Data Breach Today

JANUARY 30, 2023

Exposed: Online Customer Details, But Not Complete Payment Card Data JD Sports, a sports fashion retailer with global operations, says personal details pertaining to about 10 million online customers of JD Sports and its Size?, Millets, Blacks, Scotts and MilletSport brands from 2018 to 2020 have been stolen by attackers and warns customers to beware of scammers.

Data breaches 246

Data breaches Retail IT 246

eSecurity Planet

JANUARY 30, 2023

Two venture investors have launched an index to track the most popular open source security projects. Chenxi Wang of Rain Capital and Andrew Smyth of Atlantic Bridge unveiled the Open Source Security Index last month. The website leverages GitHub application programming interfaces (APIs) to make “finding open-source security projects easier for everyone.” Anyone can go to the site to discover “the most popular and fastest-growing open-source security (OSS) projects.” OSS

Security 109

Security Cloud IT Cybersecurity 109

Data Breach Today

JANUARY 30, 2023

Alerts Come as Attack Threats Spike in Recent Days Government authorities and industry groups are warning the healthcare sector of ongoing distributed denial-of-service attacks on hospitals and other medical entities by Russian nuisance hacking group KillNet, whose name comes from a tool used to launch DDoS attacks.

Government 144

Government 144

KnowBe4

JANUARY 30, 2023

The UK’s National Cyber Security Centre (NCSC) has described two separate spear phishing campaigns launched by Russia’s SEABORGIUM threat actor and Iran’s TA453 (also known as Charming Kitten). The NCSC says both threat actors have targeted entities in the UK, including “academia, defence, governmental organisations, NGOs, think-tanks, as well as politicians, journalists, and activists.

Phishing 109

Phishing Security 109

Speaker: Aarushi Kansal, AI Leader & Author and Tony Karrer, Founder & CTO at Aggregage

Software leaders who are building applications based on Large Language Models (LLMs) often find it a challenge to achieve reliability. It’s no surprise given the non-deterministic nature of LLMs. To effectively create reliable LLM-based (often with RAG) applications, extensive testing and evaluation processes are crucial. This often ends up involving meticulous adjustments to prompts.

IT

Data Breach Today

JANUARY 30, 2023

In this episode of "Cybersecurity Unplugged," Patricia Muoio, a partner at SineWave Ventures, discusses the need for cyber resilience as security leaders face the inevitable stream of cybercrimes, how to achieve it through a zero trust approach, and how CISOs and the government can help.

Cybersecurity 144

Cybersecurity Government Security IT 144

Security Affairs

JANUARY 30, 2023

A researcher disclosed technical details of a two-factor authentication bypass vulnerability affecting Instagram and Facebook. The researcher Gtm Manoz received a $27,000 bug bounty for having reported a two-factor authentication bypass vulnerability affecting Instagram and Facebook. The flaw resides in a component used by the parent company Meta for confirming a phone number and email address.

Authentication 98

Authentication IT Security Information Security 98

Dark Reading

JANUARY 30, 2023

Users searching for Bitwarden and 1Password's Web vaults on Google have recently reported seeing paid ads with links to cleverly spoofed sites for stealing credentials to their password vaults.

Passwords 97

Passwords 97

Security Affairs

JANUARY 30, 2023

Taiwanese vendor QNAP is warning customers to install QTS and QuTS firmware updates to address a critical flaw impacting its NAS devices. QNAP released QTS and QuTS firmware updates to address a critical vulnerability, tracked as CVE-2022-27596 (CVSS v3 score: 9.8), that affects QNAP NAS devices. A remote attacker can exploit the vulnerability to inject malicious code on QNAP NAS devices.

IT 98

IT Security IoT Information Security 98

Thales Cloud Protection & Licensing

JANUARY 30, 2023

Building a Quantum-Safe Blockchain Today divya Tue, 01/31/2023 - 06:18 Public-key cryptography is used to establish a distributed consensus of trust, which is essential for financial Blockchain solutions. While the chain itself is relatively secure, the “wallets” at the endpoints have already been demonstrated to be "hackable," and quantum computing techniques will further expose the network to fraudsters and criminals.

