At the Intersection of Technology and Real Life

aRTy News Headlines – 2018-12-21

Michael York Reading, PA News for aRTy

The Future Book is Here, But it’s Not What We Expected – Wired

Chinese Hackers Tap into EU Diplomatic Communications Network – ZDNet

Hacker Targets Gmail and Other Secure Email Services – ZDNet

Idiots with Drones Have Shutdown London’s Gatwick Airport – The Verge

Volkswagen Buys Volvo’s Connected Car Service – Engadget

Firefox Focus for Android Adds Improved Privacy Tools – Engadget

What is aRTy News?

Leave a Reply Cancel reply

You must be logged in to post a comment.

Latest Headlines

1
2
3
4
Error
6
7
8
9
10
11
12
13

Is Becky Chambers the Ultimate Hope for Science Fiction?

16 September 2021

Her gentle, heartwarming stories seek to soothe our troubled souls. They also aim to blow up the entire genre. [...]

Greg LeMond and the Amazing Candy-Colored Dream Bike

14 September 2021

The Tour de France legend and anti-doping crusader is building an ultralight ebike that he hopes will be fun as hell to ride—and jumpstart a US carbon-fiber boom. [...]

Rain Boots, Turning Tides, and the Search for a Missing Boy

9 September 2021

Last year in Nova Scotia, after 3-year-old Dylan Ehler vanished, online sleuths descended on Facebook groups to help find him. Then they lost their way. [...]

One Woman’s Mission to Rewrite Nazi History on Wikipedia

7 September 2021

Ksenia Coffman’s fellow editors have called her a vandal and a McCarthyist. She just wants them to stop glorifying fascists—and start citing better sources. [...]

Artificial Intelligence and the ‘Gods Behind the Masks’

1 September 2021

In an excerpt from AI 2041: Ten Visions for Our Future, Kai-Fu Lee and Chen Qiufan explore what happens when deepfakers attack the deepfakes. [...]

Meet the Little-Known Genius Who Helped Make Pixar Possible

31 August 2021

Alvy Ray Smith helped invent computer animation as we know it—then got royally shafted by Steve Jobs. Now he’s got a vision for where the pixel will take us next. [...]

Can Robots Evolve Into Machines of Loving Grace?

24 August 2021

Perhaps, if we put bots together the right way, consciousness will simply emerge. [...]

Looks That Quill: The Dark Side of Hedgehog Instagram

12 August 2021

Beneath the tiny top hats and GIF-able snuggle sessions, I found a sad tale of internet virality. [...]

A Drug Addiction Risk Algorithm and Its Grim Toll on Chronic Pain Sufferers

11 August 2021

A sweeping AI has become central to how the US handles the opioid crisis. It may only be making the crisis worse. [...]

A People’s History of Black Twitter, Part III

29 July 2021

Joy and pain, harmony and discord, organization and chaos—there’s no single way to define Black Twitter’s complex, ongoing legacy. [...]

OMIGOD: Microsoft Azure VMs exploited to drop Mirai, miners

17 September 2021

Threat actors started actively exploiting the critical Azure OMIGOD vulnerabilities two days after Microsoft disclosed them during this month's Patch Tuesday. [...]

Microsoft asks Azure Linux admins to manually patch OMIGOD bugs

17 September 2021

Microsoft has issued additional guidance on securing Azure Linux machines impacted by recently addressed critical OMIGOD vulnerabilities. [...]

How to fix printers asking for admins creds after PrintNightmare patch

17 September 2021

Some printers will request administrator credentials every time users try to print in Windows Point and Print environments due to a known issue caused by KB5005033 or later security updates addressing the PrintNightmare vulnerability. [...]

US govt sites showing porn, viagra ads share a common software vendor

17 September 2021

Multiple U.S. government sites using .gov and .mil domains have been seen hosting porn and spam content, such as Viagra ads, in the last year. A security researcher noticed all of these sites share a common software vendor, Laserfiche. [...]

Microsoft rolls out Office LTSC 2021 for Windows and Mac

16 September 2021

Microsoft today started rolling out Office LTSC (Long Term Servicing Channel) for Windows and macOS, the non-subscription Office version for commercial and government customers. [...]

FBI and CISA warn of state hackers exploiting critical Zoho bug

16 September 2021

The FBI, CISA, and the Coast Guard Cyber Command (CGCYBER) today warned that state-backed advanced persistent threat (APT) groups are actively exploiting a critical flaw in a Zoho single sign-on and password management solution since early August 2021. [...]

New malware uses Windows Subsystem for Linux for stealthy attacks

16 September 2021

Security researchers have discovered malicious Linux binaries created for the Windows Subsystem for Linux (WSL), indicating that hackers are trying out new methods to compromise Windows machines. [...]

FBI: $113 million lost to online romance scams this year

16 September 2021

The FBI warned today that a massive spike of online romance scams this year caused Americans to lose more than $113 million since the start of 2021. [...]

