Security
If you're still trusting Russian network providers, please stop, researchers plead.
"Users can define a series of modular steps—such as static file analysis, dynamic sandboxing, hash verification, unpacking, or signature detection"
"Our market entry strategy has always been to enter categories at their inflection point"
“Someone intentionally slipped a live grenade into prod and AWS gave it version release notes.”
All exploitation takes is a “crafted API request”. The bug affects Cisco ISE and ISE-PIC releases 3.3 and 3.4, “regardless of device configuration.”
AWS has now "included additional protections against memory dumps within container builds..."
"The core vulnerability is a help desk process that lacks robust, non-transferable identity verification for password resets..."
Interlock is known for using "double extortion methods" to encrypt and exfiltrate data.
Insurers and vendors alike call for clarity on who would be affected, and what reporting mandates will look like.