Blockchain 77

Blockchain Encryption Libraries Marketing 77

Advertisement

Geopolitical risk is now at the top of the agenda for CEOs. But tracking it can be difficult. The world is more interconnected than ever, whether in terms of economics and supply chains or technology and communication. Geopolitically, however, it is becoming increasingly fragmented – threatening the operations, financial well-being, and security of globally connected companies.

Risk

Security Affairs

JANUARY 30, 2023

Sports fashion retail JD Sports discloses a data breach that explosed data of about 10M customers who placed orders between 2018 and 2020. UK sports fashion chain JD Sports disclosed a data breach that exposed customer data from orders placed between November 2018 and October 2020. The company discovered unauthorized access to a server that contained data related to order placed by 10 million customers. “JD Sports Fashion Plc (“JD Sports”) has been the target of a cyber incide

Data breaches 94

Data breaches e-Delivery Passwords Retail 94

Dark Reading

JANUARY 30, 2023

The Instagram rate-limiting bug, found by a rookie hunter, could be exploited to bypass Facebook 2FA in vulnerable apps, researcher reports.

93

93

Security Affairs

JANUARY 30, 2023

The Ukrainian (CERT-UA) discovered five different wipers deployed on the network of the country’s national news agency, Ukrinform. On January 17, 2023, the Telegram channel “CyberArmyofRussia_Reborn” reported the compromise of the systems at the Ukrainian National Information Agency “Ukrinform” The Ukrainian Computer Emergency Response Team (CERT-UA) immediately investigated the claims and as of January 27, 2023, found five samples of data wipers: CaddyWiper (Window

Ransomware 93

Ransomware IT Security Information Security 93

KnowBe4

JANUARY 30, 2023

At least two federal civilian agencies were the unfortunate victims of a refund scam campaign, perpetrated through the use of remote monitoring and management (RMM) software. CISA, the NSA and the MS-ISAC discovered the campaign in October, but it appears the cybercriminals had been at work since June, and were still going strong in September.

IT 80

IT Phishing 80

Advertisement

Apache Cassandra is an open-source distributed database that boasts an architecture that delivers high scalability, near 100% availability, and powerful read-and-write performance required for many data-heavy use cases. However, many developers and administrators who are new to this NoSQL database often encounter several challenges that can impact its performance.

Security

Dark Reading

JANUARY 30, 2023

Solutions that provide more actionable results — remediation that frees up engineers, processes which integrate security into software development from its design, along with automation, IAC, and tool consolidation — are among the DevSecOps strategies that will prevail this year.

Security 77

Security IT 77

Micro Focus

JANUARY 30, 2023

This year the AMC Product Group have been delighted to welcome 15 new candidates onto the FY22 Application Modernisation and Connectivity (AMC) Engineering Graduate Programme. With intakes in both July and October, the successful candidates beat off the competition for the opportunity to join an intensive (but enjoyable!) training programme, to help kick start their.

71

71

Dark Reading

JANUARY 30, 2023

The incidents are the latest indication of the growing popularity of dangerous disk wipers, created to disrupt and degrade critical infrastructure and other organizations.

72

72

OpenText Information Management

JANUARY 30, 2023

What is employee document management? Employee document management is the practice of keeping an official record for all current and past employees. It includes all key documents generated or collected through the hire-to-retire lifecycle and is subject to multiple audits and controls. This information must remain private and protected, readily available to those who need … The post What is employee document management?

Content services 68

Content services IT 68

Advertisement

“Reimagined: Building Products with Generative AI” is an extensive guide for integrating generative AI into product strategy and careers featuring over 150 real-world examples, 30 case studies, and 20+ frameworks, and endorsed by over 20 leading AI and product executives, inventors, entrepreneurs, and researchers.

Hunton Privacy

JANUARY 30, 2023

On January 27, 2023, California Attorney General Rob Bonta announced a new enforcement sweep aimed at businesses with mobile apps and other businesses that fail to comply with the California Consumer Privacy Act (“CCPA”). The sweep focused on popular apps in the retail, travel and food service industries that allegedly fail to comply with, or do not provide a mechanism for, consumers’ requests to opt out of the sale of their personal information.

