Cybersecurity
Add "Emotional Intelligence" to the list of critical CISO traits.
"A lot of security professionals have very strong opinions"
Cybersecurity
Kia Motors hit by huge IT outage. Ransomware attack unconfirmed.
"IT service outage has impacted some internal networks"
Cybersecurity
Palo Alto Networks buys Bridgecrew, targets "shift left" security strategy, promises open source support.
Security from "build time to runtime"?
Cybersecurity
Creating OpenCTI: My mission to democratise threat intelligence through open source
"I couldn’t find the right tool on the market so I took matters into my own hands"
Cybersecurity
New free tool aims to tackle "nightmare" of debugging IPC on Linux
"A Unix socket and a FIFO both transfer bytes from one end to another, but that’s pretty much all they have in common."
Cybersecurity
Security researcher hacks Apple, Google, Microsoft, after compromising upstream software packages.
"Shopify's build system automatically installed a Ruby gem only a few hours after I had uploaded it, and then tried to run the code inside it."
Cybersecurity
Hacker gained access to a US water treatment plant, tried to poison water.
FBI investigating after thwarted breach.
Cybersecurity
Another batch of critical bugs in Cisco products raises tough questions.
Cisco product security continues to demand regular urgent patching from users: the company last week pushing out an advisory after multiple critical (CVSS 9.8) vulnerabilities were found in a family of VPN routers. The bugs grant any unauthenticated, remote attacker the ability to execute code as all-powerful root user.
Cybersecurity
There's an unpatched 0day in Internet Explorer that's been used to attack security researchers
No response from Microsoft to POC, says ENKI.
Cybersecurity
Serco hit by ransomware. Hackers claim 1TB of data stolen.
An NDA among the documents leaked.
Cybersecurity
Millions affected by 10-year old bug in a Linux utility that gives root.
Full root privileges on Ubuntu 20.04, Debian 10, and Fedora 33 demonstrated.
Cloud
This AWS API bug lets you check permissions without generating logs in CloudTrail: It's not getting fixed.
Some 645 different API actions across 40 different AWS services affected.