cybersecurity
Security researchers at Sysdig say that they have identified a previously unreported threat actor “using some of the largest cloud and continuous integration and deployment (CI/CD) service providers” in a massive “freejacking” campaign that makes use of trial accounts’ free compute to power cryptomining campaigns. Dubbing it PURPLEURCHIN, Sysdig
Customers being told GDPR disclosure unnecessary
IT managers say their orgs are better prepared - infosec pros are less confident...
FIDO2 makes the user initiate all authentication attempts.
MS now says the blocklist will only be updated alongside major Windows releases.
SA&T is evolving fast. It needs to...
No insight into how credentials were obtained...
A critical vulnerability in an Azure tool that lets users manage Kubernetes clusters can be exploited remotely without authentication to gain administrative control over Kubernetes clusters, as well as Azure edge devices. The vulnerability, allocated a maximum possible CVSS (severity rating) score of 10 has been allocated CVE-2022-37968. It is