DevOps
BoE, Deutsche Börse, Fidelity on the challenges of maintaining security without sacrificing innovation
"That’s definitely the hottest topic right now in tech for us across the bank,”
developers
Mercedes Benz' IT manager on coding automation, "Developer Happiness"
"I learnt very early on in my career, a fool with a tool is still a fool."
Microsoft
Microsoft unveils “the last puzzle piece” – its own semiconductors
Big claims by Satya Nadella, big news for the industry, but no benchmarks or hard specifications yet.
Patch Tuesday
Three Windows zero days are under attack: Patch up.
"Loaded by default on just about every version of Windows, so it provides a broad attack surface"
Citrix
1 Citrix bug alone triggered 13 “nationally significant” UK cybersecurity incidents
You filthy animals are **** at network architecture, and it may be "necessary to expand threat hunting" says NCSC.
NVIDIA
NVIDIA looks to bring monster AI capabilities to cloud, enterprise, with HGX H200
An eight-way HGX H200 provides over 32 petaflops of FP8 deep learning compute and 1.1TB of aggregate high-bandwidth memory
Nike
Nike appoints Amazon Fashion President as its new Chief Technology Officer
A big ERP overhaul, sustaining app-led revenue growth and a focus on supply chain optimisation are priorities at Nike...
Kubernetes
Public Kubernetes API server numbers pass one million, as attackers start to consider K8s a "central target"
"Once an attacker is past the initial access, the opportunities are ample for lateral movement and privilege escalation within a cluster..."
SysAid
IT support software from SysAid being exploited in the wild
Clear IOCs, guidance and documentation: A commendable response from SysAid.
ransomware
World’s Biggest Bank hacked: ICBC may have failed to patch "Citrix Bleed" vulnerability
Courier dispatched with a USB stick carrying trade settlement details after systems disrupted...
DDoS
ChatGPT says major outages may be due to DDoS attacks
Incident follows record HTTP2 "Rapid Reset" attack warnings as well as CISA note on exploitation of Service Location Protocol vulnerability for DDoS purposes.
GitHub
"Refounded" GitHub boasts new AI tools to spot insecure code in real-time, let devs use natural language
“Our model targets the most common vulnerable coding patterns, including hardcoded credentials, SQL injections, and path injections" says "refounded" company.