Uncategorized

Salesforce engineers roll back change after breaking its own cloud for hours today 20/09/2023 at 22:17 By Chris Williams Services recovering though Tableau, Mulesoft still poorly If you noticed something funky going on with Salesforce and its software-as-a-service empire today, it’s not you: it’s recovering from a mild outage.… This article is an excerpt from […]

Core blimey, Intel’s answer to AMD and Ampere’s cloudy chips has 288 of them 20/09/2023 at 21:47 By Tobias Mann And they’re all tailored for efficiency Intel now says its “Sierra Forest” Xeons will actually offer 288 cores, twice as many as previously disclosed, when it launches in the first half of 2024.… This article

Neuralink’s looking for participants willing to be part of human trials 20/09/2023 at 21:02 By Brandon Vigliarolo Musk company gets FDA’s OK for six-year assessment of its brain implants That was fast: Neuralink, Elon Musk’s brain-computer interface implant company, only received Food and Drug Administration (FDA) approval for human tests in late May, but it’s

Pot calls the kettle hack as China claims Uncle Sam did digital sneak peek first 20/09/2023 at 20:17 By Dan Robinson Beijing accuses US of breaking into Huawei servers in 2009 The ongoing face-off between Washington and Beijing over technology and security issues has taken a new twist, with China accusing the US of hacking

GNU turns 40: Stallman’s baby still not ready for prime time, but hey, there’s cake 20/09/2023 at 19:17 By Liam Proven It turned the software industry upside down regardless Happy birthday to GNU. On September 27, there will be events in both the US and Switzerland to celebrate the 40th anniversary of the GNU Project.…

Apple pairs well with profits, not repair shops 20/09/2023 at 18:17 By Richard Currie iFixit demotes iPhone 14 from 7/10 to 4 after reality of software locks hit home As you were. It would appear that Apple’s overtures to the tech repairability movement and associated legislation like California’s SB 244 were just leading us all

AMA: Healthcare Security Leader Edition 20/09/2023 at 18:02 By In this AMA episode, Holly Rasche, Director of Security Management Services at Northwest Community Healthcare, shares lessons from her 26-year career. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

UK Online Safety Bill to become law – and encryption busting clause is still there 20/09/2023 at 17:17 By Lindsay Clark Admission it’s ‘not technically feasible’… but no promise not to invoke it UK Parliament has passed an Online Safety Bill offering the government powers to introduce online child protection laws, one that includes clause 122,

55% of insider threats come from a negligent or mistaken insider 20/09/2023 at 17:16 By The causes and costs of insider threats were analyzed in a recent report that found that the average annual cost of an insider risk has increased 40%. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View

Finnish Authorities Dismantle Notorious PIILOPUOTI Dark Web Drug Marketplace 20/09/2023 at 17:03 By Finnish law enforcement authorities have announced the takedown of PIILOPUOTI, a dark web marketplace that specialized in illegal narcotics trade since May 2022. “The site operated as a hidden service in the encrypted TOR network,” the Finnish Customs (aka Tulli) said in a brief

57% of small and medium enterprises experienced a cybersecurity breach 20/09/2023 at 16:47 By Small and medium enterprises were analyzed in a recent report by Guardz. According to the report, 57% of SMEs have experienced a cybersecurity breach. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Robocall scammers sentenced in US after netting $1.2M via India-based call centers 20/09/2023 at 16:32 By Laura Dobberstein Part of network of crims who used ‘trickery and threats’ to target elderly, says US Attorney Two Indian nationals each received 41-month prison sentences for their involvement in $1.2 million worth of robocall scams targeting the elderly,

Stealthy VBA Macro Embedded in PDF-like Header Helps Evade Detection 20/09/2023 at 16:17 By Rodel Mendrez In the ever-evolving landscape of malware threats, threat actors are continually creating new techniques to bypass detection. A recent discovery by JPCERT/CC sheds light on a new technique that involves embedding a malicious Word document within a seemingly benign

ChatGPT Update: How Security Teams and Threat Actors are Using Artificial Intelligence 20/09/2023 at 16:02 By ChatGPT and other Large Learning Modules have been in use for less than a year, yet these applications are transforming at an almost exponential rate.  This article is an excerpt from Trustwave Blog View Original Source

Critical Security Flaws Exposed in Nagios XI Network Monitoring Software 20/09/2023 at 16:01 By Multiple security flaws have been disclosed in the Nagios XI network monitoring software that could result in privilege escalation and information disclosure. The four security vulnerabilities, tracked from CVE-2023-40931 through CVE-2023-40934, impact Nagios XI versions 5.11.1 and lower. Following responsible disclosure

Be the threat: Case for hands-on threat simulations in cybersecurity 20/09/2023 at 15:47 By The cyber threat landscape demands that organizations equip cybersecurity teams with the necessary skills to detect, respond and defend against malicious attacks. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Sysadmin and spouse admit to part in ‘massive’ pirated Avaya licenses scam 20/09/2023 at 15:23 By Jude Karabus Will spend 20 years in prison after selling $88M in ADI software keys A sysadmin and his partner pleaded guilty this week to being part of a “massive” international ring that sold software licenses worth $88 million

Do You Really Trust Your Web Application Supply Chain? 20/09/2023 at 14:01 By Well, you shouldn’t. It may already be hiding vulnerabilities. It’s the modular nature of modern web applications that has made them so effective. They can call on dozens of third-party web components, JS frameworks, and open-source tools to deliver all the different

Sophisticated Phishing Campaign Targeting Chinese Users with ValleyRAT and Gh0st RAT 20/09/2023 at 14:01 By Chinese-language speakers have been increasingly targeted as part of multiple email phishing campaigns that aim to distribute various malware families such as Sainbox RAT, Purple Fox, and a new trojan called ValleyRAT. “Campaigns include Chinese-language lures and malware typically associated

Fresh Wave of Malicious npm Packages Threaten Kubernetes Configs and SSH Keys 20/09/2023 at 14:01 By Cybersecurity researchers have discovered a fresh batch of malicious packages in the npm package registry that are designed to exfiltrate Kubernetes configurations and SSH keys from compromised machines to a remote server. Sonatype said it has discovered 14 different