Delta is seeking unspecified damages in connection with the CrowdStrike-caused IT outage in July, which cost the airline more than $500 million in out-of-pocket losses, according to the complaint. Delta is seeking significant damages from CrowdStrike in connection with the July IT outage caused by the cybersecurity vendor, which cost the airline more than $500…

Read More

Generative AI, copilots, agents, cybersecurity and PCs are among the many topics expected to come up. An update on Microsoft’s suite of artificial intelligence offerings, including copilots and agents. Growth in Teams and the productivity application suite. And early signs of an AI PC revolution. These are some of the subjects expected to come up…

Read More

Free, a major internet service provider (ISP) in France, confirmed over the weekend that hackers breached its systems and stole customer personal information. The company, which says it had over 22.9 million mobile and fixed subscribers at the end of June, is the second-largest telecommunications company in France and a subsidiary of the Iliad Group,…

Read More

Oct 28, 2024Ravie LakshmananCloud Security / Cyber Attack A government entity and a religious organization in Taiwan were the target of a China-linked threat actor known as Evasive Panda that infected them with a previously undocumented post-compromise toolset codenamed CloudScout. “The CloudScout toolset is capable of retrieving data from various cloud services by leveraging stolen…

Read More

The FBI and the U.S. Cybersecurity & Infrastructure Security Agency (CISA) have disclosed that Chinese hackers breached commercial telecommunication service providers in the United States. The breached entities have been warned, and the agencies are proactively alerting other potential targets of the elevated cyber activity. “The U.S. Government is investigating the unauthorized access to commercial…

Read More

10web–10Web Social Post Feed  The 10Web Social Post Feed plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.2.9. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if…

Read More

Oct 28, 2024Ravie LakshmananMalware / Threat Intelligence Three malicious packages published to the npm registry in September 2024 have been found to contain a known malware called BeaverTail, a JavaScript downloader and information stealer linked to an ongoing North Korean campaign tracked as Contagious Interview. The Datadog Security Research team is monitoring the activity under…

Read More

Oct 28, 2024Ravie LakshmananCyber Espionage / Android A suspected Russian hybrid espionage and influence operation has been observed delivering a mix of Windows and Android malware to target the Ukrainian military under the Telegram persona Civil Defense. Google’s Threat Analysis Group (TAG) and Mandiant are tracking the activity under the name UNC5812. The threat group,…

Read More

In an interview with CRN, HP Inc. Global Channel Chief Kobi Elbaz says the investments the PC and print giant has made into its three-year-old Amplify partner program will allow the company to ‘double down’ on hybrid AI solutions with partners, which include new AI PCs. HP Inc. Global Channel Chief Kobi Elbaz said selling…

Read More

In an interview with CRN, Rubrik CEO Bipul Sinha discusses data security in the GenAI era and why ‘nobody else from our space is even daring’ to go public. The well-known data security challenges posed by the arrival of generative AI have accelerated the already strong growth opportunities at Rubrik, which is positioned at the…

Read More