Securing Open Source

CISA, hunt, DHS, President, cyber threats, Seal of the Cybersecurity & Infrastructure Security Agency

Sisense Hacked: CISA Warns Customers at Risk

Richi Jennings | April 12, 2024 | Amazon Web Services (AWS), aws, AWS access keys, AWS bucket, cisa, CISA Advisories, CISA Advisory, CISA Alert, CISA warning, CISA.gov, depth, NSA/CISA, Sangram Dash, SB Blogwatch, Sisense

A hard-coded credential catastrophe: The analytics firm kept big companies’ secrets in an insecure AWS bucket. Government says victims include the “critical infrastructure sector.” ...

Security Boulevard

An old-school telephone, the like of which Millenials have never seen. Also: Get off my lawn.

FCC: Phone Network Bugs Must Be Fixed — But are SS7/Diameter Beyond Repair?

Fast enough for government work: The Federal Communications Commission is finally minded to do something about decades-old vulnerabilities ...

Security Boulevard

David Boies, founding partner and chairman of Boies Schiller Flexner, LLP

Chrome’s Incognito Mode Isn’t as Private as You Think — but Google’s Not Sorry

Short term gain for long term pain? Class action attorney David Boies asked for $5,000 per user, but got nothing—except some assurances Google will delete data it no longer needs ...

Security Boulevard

PyPI Goes Quiet After Huge Malware Attack: 500+ Typosquat Fakes Found

Emergency stop button: The Python Package Index was drowning in malicious code again, so they had to shut down registration for cleanup ...

Security Boulevard

China Steals Defense Secrets ‘on Industrial Scale’

UNC5174 ❤ UNC302: CVSS 10 and 9.8 vulnerabilities exploited by Chinese threat actor for People’s Republic ...

Security Boulevard

Sevco, Apple, DMA, EU, A green worm on a juicy red apple

Apple M-Series FAIL: GoFetch Flaw Finds Crypto Keys

Richi Jennings | March 22, 2024 | Apple, apple bug, Apple Data Security, apple hack, apple hacker, Apple iOS, Apple iPad, ARM, cache, dmp, GoFetch, iPad, M1, M2, M3, Macintosh, macos, SB Blogwatch

GoFAIL: Researchers worm their way into broken cache-filling microcode in most Macs and iPads ...

Security Boulevard

Forking hell: Scrotebots clone thousands of projects, injecting malware millions of times ...

Security Boulevard

Falco Edgio Salt Security APIs, organizations, Open APIs API CIS COVID-19 cybersecurity

CNCF Graduates Falco Project to Improve Linux Security

Michael Vizard | February 29, 2024 | Cloud Security, Cloud-Native Security, CNCF, Falco, Linux, open source

The Cloud Native Computing Foundation (CNCF) announced today that Falco, an open source tool for defining security rules in Linux environments, has officially graduated ...

Security Boulevard

Securing Open Source

Senator Sanders Wants to Own AI Companies — and Hand America’s Adversaries the Keys

NIST’s Nine: The PQC Signature Race Moves to Round Three

The Quantum Arms Race: Why Washington Just Wrote a $2 Billion Check to Nine Companies

Beyond Moore’s Law: The Hyper-Acceleration of Autonomous AI Cyber Capabilities

The Exception Economy: When Security Teams Stop Protecting and Start Negotiating

GoPlus’s Latest Report Highlights How Blockchain Communities Are Leveraging Critical API Security Data To Mitigate Web3 Threats

C2A Security’s EVSec Risk Management and Automation Platform Gains Traction in Automotive Industry as Companies Seek to Efficiently Meet Regulatory Requirements

Zama Raises $73M in Series A Lead by Multicoin Capital and Protocol Labs to Commercialize Fully Homomorphic Encryption

RSM US Deploys Stellar Cyber Open XDR Platform to Secure Clients

ThreatHunter.ai Halts Hundreds of Attacks in the past 48 hours: Combating Ransomware and Nation-State Cyber Threats Head-On