More stories

  • in

    Why MFA matters: These attackers cracked admin accounts then used Exchange to send spam

    Image: Getty Images/iStockphoto Microsoft has exposed a crafty case of OAuth app abuse that allowed the attackers to reconfigure the victim’s Exchange server to send spam.      The point of the elaborate attack was to make mass spam – promoting a fake sweepstake – look like it originated from the compromised Exchange domain rather […] More

  • in

    Chainguard releases Wolfi, a Linux 'undistribution'

    Wright Studio/Shutterstock There are many Linux distributions designed expressly for containers. Even Microsoft has one, Common Base Linux (CBL)-Mariner. Others include Alpine Linux, Flatcar Container Linux, Red Hat Enterprise Linux CoreOS (RHCOS), and RancherOS. Now Chainguard, a cloud-native software security company, has a new take on this popular cloud-friendly kind of Linux: Wolfi, an “undistribution.”  […] More

  • in

    This Windows 11 security feature makes your PC 'very unattractive' to password hackers

    Image: Getty Images/Maskot Microsoft has introduced a new default to shield Windows 11 machines against password attacks which ought to make them “a very unattractive target” for hackers trying to steal credentials. The latest preview of Windows 11 ships with the SMB server authentication rate limiter on by default, making it much more time-consuming for […] More

  • in

    Programming languages: It's time to stop using C and C++ for new projects, says Microsoft Azure CTO

    Image: Deagreez/GETTY Mark Russinovich, the chief technology office (CTO) of Microsoft Azure, says developers should avoid using C or C++ programming languages in new projects and instead use Rust because of security and reliability concerns. Rust, which hit version 1.0 in 2020 and was born at Mozilla, is now being used within the Android Open […] More

  • in

    Optus security breach compromises customers' passport details

    Optus has suffered a security breach that it says may have compromised various customer data, including dates of birth, email addresses, and passport numbers. Information belonging to both current and former customers of the Australian mobile operator are impacted in the security incident. Optus said Thursday it was looking into “possible unauthorised access” of customer data following a cyber attack, but did not reveal details of what systems were affected, when the breach was discovered, or how many customers mights be impacted. Its CEO Kelly Bayer Rosmarin, though, said: “We have been subject to a cyberattack that has resulted in the disclosure of our customers’ personal information to someone who shouldn’t see it. As soon as we knew, we took action to block the attack and began an immediate investigation.”Rosmarin noted that while not all customers might be affected, investigations still were ongoing. According to Optus, the security breach could have compromised various customer data, including dates of birth, phone numbers, and email addresses, as well as additional information such as addresses and identification document details that included driver’s licence and passport numbers for a specific group of customers. Financial details and account passwords were not affected by the breach, the Australian operator said. However, it said major financial institutions were notified about the breach. It also urged customers to keep watch on unusual or potential fraudulent activities.Optus said it had notified the relevant authorities, including the Australian Federal Police, and was working with the Australian Cyber Security Centre on the incident. A wholly-owned subsidiary of Singtel, Optus is Australia’s second-largest telco. In 2019, it had some 10.2 million mobile subscribers. The carrier was involved in previous data privacy incidents, including a 2013 breach in which the operator accidentally published the names, addresses, and mobile phone numbers of 122,000 customers without their consent. In a 2008 incident, Optus left open the management ports of Netgear and Cisco Systems modems to facilitate remote access, leaving customers who did not change the default administrative passwords on the appliances vulnerable to potential hacks. RELATED COVERAGE More

  • in

    Windows 11 22H2: These are the big new security features

    MoMo Productions/Getty Windows 11 22H2 is now arriving, and as well as new features, Microsoft’s latest operating system update also brings security upgrades. With ransomware, sophisticated hacking attacks, and phishing threats showing no sign of abating, Microsoft has rethought security in Windows 11 with the aim of blocking more threats by default.  Windows 10 had […] More

  • in

    China-US rift will intensify decoupling in tech, financial systems

    Persistent geopolitical tensions likely will lead to greater decoupling, including in crucial technologies as the rift between China and the US continues to deepen. Efforts from the two economic giants to diversity their respective core technologies and supply chains will result in different branches of key technologies, such as artificial intelligence (AI) and 5G communications.As globalisation softens, there will be less cost efficiency, less technology transfer, and less innovation. Ultimately, this will lead to less productivity growth, according to Ravi Menon, managing director of Monetary Authority of Singapore (MAS). The head of Singapore’s central bank was during his keynote Tuesday at SuperReturn Asia Conference, where he discussed key uncertainties in the global economy today. Menon pointed to two major geopolitical tensions today between Europe and Russia as well as the US and China that were likely to persist over the medium term and lead to economic fragmentation. Specifically, he noted that the “strategic rivalry” between China and the US was deepening across multiple fronts, he said, leading to increased decoupling in technology, finance, and trade. The Sino-US trade conflict had dampened global trade, where tariffs implemented by both countries on each other had contributed to supply chain frictions and price pressures, he said. As both countries looked to reduce their reliance on each other, he cautioned of an increasing risk critical technologies would be fragmented.Menon said: “As the two countries diversify their respective technology bases and supply chains, the development of important technologies such as semiconductors, AI, and 5G telecommunications will increasingly bifurcate.”He also highlighted the US government’s restrictions on the export of advanced chips to China, which were widely used to power AI, and the blocking of cross-border mergers and acquisitions between tech companies on both sides over anti-monopoly and national security issues. Frictions between the two nations also had impacted both markets’ financial systems, where increased scrutiny of Chinese listings in the US had led to some Chinese companies considering a move to delist from US markets. In addition, China–along with other countries–were looking to reduce their dependence on the US dollar and payment system. Over time, Menon noted, these developments could result in a more fragmented global financial systems. “The growing decoupling between the US and China in trade, technology, and finance are likely to have far-reaching economic consequences,” he said. “At the broad macro level, this decoupling cannot be good for global economic growth. At the micro level, there will be adjustments in supply chains, trading relationships, technology procurements, and financial arrangements that will have differentiated implications across countries and sectors.”RELATED COVERAGE More