New Windows security updates break network printing

16 September 2021

Windows administrators report wide-scale network printing problems after installing this week's September 2021 Patch Tuesday security updates. [...]

Microsoft: Windows MSHTML bug now exploited by ransomware gangs

16 September 2021

Microsoft says multiple threat actors, including ransomware affiliates, are targeting the recently patched Windows MSHTML remote code execution security flaw. [...]

New Microsoft Office is coming: Release date, pricing and major changes - CNET

17 September 2021

Don't want to subscribe to Microsoft 365? Don't worry: Consumers and small businesses will be able to buy Office 2021 as a one-time purchase this fall, the same time Windows 11 launches. Here's what to know. [...]

Apple Arcade: Lego Star Wars Battles, Crossy Road, Tiny Wings and more coming soon - CNET

17 September 2021

Apple Arcade has a massive catalog of games to play and more arrive almost every week. Here's a list of games we can't wait to get stuck into. [...]

2022 Kia Sorento plug-in hybrid rolls in with $46,165 starting price - Roadshow

17 September 2021

It's not the cheapest way to buy a Sorento, but it's a really efficient SUV with a 79 MPGe combined rating. [...]

Save 50% on 6 months of HBO Max today - CNET

17 September 2021

Catch up on all your favorite TV shows, documentaries and movies with this deal. [...]

Best gaming keyboard for 2021 - CNET

17 September 2021

Whether you're looking for a full-size mechanical keyboard, a TKL or a smaller, you'll find the best ones we've tested for gaming here. [...]

Apple's iPhone fix and everything else you need to know about Pegasus spyware - CNET

17 September 2021

Governments aren't happy with software that targeted activists, journalists and executives. To thwart it, Apple patched an iOS hole Pegasus exploited. [...]

Online romance scams have cost people millions already this year, says FBI - CNET

17 September 2021

FBI says lonely heart scams cost consumers over $133 million in the first seven months of this year. [...]

What If…? episode 6 recap: Killmonger cuts through alternate Marvel Cinematic Universe - CNET

17 September 2021

The Marvel animated show twists the events of Iron Man, putting Tony Stark on a different path with a Wakandan outcast. [...]

COVID vaccines are safe. These social media myths are dangerous nonsense - CNET

17 September 2021

We debunk the false claims spreading online. [...]

Castlevania: Grimoire of Souls and Temple Run: Puzzle Adventure now available on Apple Arcade - CNET

17 September 2021

You can check out both games today on Apple Arcade. [...]

FragAttacks Foil 2 Decades of Wireless Security

6 August 2021

Wireless security protocols have improved, but product vendors continue to make implementation errors that allow a variety of attacks. [...]

Researchers Call for 'CVE' Approach for Cloud Vulnerabilities

6 August 2021

New research suggests isolation among cloud customer accounts may not be a given -- and the researchers behind the findings issue a call to action for cloud security. [...]

HTTP/2 Implementation Errors Exposing Websites to Serious Risks

6 August 2021

Organizations that don't implement end-to-end HTTP/2 are vulnerable to attacks that redirect users to malicious sites and other threats, security researcher reveals at Black Hat USA. [...]

CISA Launches JCDC, the Joint Cyber Defense Collaborative

6 August 2021

"We can't do this alone," the new CISA director told attendees in a keynote at Black Hat USA today. [...]

Incident Responders Explore Microsoft 365 Attacks in the Wild

5 August 2021

Mandiant experts discuss the novel techniques used to evade detection, automate data theft, and achieve persistent access. [...]

Researchers Find Significant Vulnerabilities in macOS Privacy Protections

5 August 2021

Attacks require executing code on a system but foil Apple's approach to protecting private data and systems files. [...]

A New Approach to Securing Authentication Systems' Core Secrets

5 August 2021

Researchers at Black Hat USA explain issues around defending "Golden Secrets" and present an approach to solving the problem. [...]

Organizations Still Struggle to Hire & Retain Infosec Employees: Report

5 August 2021

Security leaders are challenged to fill application security and cloud computing jobs in particular, survey data shows. [...]

Why Supply Chain Attacks Are Destined to Escalate

5 August 2021

In his keynote address at Black Hat USA on Wednesday, Matt Tait, chief operating officer at Corellium, called for software platform vendors and security researchers to do their part to thwart the fallout of software supply chain compromises. [...]

New Normal Demands New Security Leadership Structure

2 August 2021

At the inaugural Omdia Analyst Summit, experts discuss where the past year has created gaps in traditional security strategy and how organizations can fill them. [...]

RSS Error: WP HTTP Error: cURL error 28: Operation timed out after 10002 milliseconds with 0 bytes received

Apple Card, why did you fail me on my iPhone 13 loan?

17 September 2021

I thought my Upgrade Program process would be smooth, as usual. It wasn't. [...]

CISA warns of APT actors exploiting newly identified vulnerability in ManageEngine ADSelfService Plus

17 September 2021

Zoho released a patch for the issue on September 6. [...]

