Decisions and interventions – Law Gazette – Features
Decisions filed recently with the Law Society (which may be subject to appeal). – Read More
2024
EmeraldWhale’s Massive Git Breach Highlights Config Gaps – Dark Reading
The large-scale operation took advantage of open repositories, hardcoded credentials in source code, and other cloud oversights. – Read More
AU10TIX Q3 2024 Global Identity Fraud Report Detects Skyrocketing Social Media Attacks – Dark Reading
Post Content – Read More
SOFTSWISS Expands Bug Bounty Program – Dark Reading
Post Content – Read More
Privacy Anxiety Pushes Microsoft Recall AI Release Again – Dark Reading
The Recall AI tool will be available to Copilot+ PC subscribers in December, and can be used to record images of every interaction on the device for review later. Critics…
Booking.com Phishers May Leave You With Reservations – Krebs on Security
A number of cybercriminal innovations are making it easier for scammers to cash in on your upcoming travel plans. This story examines a recent spear-phishing campaign that ensued when a…
OWASP Releases AI Security Guidance – Dark Reading
OWASP released guidance materials addressing how to respond to deepfakes, AI security best practices, and how to secure open source and commercial generative AI applications. – Read More
Chinese APTs Cash In on Years of Edge Device Attacks – Dark Reading
The sophisticated Chinese cyberattacks of today rest on important groundwork laid during the pandemic and before. – Read More
4 Main API Security Risks Organizations Need to Address – Dark Reading
Misconfigurations, weak authentication, and logic flaws are among the main drivers of API security risks at many organizations. – Read More
Critical Auth Bugs Expose Smart Factory Gear to Cyberattack – Dark Reading
Factory automation software from Mitsubishi Electric and Rockwell Automation could be subject to remote code execution (RCE), denial-of-service (DoS), and more. – Read More
IT Security Centralization Makes the Use of Industrial Spies More Profitable – Dark Reading
As organizations centralize IT security, the risk of espionage is silently becoming a more profitable threat. – Read More
Get details right to safely implement DANE in Exchange Online, warn experts – CSO Online
Microsoft’s announcement this week that it is adding support for two new security standards in Exchange Online is seen by experts as encouraging news — as long as CISOs and…
Inside Iran’s Cyber Playbook: AI, Fake Hosting, and Psychological Warfare – The Hacker News
U.S. and Israeli cybersecurity agencies have published a new advisory attributing an Iranian cyber group to targeting the 2024 Summer Olympics and compromising a French commercial dynamic display provider to…
Developer Velocity & Security: Can You Get Out of the Way in Time? – Dark Reading
When a CISO can articulate risk in context to the business as a whole, development teams can better prioritize their activities. – Read More
Axiom Ince: SRA takes action over ‘improper’ £54 million transfer and ‘falsified’ bank statements – Legal Cheek
Muhammed Ali and Jayesh Anjaria slapped with section 43 orders Two former members of staff at the now collapsed Axiom Ince have been barred from working in the legal profession,…