New UEFI firmware vulnerabilities affect several PC vendors
Researchers at enterprise security firm Binarly have discovered no less than 23 high-impact vulnerabilities in the BIOS/UEFI firmware used by several computer vendors like Intel, AMD, Lenovo, Dell, HP, Asus, Microsoft, Fujitsu, Juniper Networks, Acer.....»»
A critical security flaw could affect thousands of WordPress sites
Forminator can be used to upload malware to the site, Japan's researchers say......»»
MITRE breached by nation-state threat actor via Ivanti zero-days
MITRE has been breached by attackers via two zero-day vulnerabilities (CVE-2023-46805, CVE-2024-21887) in Ivanti’s Connect Secure VPN devices. The attackers have also managed to move laterally and compromise the company network’s VMware i.....»»
How to optimize your bug bounty programs
In this Help Net Security interview, Roy Davis, Manager – Vulnerability Management & Bug Bounty at Zoom, discusses the role bug bounty programs play in identifying security vulnerabilities and facilitating collaboration with researchers. He off.....»»
How to convert FLAC to MP3 on Mac, Windows, and web
Converting FLAC to MP3 is pretty straightforward, but doing so is going to affect the quality of the latter. Here’s a guide on how to go from A to B......»»
How to Update Apple’s HomePod
If you recently bought Apple’s HomePod and you have no idea how to update it, we’ll show you how to get the latest software up and running in this guide. Updating the HomePod with the latest firmware is a bit different than updating a dev.....»»
Ivanti patches critical Avalanche flaw exploitable via a simple message (CVE-2024-29204)
The newest version of Ivanti Avalanche – the company’s enterprise mobile device management (MDM) solution – carries fixes for 27 vulnerabilities, two of which (CVE-2024-29204, CVE-2024-24996) are critical and may allow a remote unau.....»»
92% of enterprises unprepared for AI security challenges
Most industries continue to run almost two or more months behind in patching software vulnerabilities, endpoints remain vulnerable to threats, and most enterprise PCs must be replaced to support AI-based technologies, according to the Absolute Securi.....»»
Study reveals substantial global cost of climate inaction
Traditionally, estimates of how climate change will affect global economies have focused on the effects of annual temperature changes. However, the additional impacts of variability and extremes in rainfall and temperature have remained largely unexp.....»»
Damn Vulnerable RESTaurant: Open-source API service designed for learning
Damn Vulnerable RESTaurant is an open-source project that allows developers to learn to identify and fix security vulnerabilities in their code through an interactive game. “I wanted to create a generic playground for ethical hackers, developer.....»»
Tesla"s global job cuts include leading markets U.S., China
Tesla cuts jobs in U.S. and China amid falling sales. The layoffs affect sales and service positions. .....»»
macOS Ventura 13.6.6 Issues Plague Mac Users
Mac users who have upgraded to Apple’s macOS Ventura 13.6.6 update have run into a variety of problems with the firmware. Apple released macOS Ventura 13.6.6 on March 25th alongside macOS Sonoma 14.4.1. The software delivered security patches a.....»»
Framework’s software and firmware have been a mess, but it’s working on them
New features, security updates, and Linux support are all on a long to-do list. Enlarge / The Framework Laptop 13. (credit: Andrew Cunningham) Since Framework showed off its first prototypes in February 2021, we've gener.....»»
US drug shortages reach record high with 323 meds now in short supply
The shortages affect everything from generic cancer drugs to ADHD medication. Enlarge / Takeda Pharmaceutical Co. Adderall XR brand medication arranged at a pharmacy in Provo, Utah, in November 2023. (credit: Getty | George Frey).....»»
The Space Force is planning what could be the first military exercise in orbit
"The vendors will exercise a realistic threat response scenario." Enlarge / Artist's illustration of two satellites performing rendezvous and proximity operations in low-Earth orbit. (credit: True Anomaly) The US Space F.....»»
Stopping security breaches by managing AppSec posture
Many security vulnerabilities result from human error, and the majority of these are reflected in the application layer. These errors may occur at any stage in the software development life cycle, from code to cloud. In this Help Net Security video,.....»»
How Google’s 90-day TLS certificate validity proposal will affect enterprises
Announced last year, Google’s proposal to reduce the lifespan of TLS (transport layer security) certificates from 13 months to 90 days could be implemented in the near future. It will certainly improve security and shrink the window of opportunity.....»»
Researchers investigate effectiveness of shipping alliances
Research published in the International Journal of Shipping and Transport Logistics has looked at the various factors that affect the overall effectiveness of shipping alliances in the container shipping industry. These alliances, formed as cooperati.....»»
Eclypsium Automata discovers vulnerabilities in IT infrastructure
Eclypsium launches Automata, a new AI-assisted feature for its digital supply chain security platform. Available now, Automata is an automated binary analysis system that replicates the knowledge and tooling of expert security researchers to discover.....»»
Physicists track how continuous changes in dimensionality affect collective properties of a superfluid
An international research team from Innsbruck and Geneva has, for the first time, probed the dimensional crossover for ultracold quantum matter. In the regime between one and two dimensions, the quantum particles perceive their world as being 1D or 2.....»»
Microsoft patches two actively exploited zero-days (CVE-2024-29988, CVE-2024-26234)
On this April 2024 Patch Tuesday, Microsoft has fixed a record 147 CVE-numbered vulnerabilities, including CVE-2024-29988, a vulnerability that Microsoft hasn’t marked as exploited, but Peter Girnus, senior threat researcher with Trend Micro.....»»