GoPro Hero10 Black hands-on: A true jack of all trades

17 September 2021

GoPro's latest camera boasts 5.3K/60 video, wired transfers to your phone, and a new GP2 processor. [...]

Samsung has a disturbing reason you should buy the Z Fold 3 (Tim Cook won't like it)

17 September 2021

It's an extremely alluring phone. But is Samsung offering the best reason to buy it? [...]

Get over 75 hours of training in Python, artificial intelligence, machine learning and more for under $40

17 September 2021

Even if you have no previous knowledge or experience, you can learn highly valued skills that will allow you to start and move up in an exciting new tech career without taking any time off from your current job. [...]

iPhone 13 preorders are live. How and where to get the best deal on Apple's new phone

17 September 2021

All four models of the iPhone 13 are now available pre-order. Here's how to get one in your hands on launch day. [...]

360 X3 video doorbell: Zoned protection for your front door at a lower cost than Ring

17 September 2021

The 360 X3 video doorbell is the perfect alternative if you do not want to pay over $220 for a Ring video doorbell. [...]

Why I'm ordering an iPhone 13 Pro Max

17 September 2021

I've made up my mind, and here are my three reasons. [...]

Dynabook Tecra A50-J-11X review: A robust 15-inch business laptop with excellent connections

17 September 2021

The Tecra A50-J-11X offers solid build quality and plenty of ports. If you don't need a touch screen or top-quality sound, it's a good option for knowledge workers. [...]

The true dread of going back to the office, hilariously realized

17 September 2021

What will it feel like when your bosses encourage you -- no, force you -- to go back to the office? Watch and wonder. [...]

6 Benefits of Using Privileged Access Management

17 September 2021

When you think of access, passwords are likely the first thing that pops into your head. While passwords are a large and important part of managing access, there are other aspects to consider as well. Using the full spectrum offered by Privileged Access Management (PAM) can help. It’s easy to focus on the glitzier sides […] The post 6 Benefits of Using Privileged Access Management appeared first on Security Intelligence. [...]

How DevSecOps Can Secure Your CI/CD Pipeline

16 September 2021

Many companies today automate their software development life cycle with continuous integration and continuous delivery (CI/CD). It’s part of the broader DevOps movement to speed software development while reducing errors. Continuous integration builds and tests code automatically, while continuous delivery automates the entire software release process up to production. In order to secure it, industry […] The post How DevSecOps Can Secure Your CI/CD Pipeline appeared first on Security Intelligence. [...]

How To Write a Good Cybersecurity Resume

16 September 2021

A lot of cybersecurity jobs await out there for the qualified job seeker. According to Cyberseek, the United States had 464,200 cybersecurity job openings as of July 30, 2021. And with the skills gap, there are even more openings every day. But that doesn’t mean you’re guaranteed a job offer. So, how do you make […] The post How To Write a Good Cybersecurity Resume appeared first on Security Intelligence. [...]

Mission Probable: Access Granted

15 September 2021

Your facilities are most likely vulnerable to a physical intrusion. This is not an indictment of any organization’s security program. If intruders have enough time and are motivated, they most likely can break into a building, even one that has security measures in place. Nonetheless, it is important to identify physical vulnerabilities before they lead […] The post Mission Probable: Access Granted appeared first on Security Intelligence. [...]

Cybersecurity Training: How to Build a Company Culture of Cyber Awareness

15 September 2021

When I attended new employee orientation at a global technology company several decades ago, I remember very brief cybersecurity training. The gist was to contact someone in IT if we noticed any potential issues. While I was with the company, I only thought about cybersecurity when I passed the server room, and I could only peek […] The post Cybersecurity Training: How to Build a Company Culture of Cyber Awareness appeared first on Security Intelligence. [...]

X-Force Report: No Shortage of Resources Aimed at Hacking Cloud Environments

15 September 2021

As cybercriminals remain steadfast in their pursuit of unsuspecting ways to infiltrate today’s businesses, a new report by IBM Security X-Force highlights the top tactics of cybercriminals, the open doors users are leaving for them and the burgeoning marketplace for stolen cloud resources on the dark web. The big takeaway from the data is businesses […] The post X-Force Report: No Shortage of Resources Aimed at Hacking Cloud Environments appeared first on Security Intelligence. [...]

Starting Your AI Security Journey With Deep Learning

14 September 2021

You’ve probably heard how using artificial intelligence (AI) can improve your cybersecurity — and how threat actors are using AI to launch attacks. You know that you need to use the same tools, if not better ones. AI security is about having the right tools, but also about having the right information. But you aren’t […] The post Starting Your AI Security Journey With Deep Learning appeared first on Security Intelligence. [...]

10 Open-Source Intelligence Tools (That Actually Work With Your Existing Security Software)

14 September 2021

Finding the Open Source Intelligence (OSINT) that affects your business or agency can help reduce your attack surface. You just have to find it first. Take a look at how OSINT works and how to secure it. According to the Office of the Director of National Intelligence, Open Source Intelligence (OSINT) “is publicly available information […] The post 10 Open-Source Intelligence Tools (That Actually Work With Your Existing Security Software) appeared first on Security Intelligence. [...]

