Krebs on Security

APRIL 15, 2024

The U.S. government is warning that “smart locks” securing entry to an estimated 50,000 dwellings nationwide contain hard-coded credentials that can be used to remotely open any of the locks. The lock’s maker Chirp Systems remains unresponsive, even though it was first notified about the critical weakness in March 2021. Meanwhile, Chirp’s parent company, RealPage, Inc. , is being sued by multiple U.S. states for allegedly colluding with landlords to illegally raise rents.

Analytics 325

Analytics Cybersecurity Passwords Communications 325

Data Breach Today

APRIL 15, 2024

Company Released a Hotfix to the Command Injection Vulnerability Firewall appliance manufacturer Palo Alto Networks rushed out a hotfix Friday to a command injection vulnerability present in its custom operating system after security researchers spotted a campaign to exploit the zero-day starting in March, likely from a state-backed threat actor.

Manufacturing 295

Manufacturing Security IT 295

WIRED Threat Level

APRIL 15, 2024

Microsoft has stumbled through a series of major cybersecurity failures over the past few years. Experts say the US government’s reliance on its systems means the company continues to get a free pass.

Government 145

Government Cybersecurity IT Security 145

Data Breach Today

APRIL 15, 2024

Experts Warn of Growing Threat From Supply Chain Attacks After High-Profile Breach Cybersecurity experts are sounding the alarm over a rise in supply chain attacks targeting the interconnected systems of global corporate giants after the top U.S. cyber agency urged Sisense customers to reset their credentials following an apparent hack.

Cybersecurity 204

Cybersecurity 204

Advertisement

Keeper Security is transforming cybersecurity for people and organizations around the world. Keeper’s affordable and easy-to-use solutions are built on a foundation of zero-trust and zero-knowledge security to protect every user on every device. Our next-generation privileged access management solution deploys in minutes and seamlessly integrates with any tech stack to prevent breaches, reduce help desk costs and ensure compliance.

Passwords

Security Affairs

APRIL 15, 2024

The Ukrainian hacking group Blackjack used a destructive ICS malware dubbed Fuxnet in attacks against Russian infrastructure. Industrial and enterprise IoT cybersecurity firm Claroty reported that the Ukrainian Blackjack hacking group claims to have damaged emergency detection and response capabilities in Moscow and beyond the Russian capital using a destructive ICS malware dubbed Fuxnet.

IoT 145

IoT Access Communications Military 145

Security Affairs

APRIL 15, 2024

Cisco Duo warns that a data breach involving one of its telephony suppliers exposed multifactor authentication (MFA) messages sent by the company via SMS and VOIP to its customers. Cisco Duo warns of a data breach involving one of its telephony suppliers, compromising multifactor authentication (MFA) messages sent to customers via SMS and VOIP. The security breach occurred on April 1, 2024, the threat actors used a Provider employee’s credentials that illicitly obtained through a phishing attac

Data breaches 143

Data breaches Metadata Authentication Phishing 143

Data Breach Today

APRIL 15, 2024

Orrick Herrington Cyberattack Compromised Clients' Data, Affected Nearly 638,000 A global law firm that provides data breach legal services has agreed to an $8 million settlement to resolve a proposed class action lawsuit filed against the firm in the aftermath of its cyberattack last year, which affected some health sector clients and nearly 638,000 individuals.

Data breaches 182

Data breaches IT 182

Security Affairs

APRIL 15, 2024

Threat actors have been exploiting the recently disclosed zero-day in Palo Alto Networks PAN-OS since March 26, 2024. Palo Alto Networks and Unit 42 are investigating the activity related to CVE-2024-3400 PAN-OS flaw and discovered that threat actors have been exploiting it since March 26, 2024. CVE-2024-3400 (CVSS score of 10.0) is a critical command injection vulnerability in Palo Alto Networks PAN-OS software.

File names 141

File names Access Authentication IT 141

KnowBe4

APRIL 15, 2024

“If the product is free, you are the product!” No truer words have ever been spoken. But in today’s internet-connected, ad-everywhere world, even if you are paying for the product or service, you are still the product.

Phishing 124

Phishing 124

Advertisement

Many software teams have migrated their testing and production workloads to the cloud, yet development environments often remain tied to outdated local setups, limiting efficiency and growth. This is where Coder comes in. In our 101 Coder webinar, you’ll explore how cloud-based development environments can unlock new levels of productivity. Discover how to transition from local setups to a secure, cloud-powered ecosystem with ease.

