Thu.May 06, 2021

article thumbnail

Intel, AMD Dispute Findings on Chip Vulnerabilities

Data Breach Today

After Researchers Release Report, Chipmakers Assert That No New Defenses Are Needed Intel and AMD are disputing the findings of researchers from two universities who say they've discovered new attacks on Intel and AMD processors that can bypass most of the defenses put in place earlier for similar "Spectre" and "Meltdown" attacks.

284
284
article thumbnail

Tacit Knowledge Vs. Explicit Knowledge

AIIM

This post is focused on the following topics. You may click these links to jump to a specific section: What Is Knowledge Management? Tacit Knowledge vs. Explicit Knowledge. Strategies for Making Tacit Knowledge More Explicit. What Is Knowledge Management? According to the late Carl Frappaolo, one of the leading practitioners and analysts in the knowledge management space, “Knowledge Management is the leveraging of collective wisdom to increase responsiveness and innovation.”.

IT 211
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

DHS Secretary: Small Businesses Hard-Hit by Ransomware

Data Breach Today

Alejandro Mayorkas Says Attacks Increased 300% in Past Year About 50% to 70% of all ransomware attacks in the U.S. are targeting small and medium-sized businesses, costing the victims an estimated total of $350 million in the last year, Secretary of Homeland Security Alejandro Mayorkas said Wednesday in a speech to the U.S. Chamber of Commerce.

article thumbnail

Harness the Power of Recurring Business Models

Thales Cloud Protection & Licensing

Harness the Power of Recurring Business Models. jstewart. Thu, 05/06/2021 - 16:01. The experts call it many things: digital transformation, servitization strategies, and business model diversification. Regardless of the name, the end result is the same: recurring revenues. During the Covid-19 crisis, companies that have successfully invested and executed recurring business models have proven more resilient than those who have not.

article thumbnail

Peak Performance: Continuous Testing & Evaluation of LLM-Based Applications

Speaker: Aarushi Kansal, AI Leader & Author and Tony Karrer, Founder & CTO at Aggregage

Software leaders who are building applications based on Large Language Models (LLMs) often find it a challenge to achieve reliability. It’s no surprise given the non-deterministic nature of LLMs. To effectively create reliable LLM-based (often with RAG) applications, extensive testing and evaluation processes are crucial. This often ends up involving meticulous adjustments to prompts.

article thumbnail

Newly Patched Peloton API Flaws Exposed Users' Private Data

Data Breach Today

Pen Test Partners: Millions Could Have Had Data Exposed Security researchers say API flaws could have exposed the private data of millions of Peloton fitness equipment online service users for months before they were recently patched.

Security 268

More Trending

article thumbnail

Exim Patches 21 Flaws in Message Transfer Agent

Data Breach Today

Qualys Says Vulnerabilities Open the Door to Attacks Exim, one of the most-used message transfer agents, has issued patches for 21 flaws that could put thousands of users at risk of attacks, researchers at security firm Qualys say.

Risk 262
article thumbnail

Massive DDoS Attack Disrupts Belgium Parliament

Threatpost

A large-scale incident earlier this week against Belnet and other ISPs has sent a wave of internet disruption across numerous Belgian government, scientific and educational institutions.

article thumbnail

US Physics Laboratory Exposed Documents, Credentials

Data Breach Today

Fermilab Particle Accelerator Has Fixed Exposed Ports, Services The Fermilab physics laboratory in the U.S. has tidied up its systems after security researchers found weaknesses exposing documents, proprietary applications, personal information, project details and credentials. The findings come from the Sakura Samurai security research group.

Security 237
article thumbnail

IT teams want SaaS just as much as business users do

OpenText Information Management

For IT, the burden of information management can be heavy—especially across a large enterprise. If you’re facing the challenges of a distributed workforce, never-ending information sprawl, diverse content needs and evolving regulatory requirements, you might be looking to digital transformation for solutions. And you’re not alone. Faced with rising complexity across the ecosystem, 31 percent … The post IT teams want SaaS just as much as business users do appeared first on OpenText Blogs.

article thumbnail

How and Why Should You Be Tracking Geopolitical Risk?