Privileged Access Management: The Future of Cyber Resilience

14 September 2021

Attacks against critical infrastructure and government agencies have been surging. Some attackers want to extort money; others intend to steal data. But the victims all have one thing in common: they need to be able to fend off attacks and recover so they can continue to perform their functions. That’s where cyber resilience comes in, […] The post Privileged Access Management: The Future of Cyber Resilience appeared first on Security Intelligence. [...]

Cryptominers Snuck Logic Bomb Into Python Packages

13 September 2021

Malware can show up where you least expect it. Researchers discovered a logic bomb attack in the Python Package Index (PyPI) repository, which is code repository for Python developers and part of the software supply chain. Attackers aimed to get honest software developers to include the bombs in their applications by accident. The researchers found […] The post Cryptominers Snuck Logic Bomb Into Python Packages appeared first on Security Intelligence. [...]

AMD Chipset Driver Vulnerability Can Allow Hackers to Obtain Sensitive Data

17 September 2021

Chipmaker AMD has patched a driver vulnerability that could allow an attacker to obtain sensitive information from the targeted system. read more [...]

Operator of 'DownThem' DDoS Attack Service Convicted

17 September 2021

An Illinois man who operated an infamous online service allowing users to launch distributed denial-of-service (DDoS) attacks on selected targets was found guilty of three felonies. read more [...]

Pakistani Man Involved in AT&T Hacking Scheme Sentenced to Prison in U.S.

17 September 2021

Muhammad Fahd, a 35-year-old Pakistani national, has been sentenced to 12 years of prison in the United States for his role in a scheme that involved illegally unlocking AT&T phones and hacking into the telecoms giant’s systems. read more [...]

Mirai Botnet Starts Exploiting OMIGOD Flaw as Microsoft Issues More Guidance

17 September 2021

Microsoft on Thursday published additional guidance on addressing recently disclosed vulnerabilities in the Open Management Infrastructure (OMI) framework, along with new protections to resolve the bugs within affected Azure Virtual Machine (VM) management extensions. read more [...]

German Election Authority Confirms Likely Cyber Attack

17 September 2021

Suspected hackers last month briefly disrupted the website of the authority running Germany's September 26 general election, a spokesman for the body told AFP Wednesday. read more [...]

U.S. Agencies Warn of APTs Exploiting Recent ADSelfService Plus Zero-Day

17 September 2021

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the Coast Guard Cyber Command (CGCYBER) have sounded the alarm over in-the-wild attacks targeting a recently disclosed vulnerability in Zoho’s ManageEngine ADSelfService Plus product. read more [...]

Court Rejects Lawsuit Against NSA on "State Secrets" Grounds

17 September 2021

A divided federal appeals court has upheld the dismissal of an ACLU lawsuit challenging a portion of the National Security Agency’s warrantless surveillance of Americans’ international email and phone communications. read more [...]

Cybersecurity M&A Roundup for September 1-15, 2021

17 September 2021

16 September 2021

Endpoint security platform Kolide on Thursday announced that it has raised $17 million in Series B funding, for a total of $27 million raised to date. read more [...]

Google Helps OSTIF Boost Security of Open Source Projects

16 September 2021

Google this week announced plans to support the Open Source Technology Improvement Fund (OSTIF) to boost the security of open source projects. read more [...]

Boston Dynamics owner Hyundai deploys Spot for factory safety monitoring

17 September 2021

Back in June, Hyundai completed a deal for controlling interest in Boston Dynamics. The Korean automotive giant no doubt has some grand plans for integrating the Massachusetts-based firm’s technology into a lot of their forward-looking concept mobility vehicles – for now, however, it’s more about putting existing robots to work. Hyundai today announced the arrival […] [...]

Former Instacart CFO Sagar Sanghvi joins Accel as its newest partner

17 September 2021

Instacart‘s chief financial officer Sagar Sanghvi has departed from the on-demand grocery delivery company after nearly six years and is returning to his investing roots. Specifically, Sanghvi has joined Accel as a partner focused on global growth-stage consumer and enterprise investments. Prior to becoming CFO of Instacart, Sanghvi served as the company’s vice president of […] [...]

Aurora Propulsion Technologies closes €1.7M seed for spacecraft maneuvering and deorbiting tech

17 September 2021

More spacecraft will be sent to orbit this year than ever before in human history, and the number of satellite launches is only anticipated to increase through the rest of the decade. Under these crowded conditions, being able to maneuver satellites in space and deorbit them when they reach the end of their useful life […] [...]

Extra Crunch roundup: Adtech investing, Intuit buys Mailchimp, ideal customer profiles

17 September 2021

In school, it's highly unethical to copy someone else's work and pass it off as your own. In business, however, it is expected. [...]

