Uncategorized

Amazon’s latest directive: Report to the office ‘cos we’re watching you 12/08/2023 at 01:04 By Jude Karabus Worker bees protest that they were read the riot act even when they did come in Amazon has contacted staff it says are not clocking into the office three days a week “even though your assigned building is […]

Virgin Galactic sends oldest-ever Brit and first mother-daughter duo into space-ish 12/08/2023 at 00:17 By Katyanna Quach Depending on where you draw the line Virgin Galactic successfully launched its first-ever private commercial spaceflight on Thursday, flying three space tourists to altitudes high enough to experience zero-gravity conditions for a few minutes.… This article is an

Tinker Tailor Soldier Pi? Asus’s ‘NUC-sized’ SBC aims to out-Pi the Raspberry 11/08/2023 at 23:49 By Dan Robinson Bigger, bolder, and brimming with ports for hobbyists and devs alike Asus has released a new addition to its Tinker Board line of Arm-based single-board computer (SBC) systems, giving hobbyists and embedded developers another design option with

Microsoft warns Codesys PLC bugs could ‘shut down power plants’ 11/08/2023 at 22:47 By Jessica Lyons Hardcastle What are they running, Windows? Ka-boom-tsch Fifteen bugs in Codesys’ industrial control systems software could be exploited to shut down power plants or steal information from critical infrastructure environments, experts have claimed.… This article is an excerpt from

Amazon’s rumored investment in Arm’s IPO might be good insurance 11/08/2023 at 22:17 By Tobias Mann What benefits the chip designer will trickle down to AWS’s Graviton team Analysis  One of Amazon Web Services’ key differentiators is its use of custom silicon, including Arm CPUs throughout its cloud infrastructure.… This article is an excerpt from

Maker of Chrome extension with 300,000+ users tells of constant pressure to sell out 11/08/2023 at 20:33 By Thomas Claburn Anyone with sizable audience in this surveillance economy is invited to stuff their apps with tracking and ads Interview  In the past nine years, Oleg Anashkin, a software developer based in San Jose, California, has

HashiCorp’s new license is still open source-ish, just with less free lunch 11/08/2023 at 19:02 By Liam Proven Company transitions to BSL, and fundies are furious HashiCorp, the vendor of Vagrant, Terraform, and a number of other deployment-automation tools, is changing its software license to the Business Source License. You can still get the source

Linux project’s first full version has all the subtlety of a Rhino in a China shop 11/08/2023 at 17:49 By Liam Proven An option if Ubuntu interim releases are too slow, easy and stable for your liking The first release of Rhino Linux brings the rolling release model of Arch Linux to an Ubuntu base,

Researchers Uncover Decade-Long Cyber Espionage on Foreign Embassies in Belarus 11/08/2023 at 17:32 By A hitherto undocumented threat actor operating for nearly a decade and codenamed MoustachedBouncer has been attributed to cyber espionage attacks aimed at foreign embassies in Belarus. “Since 2020, MoustachedBouncer has most likely been able to perform adversary-in-the-middle (AitM) attacks at the ISP

Amazon fulfillment center cited for ergonomic hazards 11/08/2023 at 17:18 By The Occupational Safety and Health Administration (OSHA) found that an Amazon fulfillment center exposed workers to ergonomic hazards.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Want to pwn a satellite? Turns out it’s surprisingly easy 11/08/2023 at 16:17 By Iain Thomson PhD student admits he probably shouldn’t have given this talk Black Hat  A study into the feasibility of hacking low-Earth orbit satellites has revealed that it’s worryingly easy to do.… This article is an excerpt from The Register View

Improve routine security program alignment 11/08/2023 at 16:17 By Stronger mission alignment may be the best way for security leaders to keep security programs focused on the top management’s priorities. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Addressing retail theft with an intelligent loss prevention approach 11/08/2023 at 16:17 By Retailers have the ability to take an intelligence-led approach to turn loss prevention into a proactive operation rather than a reactive one.   This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Prepare for seasonal weather emergencies and reduce risk 11/08/2023 at 16:17 By Safety procedures and emergency response plans can seem daunting, so security leaders should assign employees to incident management teams. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Enhancing TLS Security: Google Adds Quantum-Resistant Encryption in Chrome 116 11/08/2023 at 15:47 By Google has announced plans to add support for quantum-resistant encryption algorithms in its Chrome browser, starting with version 116. “Chrome will begin supporting X25519Kyber768 for establishing symmetric secrets in TLS, starting in Chrome 116, and available behind a flag in Chrome 115,” Devon O’Brien said in

Electoral Commission had internet-facing server with unpatched vuln 11/08/2023 at 15:05 By Dan Robinson ProxyNotShell vulnerability could be how UK body got pwned, suggests infosec expert The hacking of the UK’s Electoral Commission was potentially facilitated by the exploitation of a vulnerability in Microsoft Exchange, according to a security expert.… This article is an excerpt

Researchers Shed Light on APT31’s Advanced Backdoors and Data Exfiltration Tactics 11/08/2023 at 13:49 By The Chinese threat actor known as APT31 (aka Bronze Vinewood, Judgement Panda, or Violet Typhoon) has been linked to a set of advanced backdoors that are capable of exfiltrating harvested sensitive information to Dropbox. The malware is part of a

Magento shopping cart attack targets critical vulnerability revealed in early 2022 11/08/2023 at 13:33 By Thomas Claburn Really? You didn’t bother to patch a 9.8 severity critical flaw? Ecommerce stores using Adobe’s open source Magento 2 software are being targeted by an ongoing exploitation campaign based on a critical vulnerability that was patched last year,

Co-founder of Yandex – Russia’s Google clone – denounces war on Ukraine 11/08/2023 at 12:48 By Laura Dobberstein Arkady Volozh is working with refugee engineers, of which there are plenty Arkady Volozh, co-founder of Russian Google analog Yandex, has denounced Russia’s invasion of Ukraine.… This article is an excerpt from The Register View Original Source

New SystemBC Malware Variant Targets South African Power Company 11/08/2023 at 12:47 By An unknown threat actor has been linked to a cyber attack on a power generation company in South Africa with a new variant of the SystemBC malware called DroxiDat as a precursor to a suspected ransomware attack. “The proxy-capable backdoor was deployed