Sales 61

Sales Retail Privacy Access 61

Dark Reading

JANUARY 30, 2023

The complex nature of cyberattacks has increased demand for software developers, reverse engineers, and offensive specialists — attracting workers facing financial insecurity.

85

85

Jamf

JANUARY 30, 2023

In this blog series on AI, we delve into a subset of this technology called Machine Learning (ML) and how it’s designed to effectively “learn” from all manner of resources available to grow its understanding and skills. In the case of cybersecurity, ML can be taught to increase the security posture of your endpoints – and your organization’s overall network – by monitoring, identifying, hunting, detecting and remediating against known and unknown threats as pa

Cybersecurity 59

Cybersecurity Security IT 59

OpenText Information Management

JANUARY 30, 2023

Have you ever pictured yourself as a superhero? Tall stance, hands on hips, cape waving behind you. Looks good, doesn’t it? At OpenText, we give you the tools to become a superhero by working smarter. Working hard delivers results but working smarter gets you better results faster. It helps you make the right decisions, focus … The post Make information your superpower appeared first on OpenText Blogs.

IT 58

IT 58

Advertisement

If you’re considering migrating from DataStax Enterprise (DSE) to open source Apache Cassandra®, our comprehensive guide is tailored for architects, engineers, and IT directors. Whether you’re motivated by cost savings, avoiding vendor lock-in, or embracing the vibrant open-source community, Apache Cassandra offers robust value. Transition seamlessly to Instaclustr Managed Cassandra with our expert insights, ensuring zero downtime during migration.

IT

WIRED Threat Level

JANUARY 30, 2023

More than two years ago, criminals crippled the systems of London’s Hackney Council. It's still fighting to recover.

Ransomware 71

Ransomware IT Security 71

National Archives Records Express

JANUARY 30, 2023

Our office held a webinar for federal agencies on January 24, 2023. Topics presented in this webinar included: a discussion of NARA Bulletin 2023-02, Expanding the Use of a Role-Based Approach (Capstone) for Electronic Messages ; the expanded GRS 6.1, Email and Other Electronic Messages Managed under a Capstone Approach ; and the resubmission requirements for the form NA-1005, Verification for the Use of GRS 6.1.

52

52

Dark Reading

JANUARY 30, 2023

Those who are wrangling code every day could fuel a genuinely transformational approach to security — if they are adequately upskilled.

Security 60

Security 60

Schneier on Security

JANUARY 30, 2023

NIST is planning a significant update of its Cybersecurity Framework. At this point, it’s asking for feedback and comments to its concept paper. Do the proposed changes reflect the current cybersecurity landscape (standards, risks, and technologies)? Are the proposed changes sufficient and appropriate? Are there other elements that should be considered under each area?

Cybersecurity 17

Cybersecurity IT Paper Risk 17

Advertisement

Are you trying to decide which entity resolution capabilities you need? It can be confusing to determine which features are most important for your project. And sometimes key features are overlooked. Get the Entity Resolution Evaluation Checklist to make sure you’ve thought of everything to make your project a success! The list was created by Senzing’s team of leading entity resolution experts, based on their real-world experience.

IT

Dark Reading

JANUARY 30, 2023

UK sportswear retailer asks exposed customers to stay "vigilant" against phishing attempts following cyberattack.

Data breaches 62

Data breaches Retail Phishing 62

Data Breach Today

JANUARY 30, 2023

New Tenable Ventures Fund Focuses on Cloud, OT, Code, Identity and Backs 3 Startups Tenable has debuted a $25 million corporate investment program to support prevention-focused startups focused on technologies such as cloud, OT and identity. The Baltimore-area exposure management vendor says Tenable Ventures plans to scour Israel and the United States for startups.

Cloud 130

Cloud 130

Dark Reading

JANUARY 30, 2023

Cybercriminals are co-opting the identities of legitimate US financial advisers to use them as fodder for relationship scams (aka "pig butchering"), which end with the theft of investments.

68

68