A knock against bootstrapping

17 September 2021

Natasha and Mary Ann and Alex were all aboard this week under the guidance of Chris and Grace, which meant we had the full team. And speaking of teams, Mary Ann is joining the Friday show on a weekly basis now. She’s been a friend for years, and a colleague now twice-over for Natasha and Alex and we could not be more […] [...]

The value of software revenue may have finally stopped rising

17 September 2021

Startups are raising record sums around the world, thanks to several contributing factors. But the free ride could be ending. [...]

Google reportedly plans to add free channels to its smart TV platform

17 September 2021

Chromecasts and other devices powered by Google TV might give users access to free, ad-supported streaming television channels in the future, according to a new report. [...]

Defy Partners leads $3M round into sales intelligence platform Aircover

17 September 2021

Aircover’s conversational AI software integrates with Zoom and automates parts of the sales process to lead to more effective conversations. [...]

Ketch raises another $20M as demand grows for its privacy data control platform

17 September 2021

Ketch's OTC enables developers to embed security and governance into a piece of data as they build software. [...]

Since I can’t build a wall around our talent, here’s how I’m reducing turnover

17 September 2021

To stave off the threat of talent poaching, which has long been a factor in the tech world, we’ve invested heavily in our culture and staff. [...]

New Malware Targets Windows Subsystem for Linux to Evade Detection

17 September 2021

A number of malicious samples have been created for the Windows Subsystem for Linux (WSL) with the goal of compromising Windows machines, highlighting a sneaky method that allows the operators to stay under the radar and thwart detection by popular anti-malware engines. The "distinct tradecraft" marks the first instance where a threat actor has been found abusing WSL to install subsequent [...]

Malware Attack on Aviation Sector Uncovered After Going Unnoticed for 2 Years

17 September 2021

A targeted phishing campaign aimed at the aviation industry for two years may be spearheaded by a threat actor operating out of Nigeria, highlighting how attackers can carry out small-scale cyber offensives for extended periods of time while staying under the radar. Cisco Talos dubbed the malware attacks "Operation Layover," building on previous research from the Microsoft Security Intelligence [...]

Windows MSHTML 0-Day Exploited to Deploy Cobalt Strike Beacon in Targeted Attacks

17 September 2021

Microsoft on Wednesday disclosed details of a targeted phishing campaign that leveraged a now-patched zero-day flaw in its MSHTML platform using specially-crafted Office documents to deploy Cobalt Strike Beacon on compromised Windows systems. "These attacks used the vulnerability, tracked as CVE-2021-40444, as part of an initial access campaign that distributed custom Cobalt Strike Beacon [...]

Travis CI Flaw Exposes Secrets of Thousands of Open Source Projects

16 September 2021

Continuous integration vendor Travis CI has patched a serious security flaw that exposed API keys, access tokens, and credentials, potentially putting organizations that use public source code repositories at risk of further attacks. The issue — tracked as CVE-2021-41077 — concerns unauthorized access and plunder of secret environment data associated with a public open-source project during the [...]

Third Critical Bug Affects Netgear Smart Switches — Details and PoC Released

16 September 2021

New details have been revealed about a recently remediated critical vulnerability in Netgear smart switches that could be leveraged by an attacker to potentially execute malicious code and take control of vulnerable devices. The flaw — dubbed "Seventh Inferno" (CVSS score: 9.8) — is part of a trio of security weaknesses, called Demon's Cries (CVSS score: 9.8) and Draconian Fear (CVSS score: 7.8) [...]

You Can Now Sign-in to Your Microsoft Accounts Without a Password

16 September 2021

Microsoft on Wednesday announced a new passwordless mechanism that allows users to access their accounts without a password by using Microsoft Authenticator, Windows Hello, a security key, or a verification code sent via SMS or email. The change is expected to be rolled out in the coming weeks. "Except for auto-generated passwords that are nearly impossible to remember, we largely create our own [...]

3 Former U.S. Intelligence Officers Admit to Hacking for UAE Company

16 September 2021

The U.S. Department of Justice (DoJ) on Tuesday disclosed it fined three intelligence community and military personnel $1.68 million in penalties for their role as cyber-mercenaries working on behalf of a U.A.E.-based cybersecurity company. The trio in question — Marc Baier, 49, Ryan Adams, 34, and Daniel Gericke, 40 — are accused of "knowingly and willfully combine, conspire, confederate, and [...]

Critical Flaws Discovered in Azure App That Microsoft Secretly Installs on Linux VMs

16 September 2021

Microsoft on Tuesday addressed a quartet of security flaws as part of its Patch Tuesday updates that could be abused by adversaries to target Azure cloud customers and elevate privileges as well as allow for remote takeover of vulnerable systems. The list of flaws, collectively called OMIGOD by researchers from Wiz, affect a little-known software agent called Open Management Infrastructure [...]

Download the Essential Guide to Response Automation

15 September 2021

In the classic children's movie 'The Princess Bride,' one of the characters utters the phrase, "You keep using that word. I do not think it means what you think it means." It's freely used as a response to someone's misuse or misunderstanding of a word or phrase. "Response Automation" is another one of those phrases that have different meanings to different people. It's bantered around by the [...]

