Uncategorized

EPA flushes water supply cybersecurity rule after losing legal fight with industry, states 14/10/2023 at 01:02 By Jessica Lyons Hardcastle What could possibly go wrong? American public water systems may or may not be safe from cybercriminals and spies — we may not actually know unless or until these systems are compromised, now that the […]

Biden hopes to squeeze loopholes to slow Chinese importation of AI chips 13/10/2023 at 23:02 By Tobias Mann Might slow things down a bit, and that’s it The Biden administration’s next round of sanctions could close a loophole that has enabled Chinese companies to buy export-controlled technologies, including AI processors, through outside suppliers and subsidiaries.…

530K people’s info feared stolen from cloud PC gaming biz Shadow 13/10/2023 at 22:02 By Jessica Lyons Hardcastle Will players press start to continue with this outfit? Shadow, which hosts Windows PC gaming in the cloud among other services, has confirmed criminals stole a database containing customer data following a social-engineering attack against one of

Bungled ransomware raid targeting WS_FTP servers demanded just 0.018 BTC 13/10/2023 at 21:17 By Connor Jones First attempt to exploit latest Progress Software bug spotted in the wild The first ransomware campaign against organizations using the vulnerability in Progress Software’s WS_FTP Server was this week spotted by security researchers.… This article is an excerpt from

Unveiling the CAPTCHA Escape: The Dance of CAPTCHA Evasion Using TOR 13/10/2023 at 20:46 By Medz Barao In this era, threat actors have proven to be tireless in their pursuit of exploiting vulnerabilities and gaining unauthorized access to online platforms using anything from simple to sophisticated attacks. Today, we delve into shedding light on how

18% of African banking apps have vulnerable high severity secrets 13/10/2023 at 20:31 By The security of African financial service applications were analyzed in a recent report by Approov, finding sensitive data was left vulnerable. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Three dozen plaintiffs join Apple AirTag tracking lawsuit in amended complaint 13/10/2023 at 20:17 By Brandon Vigliarolo 38 people now accusing Apple of negligence over stalking, assaults and murders enabled by Bluetooth trackers A lawsuit filed in December that accuses Apple of negligence over its failure to prevent AirTags from being abused by stalkers has

HTTP/2 Rapid Reset 13/10/2023 at 20:16 By Medz Barao A recent vulnerability tracked as Rapid Reset (CVE-2023-44487) in the HTTP/2 protocol was recently disclosed by researchers and vendors. It was exploited in the wild from August 2023 to October 2023. This article is an excerpt from SpiderLabs Blog View Original Source

MariaDB ditches products and staff in restructure, bags $26.5M loan to cushion fall 13/10/2023 at 19:32 By Lindsay Clark Strategic DBaaS and distributed back end jettisoned after years of promotion MariaDB is ditching strategic products and cutting 28 percent of the workforce as it struggles to overcome the financial challenges its faced since floating on

Vulnerability management for an appsec world 13/10/2023 at 19:16 By The problem with common vulnerability and exposure lists, however, is that the vulnerabilities being generated in modern applications aren’t known. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Calls for Visual Studio security tweak fall on deaf ears despite one-click RCE exploit 13/10/2023 at 18:32 By Connor Jones Two years on and Microsoft refuses to address the issue Perceived weaknesses in the security of Microsoft’s Visual Studio IDE are being raised once again this week with a fresh single-click exploit.… This article is

New PEAPOD Cyberattack Campaign Targeting Women Political Leaders 13/10/2023 at 18:31 By European Union military personnel and political leaders working on gender equality initiatives have emerged as the target of a new campaign that delivers an updated version of RomCom RAT called PEAPOD. Cybersecurity firm Trend Micro attributed the attacks to a threat actor it tracks

Can open source be saved from the EU’s Cyber Resilience Act? 13/10/2023 at 17:47 By Steven J. Vaughan-Nichols The road to Hell is paved with good intentions, and for open source this is a well meaning cluster fudge Opinion  When I was in Bilbao recently for the Open Source Summit Europe event, the main topic

Stock markets across Asia and Europe bleed red as interest rate woes returns 13/10/2023 at 17:06 By Cointelegraph By Prashant Jha Chinese economic woes dragged down Asian markets while interest rate woes caused a bearish tumble in Europe. This article is an excerpt from Cointelegraph.com News View Original Source

GNOME developer proposes removing the X11 session 13/10/2023 at 17:06 By Liam Proven The suggested change is the first step in desktop environment becoming Wayland-only The two changes are just proposals at present, but GNOME’s Wayland-only future is on the horizon. Whether that’s a good or bad sign is less clear.… This article is an

Nvidia’s accelerated cadence spells trouble for AMD and Intel’s AI aspirations 13/10/2023 at 16:32 By Tobias Mann Or it could, just as soon as they figure out how to make the networking work Analysis  In the mad dash to capitalize on the potential of generative AI, Nvidia has remained the clear winner, more than doubling

Selecting computing architecture for AI-powered video analytics 13/10/2023 at 16:31 By Organizations looking to make use of new video analytics technology find themselves having to make important choices pertaining to their setup. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

CISA publishes fact sheet for organizations using open source software 13/10/2023 at 16:16 By Fact sheet released by CISA provides software security challenges and recommendations to improve security and risk management of OSS use. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Equifax scores £11.1M slap on wrist over 2017 mega breach 13/10/2023 at 16:02 By Connor Jones Not quite a pound for every one of the 13.8 million affected UK citizens, and it could have been more The UK’s Financial Conduct Authority (FCA) has fined Equifax a smidge over £11 million ($13.6 million) for severe failings

California passes workplace violence prevention bill 13/10/2023 at 15:46 By SB 553 was passed by the California Legislature and signed by Governor Newsome, requiring the development of workplace violence prevention plans. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source