations 30/10/2023 at 15:32 By A good IT security strategy starts with understanding where the organization is now and where it needs to be. The organization should not just follow the crowd.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

ServiceNow Data Exposure: A Wake-Up Call for Companies 30/10/2023 at 15:17 By Earlier this week, ServiceNow announced on its support site that misconfigurations within the platform could result in “unintended access” to sensitive data. For organizations that use ServiceNow, this security exposure is a critical concern that could have resulted in major data leakage of sensitive corporate

Windows CE reaches end of life, if not end of sales 30/10/2023 at 15:02 By Liam Proven Some loved it, some laughed at it, but it survived 26 years Microsoft’s dedicated OS for embedded and pocket devices, Windows CE, has reached the end of its support lifetime. People’s reactions are very mixed, depending on where they’re

Just one in ten UK orgs have significant AI investment plan 30/10/2023 at 14:17 By Lindsay Clark Gen AI still in the pilot stage, despite government hopes to be world leader Despite the frothing hype around generative AI — and the UK government’s hopes it will bring economic growth — only one in ten UK

EleKtra-Leak Cryptojacking Attacks Exploit AWS IAM Credentials Exposed on GitHub 30/10/2023 at 14:16 By A new ongoing campaign dubbed EleKtra-Leak has set its eyes on exposed Amazon Web Service (AWS) identity and access management (IAM) credentials within public GitHub repositories to facilitate cryptojacking activities. “As a result of this, the threat actor associated with the campaign was

Ofcom attempts to thread the needle in net neutrality update 30/10/2023 at 13:32 By Dan Robinson User freedoms caught between network operators and big tech Ofcom says it is trying to strike a balance between user freedom while allowing operators to protect their networks and still offer “premium” services at a higher price, according to