Microsoft Releases Patch for Actively Exploited Windows Zero-Day Vulnerability

15 September 2021

A day after Apple and Google rolled out urgent security updates, Microsoft has pushed software fixes as part of its monthly Patch Tuesday release cycle to plug 66 security holes affecting Windows and other components such as Azure, Office, BitLocker, and Visual Studio, including an actively exploited zero-day in its MSHTML Platform that came to light last week. Of the 66 flaws, three are rated [...]

Spotlight: Securing COVID’s New Normal with Cathy Spence of Intel

8 September 2021

What will it mean to secure the “new normal” after the COVID pandemic has receded? In this spotlight edition of the podcast, Cathy Spence, a Senior Principal Engineer at Intel, joins us in The Security Ledger Podcast studios to talk about what that new normal wt ill look like. For Cathy, the future looks a lot like the COVID-influenced...Read the whole entry... » Related StoriesSpotlight: Securing the Great Resignation with Code 42Spotlight: E-Commerce’s Bot and Mouse GameEncore Podcast: Is Autonomous Driving Heading for a Crash? [...]

Episode 225: Unpacking the Azure CHAOS DB Flaw with Nir Ohfeld of Wiz

6 September 2021

We’re joined by Nir Ohfeld of Wiz. Nir helped discover the recent CHAOS DB flaw in Azure COSMOS DB, the flagship database for Microsoft’s Azure cloud platform. The post Episode 225: Unpacking the Azure CHAOS DB Flaw with Nir Ohfeld of Wiz appeared first on The Security Ledger with Paul F. Roberts. Related StoriesEpisode 224: Engineering Trust In The Cyber Executive OrderEncore Podcast: Chris Valasek on Hacking The Jeep CherokeeEncore Podcast: Is Autonomous Driving Heading for a Crash? [...]

Spotlight: E-Commerce’s Bot and Mouse Game

1 September 2021

In this Spotlight podcast we’re joined by Benjamin Fabre of DataDome to discuss the evolving risks to organizations as e-commerce shifts from web pages to mobile applications and APIs. The post Spotlight: E-Commerce’s Bot and Mouse Game appeared first on The Security Ledger with Paul F. Roberts. Related StoriesEpisode 223: CISA Looks To Erase The Security Poverty LineSpotlight: Securing the Great Resignation with Code 42Encore Podcast: Is Autonomous Driving Heading for a Crash? [...]

Episode 224: Engineering Trust In The Cyber Executive Order

26 August 2021

In this spotlight edition of the podcast, sponsored by Trusted Computing Group* Thomas Hardjono and Henk Birkholz join us to talk about President Biden’s Cyber Executive Order and how the EO’s call for increasing trust in federal IT systems is creating demand for TCG technologies The post Episode 224: Engineering Trust In The Cyber Executive...Read the whole entry... » Related StoriesEncore Podcast: Is Autonomous Driving Heading for a Crash?Episode 220: Unpacking The Kaseya Attack And Securing Device Identities on the IoTEpisode 223: CISA Looks To Erase The Security Poverty Line [...]

Episode 223: CISA Looks To Erase The Security Poverty Line

21 August 2021

In this week’s episode of the podcast (#223), we are joined by Josh Corman and Lisa Young of the COVID task force at CISA to talk about the agency’s work to improve the security of critical sectors of the U.S. economy. Job #1: erase the so-called security “poverty line” that keeps small, poorly resourced firms from obtaining the skills and...Read the whole entry... » Related StoriesEncore Podcast: Is Autonomous Driving Heading for a Crash?Spotlight: E-Commerce’s Bot and Mouse GameEpisode 224: Engineering Trust In The Cyber Executive Order [...]

Connecting The Dots: The Kremlin’s Links to Cyber Crime

17 August 2021

The question of whether or not Russia has been involved in ongoing cybercrime is on the minds of many. A new report by Analyst1 offers new intelligence on the matter. The post Connecting The Dots: The Kremlin’s Links to Cyber Crime appeared first on The Security Ledger with Paul F. Roberts. Related StoriesEpisode 217: What Fighting Pirates Teaches Us About RansomwareEpisode 218: Denial of Sustenance Attacks -The Cyber Risk To AgricultureEpisode 222: US Rep. Himes on Congress’s About-face on Cybersecurity [...]

Episode 222: US Rep. Himes on Congress’s About-face on Cybersecurity

12 August 2021

In this week’s podcast, we speak with Congressman Jim Himes (D-CT) about Congress’s sudden focus on cybersecurity - an about face that Rep. Himes says was encouraged by the devastating Colonial Pipeline hack. The post Episode 222: US Rep. Himes on Congress’s About-face on Cybersecurity appeared first on The Security Ledger with Paul F....Read the whole entry... » Related StoriesEpisode 221: Biden Unmasked APT 40. But Does It Matter?Episode 224: Engineering Trust In The Cyber Executive OrderEncore Podcast: Is Autonomous Driving Heading for a Crash? [...]