Geopolitical risk is now at the top of the agenda for CEOs. But tracking it can be difficult. The world is more interconnected than ever, whether in terms of economics and supply chains or technology and communication. Geopolitically, however, it is becoming increasingly fragmented – threatening the operations, financial well-being, and security of globally connected companies.

article thumbnail

'Hack the Pentagon' Program Expands

Data Breach Today

Vulnerability Disclosure Program Now Includes IoT Devices, Industrial Control Systems The Defense Department will expand its vulnerability disclosure program in the coming months, inviting ethical hackers to find flaws in a wider array of systems and applications - including IoT and industrial control systems - within the Pentagon's public-facing networks.

IoT 224
article thumbnail

Critical Cisco SD-WAN, HyperFlex Bugs Threaten Corporate Networks

Threatpost

The networking giant has rolled out patches for remote code-execution and command-injection security holes that could give attackers keys to the kingdom.

Security 105
article thumbnail

Mitigating the Risks of Malicious OAuth Apps

Data Breach Today

Proofpoint Sizes Up the Cloud Security Battle Attackers are increasingly using malicious OAuth 2.0 applications to siphon data and access sensitive information from cloud platforms, and mitigating the risks is proving challenging, according to the security firm Proofpoint.

Risk 200
article thumbnail

Using blockchain to combat counterfeiting in manufacturing

CGI

Using blockchain to combat counterfeiting in manufacturing. Product authenticity plays a huge role in assuring consumer confidence for B2B and B2C businesses. Whether it’s COVID-19 vaccines, industrial goods, car parts or fair-trade chocolate, today consumers want assurance that the product they’ve purchased is genuine. Correspondingly, for manufacturers and retailers, safeguarding the consumer experience and ensuring safety and trust are key to protecting the brand. ravi.kumarv@cgi.com.

article thumbnail

7 Pitfalls for Apache Cassandra in Production

Apache Cassandra is an open-source distributed database that boasts an architecture that delivers high scalability, near 100% availability, and powerful read-and-write performance required for many data-heavy use cases. However, many developers and administrators who are new to this NoSQL database often encounter several challenges that can impact its performance.

article thumbnail

Qualcomm bug impacts about 30% of all smartphones

Security Affairs

A high severity flaw, tracked as CVE-2020-11292, affects Qualcomm Mobile Station Modem chips used by around 30% of all smartphones worldwide. Researchers from Checkpoint have discovered a buffer overflow vulnerability, tracked as CVE-2020-11292, in the Qualcomm Mobile Station Modem that can be exploited by attackers to trigger memory corruption and execute arbitrary code on the smartphone.

article thumbnail

Dr. Ann Cavoukian, creator of Privacy by Design, featured in The Strategy of Information podcast

IG Guru

Check out the podcast here. The post Dr. Ann Cavoukian, creator of Privacy by Design, featured in The Strategy of Information podcast appeared first on IG GURU.

Privacy 95
article thumbnail

CISA Publishes Analysis on New 'FiveHands' Ransomware

Dark Reading

Attackers used publicly available tools, FiveHands ransomware, and SombRAT to successfully target an organization, officials report.

article thumbnail

Ryuk Ransomware Attack Sprung by Frugal Student

Threatpost

The student opted for “free” software packed with a keylogger that grabbed credentials later used by "Totoro" to get into a biomolecular institute. .

article thumbnail

Reimagined: Building Products with Generative AI

“Reimagined: Building Products with Generative AI” is an extensive guide for integrating generative AI into product strategy and careers featuring over 150 real-world examples, 30 case studies, and 20+ frameworks, and endorsed by over 20 leading AI and product executives, inventors, entrepreneurs, and researchers.

article thumbnail

The Story of Colossus

Schneier on Security

Nice video of a talk by Chris Shore on the history of Colossus.

