Another breach of GitHub repositories is causing another big problem for authentication services provider Okta. Client login information does not appear to have been compromised in the breach, but the theft of some amount of source code has raised some concerns about future developments.
While most are focusing on silly requests on ChatGPT, some security researchers are already probing AI chatbots for their ability to detect vulnerabilities or even exploit them.
Privacy breaches are about to cost companies operating in Australia quite a bit more money in fines, as the country has raised the maximum penalty from AUD 2.2 million to AUD 50 million.
Another Uber data breach leaked an assortment of sensitive internal data: source code and employee contact information. The company has indicated that a third-party vendor is responsible.
Apple is bringing end-to-end encryption to iCloud backups. The move brings parity with other competing messaging services, but is likely to face greater legal challenges than usual.
Security leaks at a number of different device manufacturers have made an array of manufacturer keys available to threat actors, and these keys can be used to sign malware apps.
A Secret Service investigation has found that the theft of hundreds of billions of dollars of US Covid benefits included about $20 million stolen by state-backed Chinese hackers, the APT41 group.
The updated UK NIS Regulations focused on stronger cybersecurity laws for “essential services” will now include MSPs, which often have thousands of clients that span a broad variety of industries, and they are increasingly a target of primary interest for the world’s most advanced hackers.
Study finds that a worrying majority of organizations remain vulnerable to Log4Shell, The main problem is that even a fully clean organization is just one new device or software download away from it coming back.
Google TAG reported that an exploitation framework making use of multiple zero-days was sold by a Spanish spyware firm for years. Firm says that it is not responsible but there is evidence in the code, including a script that is signed by the company.