Exploited 0-days, an incomplete fix, and a botched disclosure: Infosec snafu reigns
The exploited code-execution flaws are the kind coveted by ransomware and nation-state hackers. Enlarge (credit: Getty Images) Organizations big and small are once again scrambling to patch critical vulnerabilities that.....»»
AuditBoard enhances InfoSec Solutions to reduce compliance fatigue across the organization
AuditBoard announced powerful enhancements for its InfoSec Solutions to help organizations meet their IT compliance, cyber risk, and vendor risk management needs in the face of rising risks and increased regulatory requirements. With these new capabi.....»»
Brazil flooding death toll reaches 100
The death toll from devastating floods that have ravaged southern Brazil for days reached 100 on Wednesday, authorities said, as the search continued for dozens of people still missing......»»
Exploring the asteroid Apophis with small satellites
The author of a disaster novel couldn't have dreamed it up any better: On a Friday, the thirteenth of all days, the potentially dangerous asteroid (99942) Apophis will come extremely close to humanity......»»
Apple’s theatrical movie strategy may soon start to shift, says report
In the last year, Apple has significantly ramped up its movie offerings with a string of high-budget, big-name films receiving wide theatrical releases and long exclusivity windows before hitting Apple TV+. While the earlier days of Apple-funded.....»»
Apple"s iPad upgrades march Lightning one step closer to death
After 11 years, 6 months, and 5 days of valiant charging and data service, the Lightning port is no longer on any iPad that Apple sells.You'll never see it again — a Lightning port on an iPadIt's easy to be glad about the move to USB-C for Apple de.....»»
Grief, unity, and resilience: Study examines the impact of memorial days in Israel
A recent study at the Hebrew University examines the impact of memorial days in Israel on national unity amidst political polarization......»»
PSA: Watch out for this sneaky Netflix phishing scam
Phishing scams are abundant and one of the latest we’ve seen is trying to convince Netflix customers their accounts have “expired” with an option to extend their membership for free for 90 days. Here are the details and tips on how to help frie.....»»
Domestic violence disclosure schemes: Part of the solution to improving women"s safety or an administrative burden?
The spotlight is yet again shining on the national crisis of violence against women in Australia, and the calls for increased action and improved responses to all forms of domestic, family and sexual violence has intensified over the last three weeks.....»»
Five-day work week builds work–life balance in construction
Construction workers typically work six days a week but research tracking a five-day work week in the industry shows flexibility is key to improving worker well-being, with minimal perceived impact on productivity......»»
New infosec products of the week: May 3, 2024
Here’s a look at the most interesting products from the past week, featuring releases from Appdome, Cybersixgill, Proofpoint, Secure Code Warrior, Snyk, and Synopsys. Cybersixgill Third-Party Intelligence module identifies potential supply chain ri.....»»
Scientists" new approach in fight against counterfeit alcohol spirits
In the shadowy world of counterfeit alcoholic spirit production, where profits soar and brands are exploited, the true extent of this illegal market remains shrouded......»»
Cell contraction drives the initial shaping of human embryos, study finds
Human embryo compaction, an essential step in the first days of an embryo's development, is driven by the contractility of its cells. This is the finding of a team of scientists from CNRS, Institut Curie, Inserm, AP-HP and the Collège de France. Pub.....»»
Infosec products of the month: April 2024
Here’s a look at the most interesting products from the past month, featuring releases from: Akamai, Bitdefender, CyberInt, Fastly, Forcepoint, IDnow, Immuta, Index Engines, Invicti Security, LogRhythm, Netwrix, Owl Cyber Defense Solutions, Privace.....»»
Palo Alto firewalls: CVE-2024-3400 exploitation and PoCs for persistence after resets/upgrades
There are proof-of-concept techniques allowing attackers to achieve persistence on Palo Alto Networks firewalls after CVE-2024-3400 has been exploited, the company has confirmed on Monday, but they are “not aware at this time of any malicious a.....»»
Researchers unveil novel attack methods targeting Intel’s conditional branch predictor
Researchers have found two novel types of attacks that target the conditional branch predictor found in high-end Intel processors, which could be exploited to compromise billions of processors currently in use. The multi-university and industry resea.....»»
UK enacts IoT cybersecurity law
The Product Security and Telecommunications Infrastructure (PSTI) Act has come into effect today, requiring manufacturers of consumer-grade IoT products sold in the UK to stop using guessable default passwords and have a vulnerability disclosure poli.....»»
I spent four days with the AI gadget of the future, and it was a mess
The Rabbit R1 is an AI-powered gadget that can help you get things done quicker than you're able to with your phone. At least, that's what it's supposed to do......»»
1 in 3 Americans Live in Areas With Dangerous Air Pollution
Climate change is increasing the number of days people are exposed to hazardous pollution, affecting already disadvantaged communities the most......»»
Week in review: Two Cisco ASA zero-days exploited, MITRE breach, GISEC Global 2024
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Hackers backdoored Cisco ASA devices via two zero-days (CVE-2024-20353, CVE-2024-20359) A state-sponsored threat actor has managed to compromise Cis.....»»
The Galaxy Z Fold 6 and Flip 6 release date just leaked
Samsung may launch the Galaxy Ring, Z Fold 6, Z Flip 6, and the Galaxy Watch 7 series in the days leading up to the Paris Olympics......»»