Subterms
Customer experience is driving digital transformation projects, but technology executives have a lot of worries including cloud vendor lock-in, data quality, upskilling employees and business alignment. Flexera surveyed 302 global C-suite executives in organizations with more than 2,000 employees. The Flexera CIO Priorities Report highlights how IT management is fluid, yet the more things change […] More
Ransomware is a constant feature of the threat landscape and despite the damage and disruption it can cause, governments are failing to protect against this form of malware. Emisoft estimates that over 2019, ransomware attacks impacted at least 948 government agencies, educational entities, and healthcare providers. Analysis conducted by Recorded Future suggests that 81 successful […] More
Google’s open-source developers have released a new tool for Linux machines to help fend off stealthy USB keystroke injection attacks. The open-source tool, dubbed USB Keystroke Injection Protection, aims to impede but not necessarily stop the attacks that can inject keystrokes in the blink of an eye and are likely to go undetected by the […] More
Whisper is a secret-sharing app where you can post anonymous messages, but security failures ensured user content and profiles were available for anyone online to view. The inadvertent data exposure was caused by an open database with no credentials or password protection in place, as reported by the Washington Post. See also: Chinese hackers use decade-old […] More
Certain PIN codes are blacklisted on iOS. For example, iOS recommends you don’t use 0000 or 0011, but doesn’t have a problem with 0001 or 1001. But what combination of numbers are blacklisted, and does having this blacklist this improve security? Also, is a 6-digit PIN better than a 4-digit PIN? Security researchers Philipp Markert, […] More
The University of Hertfordshire has avoided an investigation by the ICO into its data-sharing practices after exposing student information. The security incident took place in November 2019, in which a bulk email promoting an art lecture also included an attachment containing the names and email addresses of approximately 2,000 students. Once the university realized its […] More
The Senate Legal and Constitutional Affairs Legislation Committee has made one recommendation after reviewing the proposed amendments to Australia’s Anti-Money Laundering and Counter-Terrorism Financing Amendment and Other Legislation Bill 2019 (AML/CTF Bill), asking for it be passed. “The committee recommends that the Senate pass the Bill,” it wrote in its report [PDF]. “The committee considers that the Bill […] More
Image: Harrison Broadbent According to new research published today, modern RAM cards are still vulnerable to Rowhammer attacks despite extensive mitigations that have been deployed by manufacturers over the past six years. These mitigations, collectively referred to as Target Row Refresh (TRR), are a combination of software and hardware fixes that have been slowly added […] More
