The War on Passwords Enters a Chaotic New Phase
Credit to Author: Lily Hay Newman| Date: Fri, 21 Apr 2023 11:00:00 +0000
The transition from traditional logins to cryptographic passkeys is getting messy. But don’t worry—there’s a plan.
Read MoreComputer Security Articles
RSS Reader for Computer Security Articles
Author: admin
The Huge 3CX Breach Was Actually 2 Linked Supply Chain Attacks
Credit to Author: Andy Greenberg| Date: Thu, 20 Apr 2023 12:00:00 +0000
The mass compromise of the VoIP firm’s customers is the first confirmed incident where one software-supply-chain attack enabled another, researchers say.
Read More3CX Breach Was a Double Supply Chain Compromise
Credit to Author: BrianKrebs| Date: Fri, 21 Apr 2023 01:05:44 +0000
We learned some remarkable new details this week about the recent supply-chain attack on VoIP software provider 3CX, a complex, lengthy intrusion that has the makings of a cyberpunk spy novel: North Korean hackers using legions of fake executive accounts on LinkedIn to lure people into opening malware disguised as a job offer; malware targeting Mac and Linux users working at defense and cryptocurrency firms; and software supply-chain attacks nested within earlier supply chain attacks.
Read MoreKandji explains its new Endpoint Detection and Response tools
The Apple-focused enterprise solutions provider ecosystem is growing apace to match the rapidly expanding need of enterprise IT. Jamf recently introduced a new anti-spyware solution for high-value targets. Today, competitor Kandji officially introduced its Endpoint Detection & Response (EDR)) solution, which aims to fight malware on the Mac.
IT staffers would help colleagues avoid monitoring software
The use of invasive monitoring software that tracks employee productivity is unlikely to be popular with workers — and it turns out IT staffers aren’t keen on deploying the technology either.
In fact, many IT workers are apparently willing to defy company policy and help colleagues find workarounds to avoid being spied on by the boss. That’s according to a survey of 500 IT managers and 500 non-manager IT workers in the US conducted by Wakefield Research on behalf of digital employee experience software vendor 1E. The survey results were made public last week.
Jamf debuts sophisticated security protection for executive iPhones
Newton’s Third Law of motion argues that for every action there is an equal and opposite reaction. With that in mind, it’s no surprise that the Apple ecosystem is fighting back in a big way against the mercenary spyware companies that have made headlines recently.
Improving situational awareness
Few people in tech sit comfortably with NSO Group and others in their attacks against journalists, human rights advocates, and high-value targets on behalf of repressive governments. They know that these technologies tend to proliferate, which is why most firms are now engaged in finding new ways to fight back.
Do the productivity gains from generative AI outweigh the security risks?
Credit to Author: eschuman@thecontentfirm.com| Date: Fri, 21 Apr 2023 08:08:00 -0700
There’s no doubt generative AI models such as ChatGPT, BingChat, or GoogleBard can deliver massive efficiency benefits — but they bring with them major cybersecurity and privacy concerns along with accuracy worries.
It’s already known that these programs — especially ChatGPT itself — make up facts and repeatedly lie. Far more troubling, no one seems to understand why and how these lies, coyly dubbed “hallucinations,” are happening.
In a recent 60 Minutes interview, Google CEO Sundar Pichai explained: “There is an aspect of this which we call — all of us in the field — call it as a ‘black box.’ You don’t fully understand. And you can’t quite tell why it said this.”
Stay compliant and protect sensitive data with Zero Trust security
Credit to Author: Christine Barrett| Date: Mon, 24 Apr 2023 17:00:00 +0000
Learn how to secure data and identities and meet compliance requirements with a comprehensive Zero Trust approach.
The post Stay compliant and protect sensitive data with Zero Trust security appeared first on Microsoft Security Blog.
Read More