Why I’m done with desktop Macs
Back in the day, I had one computer. It was a laptop bought for me by my employer, and at work, I’d attach it to an external display and use it at my desk. At…
December 2024
December 2024
How to Plan a New (and Improved!) Password Policy for Real-World Security Challenges
Many organizations struggle with password policies that look strong on paper but fail in practice because they’re too rigid to follow, too vague to enforce, or disconnected from real security needs. Some are so tedious…
Researchers Uncover Backdoor in Solana’s Popular Web3.js npm Library
Dec 04, 2024Ravie LakshmananSupply Chain Attack Cybersecurity researchers are alerting to a software supply chain attack targeting the popular @solana/web3.js npm library that involved pushing two malicious versions capable of harvesting users’ private keys with…
Joint Advisory Warns of PRC-Backed Cyber Espionage Targeting Telecom Networks
Dec 04, 2024Ravie Lakshmanan A joint advisory issued by Australia, Canada, New Zealand, and the U.S. has warned of a broad cyber espionage campaign undertaken by People’s Republic of China (PRC)-affiliated threat actors targeting telecommunications…
Veeam Issues Patch for Critical RCE Vulnerability in Service Provider Console
Dec 04, 2024Ravie LakshmananVulnerability / Ransomware Veeam has released security updates to address a critical flaw impacting Service Provider Console (VSPC) that could pave the way for remote code execution on susceptible instances. The vulnerability,…
Critical SailPoint IdentityIQ Vulnerability Exposes Files to Unauthorized Access
Dec 04, 2024Ravie LakshmananVulnerability / Software Security A critical security vulnerability has been disclosed in SailPoint’s IdentityIQ identity and access management (IAM) software that allows unauthorized access to content stored within the application directory. The…
Hackers Use Corrupted ZIPs and Office Docs to Evade Antivirus and Email Defenses
Dec 04, 2024Ravie LakshmananEmail Security / Malware Cybersecurity researchers have called attention to a novel phishing campaign that leverages corrupted Microsoft Office documents and ZIP archives as a way to bypass email defenses. “The ongoing…
Eve finally fulfills a promise to Android smart home users
After years of waiting, smart home manufacturer Eve Systems has finally given its Android customers what they really wanted: an app. More than two years in the making, the Eve app for Android promises to…
Intel: We have heavily invested into Arc GPU driver issues
Intel has taken enormous pains to prevent a repeat of the driver woes that plagued its first-generation “Alchemist” GPUs inside its second-generation “Battlemage” cards, Intel fellow Tom Petersen told The Full Nerd podcast on Tuesday…
Intrepid DIY project turns the new Mac mini into a retro Power Mac M4 Cube
The M4 Mac mini might have earned plaudits for its pleasingly petite redesign, but one owner has decided to reverse that decision and set the machine up in a large clear case in the style…