Critical “10-out-of-10” Linux kernel SMB hole – should you worry?
December 28 2022It's serious, it's critical, and you could call it severe... but in HHGttG terminology, it's probably "mostly harmless".
Read moreHow to Get the Most out of UEBA
December 28 2022Security teams are considering how to get the most out of user entity behavioral analytics by taking advantage of its strengths and augmenting its limitations.
Read moreWhy Attackers Target GitHub, and How You Can Secure It
December 28 2022The unfettered collaboration of the GitHub model creates a security headache. Follow these seven principles to help relieve the pain.
Read moreInaccurate information from data brokers can damage careers and reputations. It's time for US privacy laws to change how law enforcement and legal agencies obtain and act on data.
Read moreInternet AppSec Remains Abysmal & Requires Sustained Action in 2023
December 27 2022A variety of initiatives — such as memory-safe languages and software bills of materials — promise more secure applications, but sustained improvements will require that vendors do much better,...
Read moreArresting IT Administrators
December 27 2022This is one way of ensuring that IT keeps up with patches:
Albanian prosecutors on Wednesday asked for the house arrest of five public employees they blame for not...
Read more
LastPass Breach
December 26 2022Last August, LastPass reported a security breach, saying that no customer information—or passwords—were compromised. Turns out the full story is worse:
While no customer data was accessed during...
Read more
Friday Squid Blogging: Injured Giant Squid and Paddleboarder
December 24 2022Here’s a video—I don’t know where it’s from—of an injured juvenile male giant squid grabbing on to a paddleboard. As usual, you can also use this squid post to talk...
Read moreA complete bypass of the Kyverno security mechanism for container image imports allows cyberattackers to completely take over a Kubernetes pod to steal data and inject malware.
Read moreLastPass finally admits: Those crooks who got in? They did steal your password vaults, after all…
December 24 2022The crooks now know who you are, where you live, which computers are yours, where you go online... and they got those password vaults, too.
Read more
Recent Comments