Uncategorized

Rogue npm Package Deploys Open-Source Rootkit in New Supply Chain Attack 04/10/2023 at 15:46 By A new deceptive package hidden within the npm package registry has been uncovered deploying an open-source rootkit called r77, marking the first time a rogue package has delivered rootkit functionality. The package in question is node-hide-console-windows, which mimics the legitimate npm […]

Airwave a ‘license to print money’ on legacy blue-light comms contract 04/10/2023 at 15:32 By Lindsay Clark Profits and revenue increase for Motorola subsidiary challenging regulator price cap ruling British emergency services comms supplier Airwave has posted increased earnings and profits after it challenged authorities seeking to cap its prices.… This article is an excerpt

Collaboration between the CISO and other business leaders is critical 04/10/2023 at 15:02 By Fostering collaboration between the CISO and the C-suite can help organizations meet today’s most pressing security and compliance challenges. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Mint freshens up its Linux garden for Ubuntu and Debian fans 04/10/2023 at 14:33 By Liam Proven One version’s edgier than the other Whether you prefer your Cinnamon in Ubuntu or Debian flavor, the Mint developers have something new for you to try.… This article is an excerpt from The Register View Original Source

Microsoft Warns of Cyber Attacks Attempting to Breach Cloud via SQL Server Instance 04/10/2023 at 14:01 By Microsoft has detailed a new campaign in which attackers unsuccessfully attempted to move laterally to a cloud environment through a SQL Server instance. “The attackers initially exploited a SQL injection vulnerability in an application within the target’s environment,”

Kaluma squeezes JavaScript onto the Raspberry Pi Pico 04/10/2023 at 13:47 By Liam Proven Bringing the language of multi-gigabyte web browsers to a $4 computer Although JavaScript is responsible for some bloated Electron apps, apparently you can still usefully run it in 264kB of RAM.… This article is an excerpt from The Register View Original

Big Brother is coming to a workplace near you, and the privacy regulator wants a word 04/10/2023 at 13:17 By Richard Speed Quis custodiet ipsos custodes? The UK Information Commissioner’s Office (ICO) has weighed in on the thorny issue of workplace monitoring with guidance to ensure employers stay on the right side of the law.…

City council Oracle megaproject got a code red – and they went live anyway 04/10/2023 at 12:32 By Lindsay Clark Poor security and segregation of duties also worry auditors Massive local authority Birmingham City Council went live with new Oracle Fusion ERP software in April last year, knowing the system was likely to fail.… This article

Ex-Microsoft maverick takes us on a trip through vintage Task Manager code 04/10/2023 at 11:32 By Richard Speed Plus: Have you updated to the latest version of Bloated Fetal Sacs? Former Microsoft engineer Dave Plummer has taken viewers deep into the source code for Windows Task Manager while debunking a distressing Icelandic sobriquet for Microsoft’s

North Korea’s Lazarus Group upgrades its main malware 04/10/2023 at 10:34 By Brandon Vigliarolo LightningCan evades infosec tools in new and interesting ways The Lazarus Group, the cybercrime gang linked to the North Korean government, has been named as the perpetrator of an attack against a Spanish aerospace firm, using a dangerous new piece of

Looney Tunables: New Linux Flaw Enables Privilege Escalation on Major Distributions 04/10/2023 at 10:34 By A new Linux security vulnerability dubbed Looney Tunables has been discovered in the GNU C library’s ld.so dynamic loader that, if successfully exploited, could lead to a local privilege escalation and allow a threat actor to gain root privileges. Tracked

Astronomers debate whether or not lightning strikes even once on Venus 04/10/2023 at 09:32 By Katyanna Quach Where are the bolts of light? Why are the low-frequency radio waves lightning makes going backwards? Contrary to a decades-old hypothesis, there may be very little lightning in the atmosphere of Venus – or even none at all

Nukes, schmukes – fuel cells could power future datacenters 04/10/2023 at 09:02 By Laura Dobberstein At least in the tropics, say Equinix and the National University of Singapore Proton-exchange membrane (PEM) fuel cells are more efficient than other alternative generator technologies as a way to provide backup power to datacenters in certain climates, according to

Japan confirms ¥192 billion will flow to help Micron build Hiroshima plant 04/10/2023 at 08:32 By Simon Sharwood That’s $1.3 billion – pocket change compared to CHIPS Acts elsewhere Japan’s Ministry of Economy, Trade, and Industry, has confirmed it will fund Micron Technology’s planned memory plant in Hiroshima to the tune of ¥192 billion ($1.3

Samsung signs to fab for RISC-V chip maker Tenstorrent 04/10/2023 at 07:02 By Laura Dobberstein For now, chaebol will manufacture AI startup’s 4nm Quasar AI chip startup Tenstorrent announced on Monday that it will use Samsung’s foundry to manufacture its next generation of products, with both partners alluding to potential future RISC-V collaborations.… This article

Russia to ban all VPNs – again – says senator 04/10/2023 at 05:48 By Simon Sharwood Putin Zuck out of business is one goal of this repeat effort to close off internet tunnels Russia intends to prohibit VPNs being offered in the nation’s app stores starting in 2024.… This article is an excerpt from The

Trio of TorchServe flaws means PyTorch users need an urgent upgrade 04/10/2023 at 04:33 By Jessica Lyons Hardcastle Meta, the project’s maintainer, shrugs A trio of now-patched security issues in TorchServe, an open-source tool for scaling PyTorch machine-learning models in production, could lead to server takeover and remote code execution (RCE), according to security researchers.…

Human knocks down woman in hit-and-run. Then driverless Cruise car parks on top of her 04/10/2023 at 03:50 By Katyanna Quach Victim in critical condition A woman in San Francisco is in critical condition after being first struck by a hit-and-run driver, and then falling in front of a driverless Cruise car, which ran her

US v Sam Bankman-Fried trial begins … as imploded crypto biz boss sues his insurer 04/10/2023 at 03:02 By Thomas Claburn After netizens’ funds go up in smoke, ex-CEO seeks cash to foot legal bills The first of two US government prosecutions of former FTX CEO Sam Bankman-Fried commenced in New York on Monday, only

Intel spins off FPGA biz with DC boss Sandra Rivera at the helm 04/10/2023 at 02:18 By Tobias Mann x86 giant eyes outside cash injections, IPO for Programmable Systems Group within three years Sandra Rivera is off as executive veep of Intel’s Datacenter and AI group, and will instead be CEO of the x86 giant’s