Uncategorized

Microsoft worker accidentally exposes 38TB of sensitive data in GitHub blunder 18/09/2023 at 21:18 By Jessica Lyons Hardcastle Included secrets, private keys, passwords, 30,000+ internal Teams messages A Microsoft employee accidentally exposed 38 terabytes of private data while publishing a bucket of open-source AI training data on GitHub, according to Wiz security researchers who spotted […]

AI included in DHS national security risks for 2024 18/09/2023 at 21:01 By The DHS released the 2024 Homeland Threat Assessment (HTA), which found that foreign and domestic terrorism posed a high risk for 2024. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Textbook publishers sue shadow library LibGen for copyright infringement 18/09/2023 at 20:21 By Jude Karabus Yet another attempt at a permanent takedown – but will it stick? A group of large US science and education publishers are trying to get “notorious” online database Library Genesis – known by students as LibGen – kicked offline and claw

If anyone finds an $80M F-35 stealth fighter, please call the Pentagon 18/09/2023 at 19:51 By Dan Robinson US military enlists public to help track down missing jet Anyone who has ever misplaced their car keys can sympathize with the US military, which has reportedly lost one of its F-35 stealth fighters after the pilot

Azure SQL Database takes Saturday off on US east coast following network power failure 18/09/2023 at 18:48 By Paul Kunert At least it was the weekend Azure SQL Database caused some annoyance over the weekend with admins on the US east coast unable to connect to the service following a network infrastructure power failure.… This

CERN swaps out databases to feed its petabyte-a-day habit 18/09/2023 at 18:09 By Lindsay Clark Run 3 reboot provoked challenges for Europe’s particle-smashing project Europe’s particle accelerator at CERN spews out around a petabyte of data daily, which means monitoring the computing infrastructure that processes the data is crucial.… This article is an excerpt from

Eric Johnson appointed Chief Information Officer at PagerDuty 18/09/2023 at 17:03 By Eric Johnson has been hired as Chief Information Officer at PagerDuty. Johnson will oversee critical IT infrastructure with two decades of experience. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

AMD’s latest Epyc is slimmer, cooler, and ready to party at the edge 18/09/2023 at 16:34 By Tobias Mann Little chip promises big power savings AMD’s latest CPU is a shrunken Epyc optimized for power-limited and thermally challenging telco and cloud edge deployments.… This article is an excerpt from The Register View Original Source

New AMBERSQUID Cryptojacking Operation Targets Uncommon AWS Services 18/09/2023 at 16:16 By A novel cloud-native cryptojacking operation has set its eyes on uncommon Amazon Web Services (AWS) offerings such as AWS Amplify, AWS Fargate, and Amazon SageMaker to illicitly mine cryptocurrency. The malicious cyber activity has been codenamed AMBERSQUID by cloud and container security firm Sysdig. “The

Hook: New Android Banking Trojan That Expands on ERMAC’s Legacy 18/09/2023 at 16:16 By A new analysis of the Android banking trojan known as Hook has revealed that it’s based on its predecessor called ERMAC. “The ERMAC source code was used as a base for Hook,” NCC Group security researchers Joshua Kamp and Alberto Segura said in

Think Your MFA and PAM Solutions Protect You? Think Again 18/09/2023 at 16:16 By When you roll out a security product, you assume it will fulfill its purpose. Unfortunately, however, this often turns out not to be the case. A new report, produced by Osterman Research and commissioned by Silverfort, reveals that MFA (Multi-Factor Authentication)

California passes bill to set up one-stop data deletion shop 18/09/2023 at 15:48 By Brandon Vigliarolo Also, LockBit gets a new second stringer, AirTag owners find yet another illicit use, and this week’s critical vulns Infosec in brief  Californians may be on their way to the nation’s first “do not broker” list with the passage

Having read the room, Unity goes back to drawing board on runtime fee policy 18/09/2023 at 15:04 By Richard Currie But the damage has already been done Hell hath no fury like a developer scorned, and Unity is finding out the hard way after poorly received adjustments to its runtime policy last week.… This article

Cryptojackers spread their nets to capture more than just EC2 18/09/2023 at 14:32 By Richard Speed AMBERSQUID operation takes AWS’s paths less travelled in search of compute As cloud native computing continues to gain popularity, so does the risk posed by criminals seeking to exploit the unwary. One newly spotted method targets services on the

Mention AI in earnings calls … and watch that share price leap 18/09/2023 at 13:33 By Dan Robinson This week’s story is brought to you by the letters C, E, O, as well as B and S Readers may have noticed there’s a great deal of interest in AI at the moment but can the

Britcoin or Britcon? Bank of England grilled on Digital Pound privacy concerns 18/09/2023 at 11:33 By Jude Karabus At least the economists seem to have a better grip on tech than Online Safety Bill pushers… “Nobody in this country wants there to be programmable digital currency like the Chinese system, where the government can basically

Retool Falls Victim to SMS-Based Phishing Attack Affecting 27 Cloud Clients 18/09/2023 at 10:17 By Software development company Retool has disclosed that the accounts of 27 of its cloud customers were compromised following a targeted and SMS-based social engineering attack. The San Francisco-based firm blamed a Google Account cloud synchronization feature recently introduced in April 2023 for

South Korean telco SK Broadband and Netflix call a truce in network payment fight 18/09/2023 at 09:50 By Laura Dobberstein Maybe better together? Duo announce AI and entertainment product partnership South Korean telecom SK Broadband and Netflix have called a truce in their dispute over who should pay for the trillions of bits of video

MSSP Alert Names Trustwave to 2023 Top 250 MSSPs List 18/09/2023 at 09:19 By For the seventh consecutive year, Trustwave has been named a Top 10 Managed Security Services Provider by MSSP Alert.  This article is an excerpt from Trustwave Blog View Original Source

Activist investor KKR buys 20 percent of Asian datacenter outfit 18/09/2023 at 08:05 By Laura Dobberstein Owner of Cloudera and Barracuda likes the look of Singtel’s portfolio Global investment firm KKR will acquire a 20 percent stake in the regional datacenter business of major telecom conglomerate Singtel – a move intended to expand its Asian