Month: July 2024

Tenable®, the Exposure Management company, today announced that it has launched a Public Sector Advisory Board (PSAB) for the U.S. market. Inaugural members include Rob Joyce, former Director of Cybersecurity at the National Security Agency (NSA) and Mark Weatherford, former first Deputy Under Secretary for Cybersecurity at the Department of Homeland Security (DHS). They will…

Read More

When users then click on the rewritten link, the server runs a check to see if the link points to a known phishing or malware website and based on the result, either blocks access to it or redirects the request to the final destination. The benefit is that if a website is flagged as malicious…

Read More

Jul 18, 2024NewsroomArtificial Intelligence / Data Protection Meta has suspended the use of generative artificial intelligence (GenAI) in Brazil after the country’s data protection authority issued a preliminary ban objecting to its new privacy policy. The development was first reported by news agency Reuters. The company said it has decided to suspend the tools while…

Read More

Jul 18, 2024Newsroom Cisco has released patches to address a maximum-severity security flaw impacting Smart Software Manager On-Prem (Cisco SSM On-Prem) that could enable a remote, unauthenticated attacker to change the password of any users, including those belonging to administrative users. The vulnerability, tracked as CVE-2024-20419, carries a CVSS score of 10.0. “This vulnerability is…

Read More

Limit access and federation between on-prem and cloud One should limit access and federation between on-premises and cloud assets where one can. Yes, we’ve built up reliance on this ability to share data and authentication between cloud assets and on-premises, but too often it’s also introducing weaknesses. A recent ProPublica article claims that a whistleblower…

Read More

Social media fuels conspiracies galore after Donald Trump is shot at a rally, cryptocurrency websites are hijacked after a screw-up at Squarespace, and our guest takes a close look at bottoms on Instagram. All this and much much more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley…

Read More

The latest startup acquired by Nvidia is Brev.dev, which helps AI developers find the most cost-effective GPU compute across cloud providers. This comes after Nvidia acquired two other startups with the explicit purpose of expanding the capabilities of its DGX Cloud service. Nvidia has bought a startup that helps AI developers find the most cost-effective…

Read More

The notorious FIN7 hacking group has been spotted selling its custom “AvNeutralizer” tool, used to evade detection by killing enterprise endpoint protection software on corporate networks. FIN7 is believed to be a Russian hacking group that has been active since 2013, initially focusing on financial fraud by hacking organizations and stealing debit and credit cards.…

Read More

Consolidated Communications, Incedo, Cerium Networks, Comcast, Nvidia and Logitech are among the companies to list open positions for channel-related roles in July. This month, Consolidated Communications, Incedo and Cerium Networks are among the solution providers to list open positions while Comcast, Nvidia and Logitech are among the vendors to list open positions for channel-related roles.…

Read More

Microsoft is rolling out inbound SMTP DANE with DNSSEC for Exchange Online in public preview, a new capability to boost email integrity and security. As the Exchange team explained on Wednesday, DNS-based Authentication of Named Entities (DANE) for SMTP and Domain Name System Security Extensions (DNSSEC) work together to defend against downgrade and man-in-the-middle (MiTM)…

Read More