Tag: breaches

Source URL: https://simonwillison.net/2024/Nov/21/password-policies/#atom-everything Source: Simon Willison’s Weblog Title: How some of the world’s most brilliant computer scientists got password policies so wrong Feedly Summary: How some of the world’s most brilliant computer scientists got password policies so wrong Stuart Schechter blames Robert Morris and Ken Thompson for the dire state of passwords today: The story…

The Register: Chinese cyberspies, Musk’s Beijing ties, labelled ‘real risk’ to US security by senator

—

by

Source URL: https://www.theregister.com/2024/11/20/musk_chinese_cyberspies/ Source: The Register Title: Chinese cyberspies, Musk’s Beijing ties, labelled ‘real risk’ to US security by senator Feedly Summary: Meet Liminal Panda, which prowls telecom networks in South Asia and Africa A senior US senator has warned that American tech companies’ activities in China represent a national security risk, in a hearing…

Slashdot: D-Link Tells Users To Trash Old VPN Routers Over Bug Too Dangerous To Identify

—

by

Source URL: https://it.slashdot.org/story/24/11/20/189224/d-link-tells-users-to-trash-old-vpn-routers-over-bug-too-dangerous-to-identify?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: D-Link Tells Users To Trash Old VPN Routers Over Bug Too Dangerous To Identify Feedly Summary: AI Summary and Description: Yes Summary: D-Link has advised users of older VPN routers to replace their devices due to a serious remote code execution vulnerability. This issue exemplifies the critical security risks…

Alerts: Apple Releases Security Updates for Multiple Products

—

by

Source URL: https://www.cisa.gov/news-events/alerts/2024/11/20/apple-releases-security-updates-multiple-products Source: Alerts Title: Apple Releases Security Updates for Multiple Products Feedly Summary: Apple released security updates to address vulnerabilities in multiple Apple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following advisories and apply…

Alerts: 2024 CWE Top 25 Most Dangerous Software Weaknesses

—

by

Source URL: https://www.cisa.gov/news-events/alerts/2024/11/20/2024-cwe-top-25-most-dangerous-software-weaknesses Source: Alerts Title: 2024 CWE Top 25 Most Dangerous Software Weaknesses Feedly Summary: The Cybersecurity and Infrastructure Security Agency (CISA), in collaboration with the Homeland Security Systems Engineering and Development Institute (HSSEDI), operated by MITRE, has released the 2024 CWE Top 25 Most Dangerous Software Weaknesses. This annual list identifies the most critical…

The Register: D-Link tells users to trash old VPN routers over bug too dangerous to identify

—

by

Source URL: https://www.theregister.com/2024/11/20/dlink_rip_replace_router/ Source: The Register Title: D-Link tells users to trash old VPN routers over bug too dangerous to identify Feedly Summary: Vendor offers 20% discount on new model, but not patches Owners of older models of D-Link VPN routers are being told to retire and replace their devices following the disclosure of a…

The Register: Data is the new uranium – incredibly powerful and amazingly dangerous

—

by

Source URL: https://www.theregister.com/2024/11/20/data_is_the_new_uranium/ Source: The Register Title: Data is the new uranium – incredibly powerful and amazingly dangerous Feedly Summary: CISOs are quietly wishing they had less data, because the cost of management sometimes exceeds its value I recently got to play a ‘fly on the wall’ at a roundtable of chief information security officers.…

The Register: Healthcare org Equinox notifies 21K patients and staff of data theft

—

by

Source URL: https://www.theregister.com/2024/11/20/equinox_patients_employees_data/ Source: The Register Title: Healthcare org Equinox notifies 21K patients and staff of data theft Feedly Summary: Ransomware scum LockBit claims it did the dirty deed Equinox, a New York State health and human services organization, has begun notifying over 21 thousand clients and staff that cyber criminals stole their health, financial,…

Cloud Blog: New ways to protect your sensitive data with Chrome Enterprise

Nov 19, 2024

—

by