Uncategorized

Twitter ad revenue has halved since Elon Musk took over 17/07/2023 at 15:32 By Lindsay Clark While Zuckerberg’s Threads reels in users at record rates Despite the best efforts of Elon Musk, the world’s most compelling/irritating social media platform has been more or less assured as the go-to outlet for the political commentary, shitposting and […]

Strengthening financial service cybersecurity 17/07/2023 at 15:02 By Maintaining security systems at financial institutions is top of mind for a lot of security leaders. Here, we talk to Ross Hamilton, CISO at Episode Six. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Microsoft’s Surface Pro 9 requires a tedious balancing act 17/07/2023 at 14:32 By Simon Sharwood There’s probably someone out there who likes a wobbly laptop that cuts their flesh Desktop Tourism  In one of the documents uncovered during Microsoft’s defense of its acquisition of Activision is a slide in which the software giant expresses its

These 6 Questions Will Help You Choose the Best Attack Surface Management Platform 17/07/2023 at 14:31 By The hype around different security categories can make it difficult to discern features and capabilities from bias when researching new platforms. You want to advance your security measures, but what steps actually make sense for your business? For

Malicious USB Drives Targetinging Global Targets with SOGU and SNOWYDRIVE Malware 17/07/2023 at 14:31 By Cyber attacks using infected USB infection drives as an initial access vector have witnessed a three-fold increase in the first half of 2023,  That’s according to new findings from Mandiant, which detailed two such campaigns – SOGU and SNOWYDRIVE –

UK government faces calls to end IR35 double tax anomaly 17/07/2023 at 13:47 By Lindsay Clark Meanwhile, Conservative stalwart calls to repeal law Campaigners have called for the UK tax collector to respond to a consultation on how to avoid tech contractors paying a double tax while their status is defined.… This article is an

Goodbye Azure AD, Entra the drag on your time and money 17/07/2023 at 12:48 By Rupert Goodwins Relic of the Ballmer years, we shall not see such marketing nonsense again… oh, hang on Opinion  All tech grunts know an update from a vendor can be good news, bad news, or both. Fortunately, there’s a quick

Cybercriminals Exploit Microsoft Word Vulnerabilities to Deploy LokiBot Malware 17/07/2023 at 12:32 By Microsoft Word documents exploiting known remote code execution flaws are being used as phishing lures to drop malware called LokiBot on compromised systems. “LokiBot, also known as Loki PWS, has been a well-known information-stealing Trojan active since 2015,” Fortinet FortiGuard Labs researcher Cara Lin said.

1 in 4 Brits are playing with generative AI, and some take its word as gospel 17/07/2023 at 11:46 By Paul Kunert Employees are kicking back and letting chatbots do the work Almost one in two fleshbags that have dabbled with generative AI believe its responses are always bang on the money, and some are

CERT-UA Uncovers Gamaredon’s Rapid Data Exfiltration Tactics Following Initial Compromise 17/07/2023 at 08:47 By The Russia-linked threat actor known as Gamaredon has been observed conducting data exfiltration activities within an hour of the initial compromise. “As a vector of primary compromise, for the most part, emails and messages in messengers (Telegram, WhatsApp, Signal) are used,

How to hire & retain future cybersecurity leaders 17/07/2023 at 07:17 By Ariel Weintraub, Head of Enterprise Cyber Security at MassMutual, shares how organizations should upskill cyber talent to shape future leadership. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Boris Johnson pleads ignorance, which just might work 17/07/2023 at 05:33 By Brandon Vigliarolo ALSO: More high-profile MOVEit victims; CVSS 4.0 coming soon; and a long list of critical vulnerabilities Infosec in brief  Former UK prime minister Boris Johnson lobbed a wrench into the works of the country’s COVID-19 inquiry by claiming he couldn’t remember

India Big four outsourcers all have people problems 17/07/2023 at 04:18 By Laura Dobberstein ALSO: China taikonaut moon plans; Singapore’s Temasek to stay clear of crypto; India ponders ban on for-profit .IN sales; and more. APAC in brief  India’s big four services giants are doing it tough, with Wipro and HCL deferring pay reviews and

Microsoft’s security roadmap: Protect secrets in Azure DevOps 16/07/2023 at 17:02 By Jeff Burt You can’t steal what you can’t access … we hope Microsoft has vowed to bulk up security around its Azure DevOps cloud services developers use to build their applications and manage their software projects.… This article is an excerpt from The

This AI is better than you at figuring out where a street pic was taken just by looking at it 15/07/2023 at 22:33 By Thomas Claburn PIGEON homes in on your geolocation A trio of Stanford computer scientists have developed a deep learning model to geolocate Google Street View images, meaning it can figure out

Why do cloud providers keep building datacenters in America’s hottest city? 15/07/2023 at 19:17 By Tobias Mann A 100 days over 100F and historic drought don’t worry Microsoft or Google With more than a hundred 100F (37.7C) days a year and a persistent drought, on paper Phoenix, Arizona is one of the last places you’d

Why do cloud providers keep building datacenters in the America’s hottest city? 15/07/2023 at 16:34 By Tobias Mann A 100 days over 100F and a historic drought don’t worry Microsoft or Google With more than a hundred 100F (37.7C in non-Freedom units) days a year and a persistent drought, on paper Phoenix, Arizona is one

WormGPT: New AI Tool Allows Cybercriminals to Launch Sophisticated Cyber Attacks 15/07/2023 at 14:03 By With generative artificial intelligence (AI) becoming all the rage these days, it’s perhaps not surprising that the technology has been repurposed by malicious actors to their own advantage, enabling avenues for accelerated cybercrime. According to findings from SlashNext, a new

Infosec watchers: TeamTNT crew may blast holes in Azure, Google Cloud users 15/07/2023 at 11:35 By Jeff Burt Why limit yourself to only stealing AWS credentials? A criminal crew with a history of deploying malware to harvest credentials from Amazon Web Services accounts may expand its attention to organizations using Microsoft Azure and Google Cloud

Microsoft Bug Allowed Hackers to Breach Over Two Dozen Organizations via Forged Azure AD Tokens 15/07/2023 at 10:31 By Microsoft on Friday said a validation error in its source code allowed for Azure Active Directory (Azure AD) tokens to be forged by a malicious actor known as Storm-0558 using a Microsoft account (MSA) consumer signing key to