Cybersecurity Ivanti VPN appliance exploitation now happening at scale VPN appliances "all appear to have been constructed with the code equivalent of string, stamped with the word ‘secure’ and then just left to decay for 20 years..."
Cloud Google Cloud is NOT magicking away data egress fees GCP's somewhat limited move to drop "cloud switching" charges is aimed squarely at Microsoft.
X SEC’s X account hacked: Unlike Mandiant, no MFA was in place "The SEC has not approved the listing and trading of spot bitcoin exchange-traded products"
Cybersecurity Software licensing bug percolates pre-auth RCE risk downstream to PLC-land Another arguably more potent example and one actively exploited in the wild is CVE-2023-46604 – a CVSS 10 RCE vulnerability in Apache ActiveMQ; an open source message broker written in Java.
Members only AWS AWS rattles customers with unclear warning over mystery "recent CVE" Warns users it will terminate affected tasks, but leaves a lacuna... (Fear not, we're here with details)
Epstein US Courts files system crashes as new Jeffrey Epstein files drop Proposal that Bill Clinton come to court "a transparent ploy by Plaintiff to increase media exposure for her sensational stories through deposition side-show"
AI AI predictions for 2024? "No serious user-facing product will display GPT-4-generated output given its legal issues that will continue and become even more serious throughout 2024; new architectures competing with Transformer, such as Mamba, will appear..."
Cloud UK gas utility eyes "high-risk" shift to Azure, frets over ICS security "A requirement to bring unmanaged and unsupported ICS devices under proper governance and control..."
Members only MongoDB MongoDB hacked: Hints at authentication system compromise Attackers had access to certain corporate systems “for some period of time before discovery”
central government UK government eyes data centre security overhaul; may consider it CNI, create a new regulator "Risks have also been identified in relation to data centre customer access to sites and facilities, and access by contractors or those providing supply chain services..."
Oracle Larry Ellison: Oracle gave Elon Musk GPUs – “Boy, did they want more” “If Oracle Database just disappeared at companies, the whole planet would come to a standstill”
Patch Tuesday A December Patch Tuesday recap: Azure Logic Apps, Power Platform get critical fix A CVSS 9,8 bug that lets attackers spoof legitimate connectors between Microsoft/Azure services is the pick of the bunch...
Hashicorp HashiCorp’s slump: Blame “market conditions” says CEO, suggests he’ll nudge customers to cloud platform “I think that willingness to let a third-party run it where they don't necessarily have the direct operational control. It's just a much higher bar…”
CISO Microsoft appoints a new Global CISO amid security leadership shakeup "A storied career in high-scale/high-security, demanding environments"
AMD AMD makes its AI hardware leap as clouds cook up accelerators AMD, late to the GPU and AI accelerator party, showcases some impressive specs with its M1300X and M1300A, now shipping.
Members only pharma Merck says it's releasing a new AI-powered SaaS - trained on proprietary data CTO says new platform "enables any laboratory to count on generative AI to identify the most suitable drug-like candidates in a vast chemical space."
AI Apple quietly open sources AI tools in a landmark move Release under an MIT licence "may be Apple's biggest move on open-source AI so far" says one senior NVIDIA research scientist.
Windows 10 Support for Windows 10 to end October 2025: Prepare to open your wallets, or love Ubuntu Extended Security Updates of up to three years will be available...
Members only Cloud GPU-centric cloud provider CoreWeave raises at a $7 billion valuation, as NVIDIA backs buyers "We like big bursts and we cannot lie..."
DevOps Is DevOps dying as a discipline? "I’m not convinced that site reliability engineering was ever the responsibility of developers (or DevOps engineers) if you hold strongly to the belief that it’s a distinct role..."
Amazon AWS launches AI assistant “Amazon Q”, offers fine tuning for models on Bedrock "Administrators can also configure allowed topics and blocked topics and words so that the responses are controlled. In addition, administrators can enable or disable the upload file feature for their end users..."
cybersecurity ownCloud users could get badly owned as exploitation starts of CVSS 10 bug, with 11,000 instances exposed ownCloud claims 200,000 installations, 600 enterprise customers, and 200 million users with customers including the European Commission.
banks Banks need to do better on operational resilience: Basel "There is still work to do on developing appropriate business continuity and contingency plans and exit procedures where third parties provide critical operations"
AWS AWS reveals new Cost Optimization Hub, adds welcome customisations to Compute Optimizer A longer "lookback" period of utilisation history, centralised cost savings hub and more. But don't rely on it alone...