The Intel Alder Lake files contain nearly 6 GB of information in a zip file, most of that the BIOS source code leak. Assorted tools and documentation are included, some of which present potential security problems.
Binance suffered a crypto hack that led to a loss of $566 million. Attackers exploited a vulnerability in the Binance Smart Chain Token Hub bridge that involved using prior legitimate proof messages to forge new ones.
First the Optus hack, now a Telstra data breach. The timing of the two incidents may well be a coincidence, but the breaches of two of the biggest service providers in rapid succession have raised serious concerns among both citizens and lawmakers.
The 2016 Uber data breach was a case study in how not to handle such an incident, and after court proceedings it appears that former security chief Joseph Sullivan will be taking the brunt of the responsibility.
Cyber criminals are spending much more time on social media. Personal data theft is up across multiple categories, but social media account takeovers have jumped a shocking 1,000% in just a year’s time.
Proposed open source software security bill would task CISA with creating a risk assessment framework applicable throughout the federal government for open source software it adopts.
Majority of companies have heavy vulnerability management backlogs and are struggling to address them. 66% report at least 100,000 in their backlog, and 33% have at least one million. In some cases, the existing backlog is a major barrier to getting DevSecOps functioning properly.
Credit card fraud scheme earned tens of millions of dollars over the past three years by making charges on stolen credit cards on hundreds of fake dating websites approved by payment processors.
A very wide range of connected devices will be covered by the EU Cyber Resilience Act’s terms, essentially anything that can connect to the internet or even just to other devices or home networks.
Hacker breached 2K Games’ helpdesk system and sent fake follow-ups to customer support tickets with link to info-stealing malware that searches target systems for credentials and authentication.