Security
AWS has now "included additional protections against memory dumps within container builds..."
"The core vulnerability is a help desk process that lacks robust, non-transferable identity verification for password resets..."
Interlock is known for using "double extortion methods" to encrypt and exfiltrate data.
Insurers and vendors alike call for clarity on who would be affected, and what reporting mandates will look like.
Google's new open source platform will shield popular dependencies with automations and data visibility tools.
"A modern zero-day chain with automatic shell drop, full persistence, and zero authentication"
Too exotic for cybercriminals? Unlikely. Kubernetes malware spotted escaping Windows containers in 2021 and LangFlow seen exploited this year.
The UK’s National Cyber Security Centre (NCSC) is keen to bring in fresh blood to its Vulnerability Research Initiative, including across AI. Contrary to a flurry of press releases from excited cybersecurity vendors hitting The Stack’s inbox this week, the VRI is not new and has been running
"In at least one state, the local Army National Guard unit directly provides network defense services..."