DEF CON: Security Holes in Deere, Case IH Shine Spotlight on Agriculture Cyber Risk

8 August 2021

A demonstration at DEF CON of glaring flaws in software by agricultural equipment giants John Deere and Case IH raise the specter of remote, software-based attacks that could cripple farms and impact US food production. The post DEF CON: Security Holes in Deere, Case IH Shine Spotlight on Agriculture Cyber Risk appeared first on The Security...Read the whole entry... »Related StoriesDeere John: Researcher Warns Ag Giant’s Site Provides a Map to Customers, EquipmentEpisode 218: Denial of Sustenance Attacks -The Cyber Risk To AgricultureExclusive: Flaws in Zoom’s Keybase App Kept Chat Images From Being Deleted [...]

Spotlight: Securing the Great Resignation with Code 42

5 August 2021

Mark Wojtasiak, the Vice President of Security Industry research at Code42 joins us to talk about how companies can handle the security risks that accompany the COVID-inspired “great resignation” in corporate America. The post Spotlight: Securing the Great Resignation with Code 42 appeared first on The Security Ledger with Paul F. Roberts. Related StoriesSpotlight: E-Commerce’s Bot and Mouse GameEpisode 222: US Rep. Himes on Congress’s About-face on CybersecurityEpisode 221: Biden Unmasked APT 40. But Does It Matter? [...]

Encore Podcast: Chris Valasek on Hacking The Jeep Cherokee

30 July 2021

With Black Hat and DEFCON upon us, we revisit a 2015 interview with Chris Valasek about his wireless, software based hack of a Chrysler Jeep Cherokee. The post Encore Podcast: Chris Valasek on Hacking The Jeep Cherokee appeared first on The Security Ledger with Paul F. Roberts. Related StoriesEncore Podcast: Is Autonomous Driving Heading for a Crash?Episode 224: Engineering Trust In The Cyber Executive OrderEpisode 225: Unpacking the Azure CHAOS DB Flaw with Nir Ohrfeld of Wiz [...]

Apple and Google remove Navalny voting app under Russian government pressure

17 September 2021

Photo by NATALIA KOLESNIKOVA/AFP via Getty Images Apple and Google have removed jailed Russian opposition leader Alexei Navalny’s voting app from the iOS and Android stores under pressure from the government. The New York Times reports that the removal followed threats to criminally prosecute company employees within Russia. A spokesperson for Russian president Vladimir Putin told reporters that the app was “illegal” and Apple and Google had acted “in accordance with the law.” On Twitter, Navalny aide Ivan Zhdanov called its removal “a shameful act of political censorship.” The Russian government has mounted a sustained campaign against Navalny’s app, which… [...]

Here are the accessories you’ll need for your PlayStation 5

17 September 2021

Sony’s PlayStation 5 is still incredibly difficult to find. Whether you got lucky with a launch unit, or are still trying to snag one for yourself, picking up additional accessories to ensure you get the most out of your brand new console (whenever you get one) isn’t a bad idea. From headsets and remotes to M.2 SSDs that allow you to expand your console’s storage capacity — that’s a thing now, after all — these are just a few PS5 accessories we suggest picking up from the get-go, some of which are now available at a discount. Continue reading… [...]

How to use iPhone’s location tracking

17 September 2021

Photo by Amelia Holowaty Krales / The Verge Your iPhone uses information from your cell service, Wi-Fi, Bluetooth, and GPS to pinpoint its location, and since you almost always have your phone on you, your location as well. That information can be useful for a lot of things, such as letting others know where you are or finding your phone when it’s lost. Other times, it’s just more data that services and companies collect about you, creating privacy concerns. The good news is you can tighten your controls so that apps are only accessing your location when it’s necessary. Toggling… [...]

HBO Max is offering 50 percent off ad-free plan for six months

17 September 2021

Illustration by Alex Castro / The Verge HBO Max has started running an enticing deal where you can pay half price for the ad-free subscription tier, bringing it to just $7.49 per month. That rate, which is even lower than the ad-sponsored plan, will be good for up to six months, after which you’ll be switched back to the standard $14.99. You’ve got to act relatively quickly to take advantage of the offer: it’s available through September 26th. WarnerMedia is promoting the deal to people who formerly subscribed to HBO through Amazon’s Prime Video Channels. As of September 15th, you… [...]

Half-Life: Alyx is a must-play VR game for $36

17 September 2021

Image: Valve Half-Life: Alyx belongs in every VR headset owner’s library of games, especially when it costs 40 percent less than usual. This game was released right at the start of the pandemic in early 2020 for $60, and while it’s worth every bit of that price, I highly suggest taking advantage of this deal, which drops the game to just $36. Not only does the game satisfy with respect to its story, which serves as the prequel to Half-Life 2 (you really need to see the ending), it’s a fantastic experience full of imaginative VR gameplay that makes every… [...]