124
124
article thumbnail

Apple Guidance on Intimate Partner Surveillance

Adam Shostack

Apple has released (or I’ve just come across) a document Device and Data Access when Personal Safety is At Risk. Apple makes it easy to connect and share your life with the people closest to you. What you share, and whom you share it with, is up to you — including the decision to make changes to better protect your information or personal safety.

article thumbnail

Cloud-Native Businesses Struggle with Security

Dark Reading

More companies moved to cloud-native infrastructure in the past year, and security incidents and malware moved right along with them.

Cloud 121
article thumbnail

Qualcomm Chip Bug Opens Android Fans to Eavesdropping

Threatpost

A malicious app can exploit the issue, which could affect up to 30 percent of Android phones.

Privacy 99
article thumbnail

How to Migrate From DataStax Enterprise to Instaclustr Managed Apache Cassandra

If you’re considering migrating from DataStax Enterprise (DSE) to open source Apache Cassandra®, our comprehensive guide is tailored for architects, engineers, and IT directors. Whether you’re motivated by cost savings, avoiding vendor lock-in, or embracing the vibrant open-source community, Apache Cassandra offers robust value. Transition seamlessly to Instaclustr Managed Cassandra with our expert insights, ensuring zero downtime during migration.

article thumbnail

CCaaS and speech analytics create a best-in-class contact center offering

OpenText Information Management

Many companies today are transitioning from traditional on-premises telephony contact center solutions to cloud telephony solutions—better known as contact center as a service (CCaaS). But why are organizations shifting to CCaaS? And what are some of the benefits gained by migrating to the cloud? There are other questions worth asking too. Are CCaaS capabilities mature … The post CCaaS and speech analytics create a best-in-class contact center offering appeared first on OpenText Blogs.

article thumbnail

Google Plans to Automatically Enable Two-Factor Authentication

Dark Reading

The company plans to automatically enroll users in two-step verification if their accounts are properly configured.

article thumbnail

Remote Nunavik villagers connected by timely translation

OpenText Information Management

Job opportunity. Offre d’emploi. ??????? Job postings on the Kativik Regional Government (KRG) Facebook page are displayed in three languages: English, French and Inuktitut, the second-most widely spoken Aboriginal language in Canada. There are no roads to connect the 14 villages in the Kativik territory of northern Quebec, encompassing most of the Nunavik region.

article thumbnail

Securing the Internet of Things in the Age of Quantum Computing

Dark Reading

Internet security, privacy, and authentication aren't new issues, but IoT presents unique security challenges.

IoT 84
article thumbnail

Entity Resolution Checklist: What to Consider When Evaluating Options

Are you trying to decide which entity resolution capabilities you need? It can be confusing to determine which features are most important for your project. And sometimes key features are overlooked. Get the Entity Resolution Evaluation Checklist to make sure you’ve thought of everything to make your project a success! The list was created by Senzing’s team of leading entity resolution experts, based on their real-world experience.

article thumbnail

Chinese PLA Unit 61419 suspected to have purchased AVs for cyber-espionage

Security Affairs

Chinese military unit PLA Unit 61419 is suspected to be involved in cyber-espionage campaigns against multiple antivirus companies. Researchers from cybersecurity firm Recorded Future’s Insikt Group have discovered six procurement documents from official People’s Liberation Army (PLA) military websites and other sources that demonstrate that PLA Unit 61419 has sought to purchase antivirus solutions from several major American, European, and Russian security companies.

article thumbnail

New Techniques Emerge for Abusing Windows Services to Gain System Control

Dark Reading

Organizations should apply principles of least privilege to mitigate threats, security researcher says.

article thumbnail

Top Web Application Firewall (WAF) Vendors

eSecurity Planet

Web application firewalls (WAFs) are a critical component for robust application security. The best ones find the right balance between performance, security effectiveness, and cost. The primary task for WAFs is to protect specific applications from web-based attacks at the application layer. However, WAFs continue to add advanced features like load balancing, intrusion prevention , threat intelligence , and more, so their role is expanding.

Cloud 52