AWS
AWS overhauls IAM control plane after vulnerability exposed users
Datadog suggests AWS Amplify users conduct "an audit of your roles and potential threat activity" after investigation.
Cybersecurity
XZ Redux? Social engineering attacks on OSS intercepted
"These emails implored OpenJS to take action to update one of its popular JavaScript projects to ‘address any critical vulnerabilities'"
AI
Synthetic focus groups and RAG in the contact centre: Bayer, Verizon, WPP on their AI deployments
"You can create a consumer, a brand strategist, a brand marketer, client, encoded with actual ground truth data, then critique the content that's been generated by the system with agents playing off against each other."
Citigroup
Citi slashes 110 applications, overhauls backups: Next up...
Remediating data is a major 2024 priority
News
Apple shot down in appeal to App Store suit
Apple will have to continue its defense of a suit from developers after a court dismissed the company's motion to toss the case
VPN
Palo Alto Networks: CVSS 10 bug in Pan-OS is being exploited in the wild
Patch? You'll need to wait until Sunday. Turn off telemetry (no, really; it's a mitigation!) and go to the pub. OK, maybe don't.
Cybersecurity
Sisense breach: CISO posts guidance amid frantic community action
"They have direct access to JDBC connections, to SSH, and to SaaS platforms... This is a worst case scenario"
Cybersecurity
Could Chrome be a real security weapon for defenders? A new $6/user proposition has potential...
From vanilla data breach risks to insider threats, Chrome Enterprise Premium's capabilities look worth exploring...
News
CISA issues warning over 'Midnight Blizzard' Microsoft attack
CISA has posted a new directive for US government agencies regarding targeted attacks by the Midnight Blizzard hacking team that also hit Microsoft
News
FTC and EU link up for new tech policies
Reps from the FTC and EU met up in Washington to discuss their respective policies around AI and tech mergers
News
Apple Partner tells The Stack what went wrong (and right) with Cupertino's magic VR
The user in the middle of the Apple Vision Pro saga says communication is key
AWS
AWS took 6 months to fix Security Token Service bug - IAM policy simulator inadequate, says Stedi
"No system is infallible. Sometimes, it is AWS..."