cybersecurity
Microsoft itself warns that it is "not possible to audit the generation of SAS tokens"
Social engineering allegedly led to MGM attack: $13 billion firm's cybersecurity "defeated by a 10-minute conversation"?
From SAP, an "update that only became necessary because the Security Note was accidentally previously deleted" and from Microsoft, some strange assessments.
"We also notified law enforcement and took prompt action to protect our systems and data, including shutting down certain systems."
An attacker could have been forging access tokens to Microsoft services for up to two years, unnoticed
"The goddam plane has crashed into the mountain!"
Details of security perimeters for highly sensitive national security sites published for anyone to read
"Scanning for one type of content, for instance, opens the door for bulk surveillance" says Apple's user privacy chief.
The EU has proposed a new Cyber Resilience Act. The lack of industry dialogue has the open-source sector worry that the act will stifle development.