Cloud

Security Affairs

APRIL 15, 2024

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Palo Alto Networks PAN-OS Command Injection flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the CVE-2024-3400 Palo Alto Networks PAN-OS Command Injection vulnerability to its Known Exploited Vulnerabilities (KEV) catalog : CVE-2024-3400 (CVSS score of 10.0) is a critical command injection vulnerability in Palo Alto Networks PAN-OS software.

IT 141

IT Cybersecurity Access Risk 141

KnowBe4

APRIL 15, 2024

The FBI has issued an alert warning of a widespread SMS phishing (smishing) campaign targeting people in several US states with phony notices of unpaid tolls, BleepingComputer reports.

Phishing 122

Phishing Security 122

Schneier on Security

APRIL 15, 2024

A new paper presents a polynomial-time quantum algorithm for solving certain hard lattice problems. This could be a big deal for post-quantum cryptographic algorithms, since many of them base their security on hard lattice problems. A few things to note. One, this paper has not yet been peer reviewed. As this comment points out: “We had already some cases where efficient quantum algorithms for lattice problems were discovered, but they turned out not being correct or only worked for simple

Paper 120

Paper Security IT 120

Collibra

APRIL 15, 2024

Last week we wrapped up our annual Data Citizens conference. This conference brought together data leaders from around the world to share insights, network and imagine a brighter data future. The overarching theme of the conference was imagination and innovation — and this theme rang true throughout all of our mainstage presentations. In a time when AI is constantly challenging us, it is important to think fast and be adaptive so that we can innovate and grow in this dynamic environment.

Analytics 118

Analytics Government Cloud IT 118

Advertisement

Large enterprises face unique challenges in optimizing their Business Intelligence (BI) output due to the sheer scale and complexity of their operations. Unlike smaller organizations, where basic BI features and simple dashboards might suffice, enterprises must manage vast amounts of data from diverse sources. What are the top modern BI use cases for enterprise businesses to help you get a leg up on the competition?

eSecurity Planet

APRIL 15, 2024

Last week’s cybersecurity incidents revealed significant vulnerabilities across multiple platforms. Threats range from severe weaknesses in Ivanti’s VPN appliances to zero-day exploits in popular software such as Palo Alto Networks’ PAN-OS and Telegram’s Windows client. Typically, these vulnerabilities result in remote code execution or denial-of-service attacks, posing major dangers to users’ data security.

Libraries 106

Libraries Risk Cybersecurity Honeypots 106

IBM Big Data Hub

APRIL 15, 2024

Today, cybercrime is good business. It exists because the profits are high while the risks are low. Far from stopping, cybercrime is constantly increasing. In 2023, the FBI received a record number of 880,418 complaints with potential losses exceeding USD 12.5 billion. This is a nearly 10% increase in complaints and 22% increase in losses compared to 2022.

Ransomware 96

Ransomware Cloud Encryption Risk 96

OpenText Information Management

APRIL 15, 2024

We, at OpenText, lead groundbreaking digital transformations, providing our customers with essential tools to navigate the ever-evolving business landscape. Information holds unparalleled power, however, with AI, change is imperative, and success will favor those who swiftly embrace, accelerate, and reimagine work. The next generation of innovation will be driven by artificial intelligence (AI) and firmly rooted in effective information management.

Cloud 96

Cloud Analytics Digital transformation Customer Experience 96

IBM Big Data Hub

APRIL 15, 2024

The manufacturing industry is in an unenviable position. Facing a constant onslaught of cost pressures, supply chain volatility and disruptive technologies like 3D printing and IoT. The industry must continually optimize process, improve efficiency, and improve overall equipment effectiveness. At the same time, there is this huge sustainability and energy transition wave.

Manufacturing 92

Manufacturing Cloud IoT Analytics 92

Advertisement

Cloud Development Environments (CDEs) are changing how software teams work by moving development to the cloud. Our Cloud Development Environment Adoption Report gathers insights from 223 developers and business leaders, uncovering key trends in CDE adoption. With 66% of large organizations already using CDEs, these platforms are quickly becoming essential to modern development practices.

Cloud

OpenText Information Management

APRIL 15, 2024

We, at OpenText, lead groundbreaking digital transformations, providing our customers with essential tools to navigate the ever-evolving business landscape. Information holds unparalleled power, however, with AI, change is imperative, and success will favor those who swiftly embrace, accelerate, and reimagine work. The next generation of innovation will be driven by artificial intelligence (AI) and firmly rooted in effective information management.

Cloud 96

Cloud Analytics Digital transformation Customer Experience 96

IBM Big Data Hub

APRIL 15, 2024

The latest findings of the IBM X-Force® Threat Intelligence Index report highlight a shift in the tactics of attackers. Rather than using traditional hacking methods, there has been a significant 71% surge in attacks where criminals are exploiting valid credentials to infiltrate systems. Info stealers have seen a staggering 266% increase in their utilization, emphasizing their role in acquiring these credentials.

