Tag: security
Microsoft confirms Azure attacks using breached SQL servers
Hackers are targeting Azure virtual machines (VM) using flawed Microsoft SQL servers as a stepping stone, security researchers have revealed. Microsoft’s experts recently reported observing the method in action, which is also the first time someone’s used an SQL server in this way. Starting the attack, the threat actors would…
Read More
Sony confirms data breach impacting thousands of workers
Sony has confirmed reports that sensitive data from current and former employees had been stolen by outside forces. In a breach notification letter sent out to affected individuals, Sony said that hackers leveraged a flaw in the MOVEit managed file transfer software to steal sensitive personal information belonging to them,…
Read More
Thousands of industrial systems, including power grids and traffic lights, found exposed online
Hundreds of thousands of industrial control systems (ICS) are connected to the public internet and accessible to hackers, researchers have claimed. Hackers can then test these endpoints for different vulnerabilities, and if they find any – exploit them for significant gain (financial or otherwise). This is according to a new…
Read More
Okta and Yubico team up to offer easy passwordless authentication for your firm
Yubico has launched FIDO Pre-reg, a feature which the company claims will improve the uptake of passwordless authentication. Making the announcement at Oktane 23, the security key vendor will be partnering with identity management firm Okta to deliver the new feature for YubiKeys purchased via a YubiEnterprise Subscription. Yubico also…
Read More
Dashlane and NordPass now support passkeys on Android 14
Dashlane and NordPass have both announced that they will be supporting passkeys on the newly-released Android 14 mobile operating system. The news follows hot the heels of both password manager‘s previous announcements to support passkeys on iOS 17 for iPhone, which began rolling out to users in September. Now mobile…
Read More
Hackers exploit several security flaws in top Qualcomm GPUs
Not long after ARM disclosed multiple severe security vulnerabilities in some of its GPU products, Qualcomm has now done the same. In both cases, the company was tipped off to the existence of the flaw by Google’s Threat Analysis Group (TAG), and Project Zero group. Qualcomm’s flaws were found in…
Read More