Access Now announced that the US Customs and Border Protection agency released records on its app following the NGO’s lawsuit This article has been indexed from www.infosecurity-magazine.com Read the original article: US Border Agency Under Fire for App’s Handling of…
Tag: EN
Iran and China-linked actors used ChatGPT for preparing attacks
OpenAI disrupted 20 cyber and influence operations in 2023, revealing Iran and China-linked actors used ChatGPT for planning ICS attacks. OpenAI announced the disruption of over 20 cyber and influence operations this year, involving Iranian and Chinese state-sponsored hackers. The…
IronNet Has Shut Down
After retiring in 2014 from an uncharacteristically long tenure running the NSA (and US CyberCommand), Keith Alexander founded a cybersecurity company called IronNet. At the time, he claimed that it was based on IP he developed on his own time…
Keir Starmer hands ex-Darktrace boss investment minister gig
What’s harder? Convincing people to invest in a beleaguered security business or a tiny island everybody hates? Keir Starmer’s decision to appoint Poppy Gustafsson as the UK’s new investment minister is being resoundingly praised despite the former Darktrace boss spending…
EU adopts Cyber Resilience Act to secure connected products
The EU Council has adopted the Cyber Resilience Act (CRA), a new law that aims to make consumer products with digital components safe(r) to use. CRA requirements The CRA outlines EU-wide cybersecurity standards for digital products, i.e. products that are…
Tesla Shares Drop After Cybercab Unveiling
Mixed reactions as Elon Musk hypes $30,000 ‘self driving’ robotaxi called Cybercab, as well as larger Robovan This article has been indexed from Silicon UK Read the original article: Tesla Shares Drop After Cybercab Unveiling
Silicon UK In Focus Podcast: Is Your Business Data Ready?
In this episode, we uncover why most organisations aren’t ready to harness generative AI. We explore data stack limitations, tech strategy inflexibility, and the critical role of a unified data culture in unlocking AI’s potential. This article has been indexed…
Russia’s SVR Targets Zimbra, TeamCity Servers for Cyber Espionage
Russian-backed APT29 has been spying on US and European organizations since at least 2021, a US-UK joint advisory said This article has been indexed from www.infosecurity-magazine.com Read the original article: Russia’s SVR Targets Zimbra, TeamCity Servers for Cyber Espionage
Sonatype Reports 156% Increase in OSS Malicious Packages
A new Sonatype report reveals a 156% surge in open source malware, with over 704,102 malicious packages identified since 2019, as OSS adoption continues to skyrocket This article has been indexed from www.infosecurity-magazine.com Read the original article: Sonatype Reports 156%…
Cloud Ransomware Attack: Microsoft Sees Storm-0501 As Threat
Microsoft has recently identified a threat actor known as Storm-0501 targeting government, manufacturing, transportation, and law enforcement sectors in the United States (US) in a cloud ransomware attack campaign. In this article, we’ll dive into the details of the campaign…
Passwordless Authentication without Secrets!
Passwordless Authentication without Secrets! divya Fri, 10/11/2024 – 08:54 < div> As user expectations for secure and seamless access continue to grow, the 2024 Thales Consumer Digital Trust Index (DTI) research revealed that 65% of users feel frustrated with frequent…
CISA Warns of Threat Actors Exploiting F5 BIG-IP Cookies for Network Reconnaissance
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that it has observed threat actors leveraging unencrypted persistent cookies managed by the F5 BIG-IP Local Traffic Manager (LTM) module to conduct reconnaissance of target networks. It said the module…
Earth Simnavaz Levies Advanced Cyberattacks Against UAE and Gulf Regions
Trend Micro’s investigation into the recent activity of Earth Simnavaz provides new insights into the APT group’s evolving tactics and the immediate threat it poses to critical sectors in the UAE. This article has been indexed from Trend Micro Research,…
Internet Archive data breach impacted 31M users
The Internet Archive disclosed a data breach, the security incident impacted more than 31 million users of its “The Wayback Machine.” The Internet Archive is an American nonprofit digital library website that provides free access to collections of digitized materials…
Ubuntu 24.10 Oracular Oriole brings tighter security controls
Canonical released Ubuntu 24.10 Oracular Oriole, which brings notable advancements, including an updated kernel, new toolchains, and the GNOME 47 desktop environment, along with significant enhancements in software security. “Oracular Oriole sets a new pace for delivering the latest upstream…
New Critical GitLab Vulnerability Could Allow Arbitrary CI/CD Pipeline Execution
GitLab has released security updates for Community Edition (CE) and Enterprise Edition (EE) to address eight security flaws, including a critical bug that could allow running Continuous Integration and Continuous Delivery (CI/CD) pipelines on arbitrary branches. Tracked as CVE-2024-9164, the…
What is Digital Assurance and Why It’s Crucial in Today’s Business Landscape
Today’s businesses must navigate evolving technologies, customer expectations, and security threats. Digital assurance is emerging as a pillar of this transformation, ensuring that enterprises can mitigate risks, deliver reliable systems, and create long-term business value. Digital assurance is a key…
News alert: SpyCloud accelerates supply chain risk analysis with new ‘IDLink’ correlation capability
Austin, TX, Oct. 10th, 2024, CyberNewswire — SpyCloud, the leader in Identity Threat Protection, announced that its SaaS Investigations solution has been enhanced with identity analytics that illuminate the scope of digital identities and accelerate successful outcomes of complex investigations…
Bohemia and Cannabia Dark Web Markets Taken Down After Joint Police Operation
The Dutch police have announced the takedown of Bohemia and Cannabia, which has been described as the world’s largest and longest-running dark web market for illegal goods, drugs, and cybercrime services. The takedown is the result of a collaborative investigation…
North Korean sponsored hackers target tech job seekers with phoney job interviews. Cyber Security Today for Friday, October 11, 2024
Cybersecurity Today: Data Breaches and Malware Threats In this episode of Cybersecurity Today, host Jim Love discusses the hacking incidents involving the Internet Archive and Fidelity, exposing millions of users’ data. Highlights include the Internet Archive breach attributed to the…