Security awareness 86

Security awareness Security Cybersecurity Phishing 86

IG Guru

APRIL 15, 2024

Check out the article here. The post US STATE-BY-STATE AI LEGISLATION SNAPSHOT via BCLP first appeared on IG GURU.

Artificial Intelligence 75

Artificial Intelligence Compliance 75

CILIP

APRIL 15, 2024

CILIP Copyright COnference 2024 By Gary Horrocks THE summer 2023 issue of UKeiG’s open access journal, eLucidate , featured my reflections on the implications of a Members’ Day presentation by Ken Chad on the “library technology ecosystem". "For every rally cry to embrace AI in education, there are concerns for student literacy and the demise of academic skills.

Libraries 73

Libraries Education Analytics Marketing 73

Advertisement

After a year of sporadic hiring and uncertain investment areas, tech leaders are scrambling to figure out what’s next. This whitepaper reveals how tech leaders are hiring and investing for the future. Download today to learn more!

IT

OpenText Information Management

APRIL 15, 2024

Over the course of the last six months, much has shifted in the technology landscape, and much has advanced at OpenText. At our premiere information management conference OpenText World Europe 2024 this week, the attention is focused on new innovations that meet new customer needs. Information management elevates human potential There is no doubt that the AI revolution is here.

Cloud 69

Cloud Compliance Government Retail 69

IBM Big Data Hub

APRIL 15, 2024

Data integration stands as a critical first step in constructing any artificial intelligence (AI) application. While various methods exist for starting this process, organizations accelerate the application development and deployment process through data virtualization. Data virtualization empowers businesses to unlock the hidden potential of their data, delivering real-time AI insights for cutting-edge applications like predictive maintenance, fraud detection and demand forecasting.

Analytics 64

Analytics Artificial Intelligence Marketing Access 64

OpenText Information Management

APRIL 15, 2024

Greetings from ICE, a trusted partner for your AI journey. This AI-generated Yeti has had a busy six months. He’s been around the globe to visit customers, helping them figure out their initial use cases to apply AI. Don’t let his blue fur and fuzzy demeanor throw you off; ICE knows the promise of AI and is eager to help you decode what will work for your business.This trusted Yeti is helping young aviators out there earn their first wings.

Sales 64

Sales Marketing Government Access 64

Thales Cloud Protection & Licensing

APRIL 15, 2024

In High Demand - How Thales and DigiCert Protect Against Software Supply Chain Attacks madhav Tue, 04/16/2024 - 05:25 Software supply chain attacks have been rapidly increasing in the past few years. Also called backdoor attacks, they cleverly exploit third-party software vulnerabilities to access an organization’s systems and data. These infiltrations tend to be very lucrative for criminals and devastating to businesses, as a single breach can impact thousands of victims in a rapid domino effec

Risk 62

Risk Financial Services Cloud Retail 62

Advertisement

Explore how enterprises can enhance developer productivity and onboarding by adopting self-hosted Cloud Development Environments (CDEs). This whitepaper highlights the simplicity and flexibility of cloud-based development over traditional setups, demonstrating how large teams can leverage economies of scale to boost efficiency and developer satisfaction.

Cloud

OpenText Information Management

APRIL 15, 2024

Generative AI is not just another trend anymore. The future of testing and quality management is shifting toward AI-powered software delivery. As more enterprises begin to realize its full potential, generative AI will undoubtedly reshape the total landscape of DevOps. It should go without saying that OpenText is pioneering this opportunity as a trusted partner by ushering in a new era of possibilities where generative AI complements human creativity to become tomorrow’s solutions.

Risk 59

Risk Marketing IT 59

CGI

APRIL 15, 2024

As NATO commemorates its 75th anniversary this month, it prompts reflection on its enduring principles and adaptability in response to evolving security landscapes. Central to NATO's ethos is collective security, embodying the belief that unity fosters greater safety and strength. This principle is epitomized in NATO's Article 5, wherein member states pledge mutual assistance in the face of armed aggression.

Military 52

Military Security IT 52

OpenText Information Management

APRIL 15, 2024

Customers are at the heart of every thriving business. Delving deeper is like dissecting a watermelon: while the outer layer may seem green with customer success, the true inside is vividly red. Traditional metrics like acquisition, onboarding and loyalty might look okay at first glance, but could be masking underlying issues like high turnover, frustration, and fractured experiences.

Cloud 59

Cloud Customer Experience Communications Sales 59