Results for “"cod"”
1,071–1,080 of 3,885 articles
Best match · title matches first
ZDNet Security
GitHub launches new 2FA mandates for code developers, contributors
New rules surrounding authentication will come in by the end of 2023.
ransomware hospital — both words
"data breach" — exact phrase
malware -android — exclude a word
(apple OR microsoft) patch — either company, plus patch
ransom* — a wildcard match
Searches article titles, summaries, keywords and sources. Filters use publication dates.
1,071–1,080 of 3,885 articles
Best match · title matches first
ZDNet Security
New rules surrounding authentication will come in by the end of 2023.
The Register
Also: Occulus virtual reality apps fail to detail info collection Meta's Facebook subsidiary has been collecting hashed personal data from students seeking US government financial aid, even from those without a Facebook account and those not logged into the student aid website, according to a research study published this week.…
ZDNet Security
HackerOne says that clients will be able to more easily integrate code security reviews during workflows.
Dark Reading
The move to IaC has its challenges but done right can fundamentally improve organizations' overall security posture.
The Hacker News
An Iranian-linked threat actor known as Rocket Kitten has been observed actively exploiting a recently patched VMware vulnerability to gain initial access and deploy the Core Impact penetration testing tool on vulnerable systems. Tracked as CVE-2022-22954 (CVSS score: 9.8), the critical issue concerns a case of remote code execution (RCE) vulnerability affecting VMware Workspace ONE Access and
Bleeping Computer
Is there such a thing as animated QR codes? And could they work? Even those who may not know how exactly QR codes work have pretty much been exposed to them by now. [...]
The Hacker News
Telecom company T-Mobile on Friday confirmed that it was the victim of a security breach in March after the LAPSUS$ mercenary gang managed to gain access to its networks. The acknowledgment came after investigative journalist Brian Krebs shared internal chats belonging to the core members of the group indicating that LAPSUS$ breached the company several times in March prior to the arrest of its
Dark Reading
Client-side web app security solution introduces features that give real-time visibility and control of the website attack surface, enabling businesses to stop PII theft and comply with data privacy regulations.
Krebs on Secuity
KrebsOnSecurity recently reviewed a copy of the private chat messages between members of the LAPSUS$ cybercrime group in the week leading up to the arrest of its most active members last month. The logs show LAPSUS$ breached T-Mobile multiple times in March, stealing source code for a range of company projects. T-Mobile says no customer or government information was stolen in the intrusion. LAPSUS$ is known for stealing data and then demanding a ransom not to publish or sell it. But the leaked chats indicate this mercenary activity was of little interest to the tyrannical teenage leader of LAPSUS$, whose obsession with stealing and leaking proprietary computer source code from the world’s largest tech companies ultimately led to the group’s undoing.
ZDNet Security
Millions of Android phones were exposed to an easily exploitable flaw in an audio codec used in chips from MediaTek and Qualcomm.