News - The Stack (Page 36)

TikTok

Trending on TikTok: A catchy Korean jingle, “life-changing” shapewear – and tech layoffs

Clumsily or coldly firing staff? Be prepared for prime time on social media...

Cybersecurity

Ivanti VPN appliance exploitation now happening at scale

VPN appliances "all appear to have been constructed with the code equivalent of string, stamped with the word ‘secure’ and then just left to decay for 20 years..."

Citi

Citi retires 6% of its legacy applications – and 20,000 people

People take the hit to offset huge spending on tech, risk.

cybersecurity

OpenAI, TikTok, X hunt insider threat specialists -- on widely diverging salary bands

"In every insider threat case, there is a combination of network activity and employee behaviour. The malicious activity crosses both physical and electronic modalities..."

Cloudflare

“Extremely traumatising” – Cloudflare sales executives get sacked, take it badly; CEO weighs in

"When we’re doing performance management right, we can often tell within three months or less of a sales hire, even during the holidays, whether they’re going to be successful or not..."

vulnerabilities

Pre-auth RCE zero days in Ivanti VPNs are being exploited by a Chinese APT and there won’t be a patch for weeks. Buckle up.

Attackers re-write JavaScript loaded by the VPN login page for the Appliance to capture credentials; also grabbed Veeam credentials, moved laterally for full SYSTEM control.

Broadcom

Broadcom didn’t need to reinvent the mainframe – it just needed to buy VMware

Revirtualization is possible. But it’s going to hurt

Patch Tuesday

Patch Tuesday brings lots of chaff, a little buggy wheat too. Some CVE highlights to review.

One vulnerability bears a striking resemblance to an 0day that was actively exploited in the wild in November 2023.

SEC’s X account hacked: Unlike Mandiant, no MFA was in place

"The SEC has not approved the listing and trading of spot bitcoin exchange-traded products"

ransomware

Disclosed ransomware attacks hit two-per day in December: The real figure is ~500% higher

"Simulate and exercise breach readiness, especially abilities to reduce blast radius of a cyber attack. Involve top leadership, the board, and customers in separate cyber war games, as often as practical..."

See all