The operators of leading open source software (OSS) package repositories, including the Python Software Foundation and the Rust Foundation, have set out the actions they are taking to help better secure and protect the open source software (OSS) ecosystem, underscored by a series of high-profile OSS flaws in the past few years, most notably Log4Shell.…
OSS leaders detail commitments to bolster software security Read More »
iOS 18 will deliver Apple’s first generative AI features for iPhone. That’s the expectation, at least, considering what’s available out there. ChatGPT, Microsoft Copilot, and Google Gemini are only getting better, with updates dropping frequently. Apple isn’t ready to announce anything. But Tim Cook did tease recently big AI announcements for later this year. That…
I hope iOS 18 will bring generative AI like ChatGPT to the iPhone search Read More »
Microsoft has learned an important lesson after having to clean up a major data leak resulting from an “overly permissive” shared access signature (SAS) token accidentally disclosed by one of its employees. The incident took place in June 2023, when a Microsoft researcher shared a URL for an Azure Blob store in a public GitHub repository…
38TB Microsoft data leak highlights risks of oversharing Read More »
Software engineering covers all of Dunelm’s business domains. Over the past few years, the retailer has updated its IT infrastructure from running off-the-shelf ecommerce via IBM WebSphere on Rackspace to building everything in-house. “Like many companies, digital transformation starts with the website and goes deeper and wider after that,” says Paul Kerrison, director of engineering…
GitHub has fixed a race condition vulnerability in its repository creation and user renaming operations that could have enabled threat actors to perform what is known as a repojacking attack. Discovered and disclosed by researchers from Checkmarx, had the flaw been exploited, it could have been used to take control of code repositories and hijack…
GitHub fixes race condition that could have led to ‘repojacking’ Read More »
Cloud-native network detection and response (NDR) specialist ExtraHop hopes to give security researchers and defenders a little extra help when it comes to defending against malware and botnet operations, by making its entire 16 million row domain generated by algorithm (DGA) dataset publicly available on GitHub. So-called DGAs are programs that use algorithmic generation to…
ExtraHop open sources 16 million rows of threat domain data Read More »
A nation-state threat actor backed by the North Korean government has begun a new phase of a nearly two-year-old campaign targeting legitimate cyber security researchers, leveraging an as-yet undisclosed zero-day to gain access to their victims. The zero-day in question was uncovered by Google’s Threat Analysis Group (TAG). It has been reported to the supplier whose…
North Koreans using new zero-day to target security researchers Read More »
Operational technology specialist Honeywell is to incorporate quantum computing-hardened encryption keys into its smart meters for electric, gas and water meters, through a partnership with sector specialist Quantinuum that it said will provide consumers with heightened protection from future cyber threats. The deal makes Honeywell the first to deploy quantum encryption in such a way,…
Honeywell goes quantum to protect utilities from future threats Read More »
With 64 contests, 67 winners, 101 live shows, 52 participating countries, 1,500 songs, 12 points, seven wins for Ireland, seven for Sweden, five apiece for the UK, France, Luxembourg and the Netherlands, The Eurovision Song Contest is as heavy on statistics as any sporting league. With viewer numbers regularly in the hundreds of millions, and an…
How startup Once.net and Cloudflare secured the 2023 Eurovision vote Read More »
There is little surprise that Gartner’s latest research on emerging technology shows that generative AI is reaching a peak in hype. “The popularity of many new AI techniques will have a profound impact on business and society,” said Arun Chandrasekaran, distinguished vice-president analyst at Gartner. “The massive pretraining and scale of AI foundation models, viral…