How to preorder the iPhone 13 and iPhone 13 Pro

17 September 2021

All of the colors of the iPhone 13 and iPhone 13 Mini. | Apple Apple announced a fleet of new products at its “California Streaming” event. Chief among them — you guessed it — was the iPhone 13. This one is coming in various sizes and colors, but with smaller notches, the new A15 Bionic chipset, and with redesigned and improved cameras located around the back. Going from smallest to largest, Apple will soon release the iPhone 13 Mini, iPhone 13, iPhone 13 Pro, and finally the iPhone 13 Pro Max. With the Pro and Pro Max, you’ll be able… [...]

OnePlus 9 software update pays homage to the Hasselblad XPan camera

17 September 2021

A sample photo captured using the Hasselblad XPlan Mode, on the OnePlus 9 Pro. | OnePlus OnePlus is finally putting its camera partnership with Hasselblad to good use — by bringing the look and feel of Hasselblad’s cinematic XPan camera to the OnePlus 9 and 9 Pro, via a software update. This is a happy surprise because the 9 Series’ cameras did not initially live up to the hype surrounding OnePlus’ multiyear collaboration with the historic camera brand. Although Hasselblad’s contribution to these phones was limited to helping OnePlus tune its camera colors and providing input on its interface earlier… [...]

Microsoft’s new photos app for Windows 11 is a welcome redesign

17 September 2021

The new photos app for Windows 11. | Image: Microsoft Microsoft has started testing a new photos app for Windows 11. Like many other parts of Windows, the photos app has been redesigned to match the new operating system, with subtle improvements that help when you’re flicking through a collection of photos or videos. The biggest addition is a new filmstip at the bottom of the photo viewer that shows small thumbnails of all the photos in a particular folder, collection, or album. It makes it easier to jump between them, or select multiple photos to enter the new “multi-view”… [...]

Ikea’s gaming range launches globally next month

17 September 2021

Ikea’s gaming range consists of over 30 products. | Image: Ikea Ikea’s lineup of gaming-themed furniture and accessories now has official pricing and a global release date: October. The lineup first came to China earlier this year as a collaboration with Asus and its Republic of Gamers (ROG) brand. Pricing for the lineup ranges from cheap desk accessories like a $10 cup holder or $12.99 mouse bungee, all the way up to gaming chairs costing between $69 and $349, and a $599 standing desk. Oh, and that wooden hand designed to gently cradle your headphones and other accessories? That’ll set… [...]

Oppo shows off new ColorOS 12 following OnePlus merger

17 September 2021

Oppo has announced ColorOS 12, the latest version of its Android-based operating system. The update will come to OnePlus phones as well as Oppo’s own phones in China, where OnePlus has used ColorOS since early this year. OnePlus recently announced that it would be combining the codebase of its OxygenOS with ColorOS due to the two companies merging several operations. ColorOS 12 doesn’t look hugely different to 11, but it makes more use of contrasting colors and white space, with lower information density across many screens. Icons have been subtly redesigned to make more use of depth and texture. Oppo… [...]

The Best iPad to Buy (and the Ones to Avoid)

17 September 2021

With several new iPads on the market, choosing the right one is more complicated than ever. We’re here to help. [...]

It’s Time to Talk About Facebook Research

17 September 2021

Plus: Adam Mosseri on News Feeds, remote drivers for cars, and a pickle for Greenland. [...]

When Nicki Minaj’s Cousin’s Friend’s Balls Dominated Twitter

17 September 2021

The Covid-19 conversation has truly hit a nadir. [...]

Samsung's Flagship 4K TV Dazzles in Bright Rooms

17 September 2021

This 4K flagship is fantastic, even if you plan to watch with all the lights on. [...]

The Best Laptop Backpacks for Work (and Life)

17 September 2021

Whether you're riding a bike or schlepping a camera, these bags do the job right. [...]

What's Apple's iPhone Camera Strategy, Anyway?

17 September 2021

This week, we go deep on the photographic and cinematic capabilities of the iPhone 13. [...]

How to Set Healthy Boundaries With Your Fitness Tracker

17 September 2021

A smart wearable can be useful and fun—until it starts to fuel an obsession with numbers. [...]

Anonymous Leaked a Bunch of Data From a Right-Wing Web Host

17 September 2021

The hacktivist collective targeted the domain registrar Epik for providing services to clients including the Texas GOP, Parler, and 8chan. [...]

Drake, Kanye, Lil Nas X, and the Art of Online Self-Creation

17 September 2021

The internet has given all three artists license for role-playing. Only one is using it to the best effect. [...]

A New App Helps Iranians Hide Messages in Plain Sight

17 September 2021

Nahoft uses encryption to turn chats into a random jumble of words, and it works even when the internet doesn’t. [...]

aRTy News Headlines – 2018-12-21

Related Posts

With sales momentum, Bookshop.org looks to future in its fight with Amazon

Amazon won’t say if its facial recognition moratorium applies to the feds

Critical Firefox 0-Day Under Active Attacks – Update Your Browser Now!

Leave a Reply Cancel reply