Citrix 1 Citrix bug alone triggered 13 “nationally significant” UK cybersecurity incidents You filthy animals are **** at network architecture, and it may be "necessary to expand threat hunting" says NCSC.
CISO Mike Hanley, CSO, GitHub on “guns, gates, guards”, AI, ignoring the “flashy stuff” "You have to be intentional about designing for real people who are not security experts."
NVIDIA NVIDIA looks to bring monster AI capabilities to cloud, enterprise, with HGX H200 An eight-way HGX H200 provides over 32 petaflops of FP8 deep learning compute and 1.1TB of aggregate high-bandwidth memory
Members only Nike Nike appoints Amazon Fashion President as its new Chief Technology Officer A big ERP overhaul, sustaining app-led revenue growth and a focus on supply chain optimisation are priorities at Nike...
Kubernetes Public Kubernetes API server numbers pass one million, as attackers start to consider K8s a "central target" "Once an attacker is past the initial access, the opportunities are ample for lateral movement and privilege escalation within a cluster..."
Members only CISO “Security is a full contact sport”: Aerospace firm Sierra Nevada Corporation CSO Robert Daugherty "We operate with the assumption that a sophisticated nation state threat actor is always active inside the organisation"
data Public sector CIOs must prioritise data compatibility If you are in the middle of a transformation exercise, how do you ensure data compatibility while you are switching systems?
SysAid IT support software from SysAid being exploited in the wild Clear IOCs, guidance and documentation: A commendable response from SysAid.
ransomware World’s Biggest Bank hacked: ICBC may have failed to patch "Citrix Bleed" vulnerability Courier dispatched with a USB stick carrying trade settlement details after systems disrupted...
DDoS ChatGPT says major outages may be due to DDoS attacks Incident follows record HTTP2 "Rapid Reset" attack warnings as well as CISA note on exploitation of Service Location Protocol vulnerability for DDoS purposes.
Cloud Cloud workload repatriation will only deliver results if CIOs pivot to a hybrid-first strategy Former Chief Information Officer David Walker welcomes the new wave of flexible thinking and shares some advice on how to capitalise on this latest trend
GitHub "Refounded" GitHub boasts new AI tools to spot insecure code in real-time, let devs use natural language “Our model targets the most common vulnerable coding patterns, including hardcoded credentials, SQL injections, and path injections" says "refounded" company.
developers India to have the world's most developers on GitHub by 2027 Report also captures rapid growth in Python use and an explosion in AI projects.
data centers Data center heat will warm thousands of homes through this innovative project More than just hot air: waste heat is a problem for data centres, and using it to warm up cold homes could be the answer.
telco Nationwide Aussie telco outage cause "too technical" to explain: The answer may be in a (heavily redacted) Canadian report How not to share a root cause analysis: Lessons from Australia's Optus and Canada's Rogers...
ChatGPT ChatGPT suffers major (but swiftly fixed) outage Two outages back-to-back came the day of OpenAI's new models and services launch and appear to have grown more severe today...
0days Why firewalls, VPNs and hypervisors are a hacker's new favourite target TTPs and telemetry suggest a real focus on zero days and appliances by Chinese APTs.
Members only C-Suite “I just starved the legacy, it was untenable anyway” BT’s CDIO Harmeen Mehta on taking mainframes to the cloud, data transformation and digital value "Is there a path to accelerate the shit out of this?"
utilities UK's crisis-wracked largest water company seeks help from “Digital Twins” amid crisis Training, software, analysis, data migration support and more needed as company goes to market.
OpenAI OpenAI unveils new models, capabilities OpenAI has pushed out a flurry of updates at its first developer conference – including the release of its new GPT-4 Turbo which can fit the “equivalent of more than 300 pages of text in a single prompt” – and the ability to train and run LLMs powered by proprietary datasets. Calling
AI EU investors including Bosch, SAP pump $500 million into "sovereign" AI firm Aleph Alpha The investment comes as a Google DeepMind paper poured some cold water on the AI hype, finding "various failure modes of transformers and degradation of their generalization for even simple extrapolation tasks" if these are out of its training data domain.
Outages 40-hour Cloudflare outage: Tier 3 DC power failure exposes unknown software dependencies, triggers rethink "Dependencies shouldn’t have been so tight, should have failed more gracefully, and we should have caught them"
Microsoft Microsoft pledges a dramatic software security overhaul, as Amazon veteran shakes the tree Biggest overhaul of Redmond's security in 20 years sees promises of "code analysis [of] 100% of commercial product”, cryptographic keys to be kept in a hardened Azure HSM, more.
CISO As SEC’s SolarWinds charges reverberate, companies scrutinise cyber risk disclosures 'Do not state anything that is subjective and avoid adjectives (e.g., "state of the art," "mature," "advanced," "appropriate," "comprehensive," or "reasonable")' say experts.