Content Paint

Security

Microsoft admits “insecure pattern” in Azure AD exposed customers to risk of data loss, account takeover

"The risk is mainly with multi-tenant applications where this misconfiguration could result [in] account and privilege escalation" -- here's what you need to do.

UK data watchdog wants DPOs to adopt PETS (without fur)

Homomorphic encryption, synthetic data, and other privacy enhancing technologies could help data leaders ensure “data protection by design and by default” says ICO

CVSS 4.0 release details

New metrics for Operational Technology exposure include whether the "consequences of the vulnerability meet definition of IEC 61508 consequence categories of "marginal," "critical," or "catastrophic."

Microsoft DDoS attacks hit Azure and likely Outlook but Redmond's coy with the details

Back in 2021 Microsoft boasted of shielding a customer from a 2.4 Tbps DDoS attack originating from 70,000 sources. It has not shared such detail on this successful incident that it its services...

new MOVEit vulnerability and federal agencies hacked

Hackers "often breach the Department’s defensive perimeter and roam freely within our information systems"

A third of Barracuda zero day victims are gov't agencies

Attackers demonstrated such sophisticated persistence capabilities that Barracuda and Mandiant have urged users to dump affected appliances irrespective of patch level.

Hackers could have taken over every single .ai domain

"It is clear that the internet is so, so brittle" and possibly held together with duct tape

VMware zero day used to hack defence, tech companies

The threat group has also used a wide range of attacker scripts to get vpxuser credentials, enumerate ESXi hosts and their guest VMs, and manipulate connected ESXi host firewall rules in order to steal data.

UK warns on “cyberbiosecurity” risks in new paper - amid synthetic biology, AI fears

Government promises a new "National Biosurveillance Network" that would join up "syndromic, epidemiological and promising environmental surveillance capabilities" in a new "Biothreats Radar" but promised funding is far from huge...

Search the site

Your link has expired. Please request a new one.
Your link has expired. Please request a new one.
Your link has expired. Please request a new one.
Great! You've successfully signed up.
Great! You've successfully signed up.
Welcome back! You've successfully signed in.
Success! You now have access to additional content.