PODCAST

Security – BetaNews

Technology News and Analysis

All Episodes

Artificial Intelligence: What are 4 major cyber...

Security – BetaNews ·

2024/05/25

AI is one of the most powerful innovations of the decade, if not the most powerful. Yet with that power also comes the risk of abuse. Whenever any new, disruptive technology is introduced to society, if there is a way for it to be abused for the nefarious gain of others, wrongdoers will find it. Thus, the threat of AI is not inherent to the technology itself, but rather an unintended consequence of bad actors using it for purposes that wreak havoc and cause harm. If we do not do something about

en-US

Seven crucial dos and don'ts for cyber-attack survival

Security – BetaNews ·

2024/05/24

Think you’ve been hit by a cyber-attack? You need to move fast, but what immediate actions should you take, or should you not take? Here’s a Cyber Incident Responder’s guide to steer you through the turmoil. The actions your team takes -- or doesn’t take -- can greatly impact the overall duration of recovery, cost, and the potential to uncover vital evidence left by threat actors within your infrastructure. Identifying a cyber security incident can be challenging. Many threat actors have mastered

en-US

Unlike Netflix, Disney et al, Google thinks password...

Security – BetaNews ·

2024/05/24

Streaming video services have clamped down on password sharing and have -- as Netflix has shown -- reaped the financial benefits. But while many companies are keen to stamp out the practice of sharing passwords, Google is actively embracing it. A policy change that was talked about back in February is now rolling out, bringing a new password sharing option to Google Password Manager. The feature makes it possible to share a password in a secure way, without having to write it down. See also: Google

en-US

Dissecting the latest DNS-based attack trends -- What...

Security – BetaNews ·

2024/05/22

As the foundational component of the internet, DNS has been around for over 40 years and yet, it remains a major vector for bad actors even today. You might think that DNS wouldn’t be such a big security concern today given how much time we’ve had to come up with a better way to secure it, but lo and behold, it’s still at least partially responsible for a large percentage of cyber-attacks. DNS-based attacks can include everything from malware to phishing, to domain theft and DDoS (Distributed Denial

en-US

Priorities for data center OT security in the cloud era

Security – BetaNews ·

2024/05/21

The decentralized nature of the cloud provides great flexibility for users, but it also introduces great vulnerabilities for data center operators. As an abundant source of valuable data, the modern data center has become a prime target for cybercriminals, from small business facilities to the huge hyperscale colocation data centers run by Amazon, Google, and Microsoft. Protecting these interconnected facilities and the hardware and software systems that they physically host provides a perpetual job

en-US

Cyber security and artificial intelligence --...

Security – BetaNews ·

2024/05/18

In the current era of digitalization, cybersecurity has become a topmost priority for businesses, regardless of their size and nature. With the growing dependence on digital infrastructure and data, safeguarding against cyber threats has become crucial to ensure uninterrupted business operations. However, the evolving nature of cyberattacks poses significant challenges for traditional security measures. This is where Artificial Intelligence (AI) emerges as a game-changer, offering substantial

en-US

The crypto nexus: The next compliance challenge

Security – BetaNews ·

2024/05/17

Cryptocurrency has been increasingly professionalized in recent years, offering millions of transactions to a global base of everyday users. However, this trend of mainstream investment has happened in tandem with recent high-profile prosecutions of former crypto leaders. The decentralized nature of cryptocurrency still presents opportunities for bad actors to exploit, particularly for laundering money. Approximately $72 billion a year of illicit transactions is being paid for with crypto, a large

en-US

Microsoft fixes VPN issues in Windows 11 with...

Security – BetaNews ·

2024/05/15

Microsoft has released its monthly patches for Windows 11 in the form of the KB5037771 update. There are lots of fixes in this release including for problems with domain controllers, VPNs, and SMB clients. There are a number of security fixes, but also more controversial changes -- including ads in the Start menu (or app recommendations as Microsoft calls them). Other changes include improvements to Widgets and Windows Subsystem for Linux 2 (WSL2). See also: The highlights for the KB5037771 update,

en-US

Get 'The DevSecOps Playbook: Deliver Continuous...

Security – BetaNews ·

2024/05/09

In The DevSecOps Playbook: Deliver Continuous Security at Speed, Wiley CISO and CIO Sean D. Mack delivers an expert analysis of how to keep your business secure, relying on the classic triad of people, process, and technology to examine -- in depth -- every component of DevSecOps. In the book, you'll learn why DevSecOps is as much about people and collaboration as it is about technology and how it impacts every part of our cybersecurity systems. You'll explore the shared responsibility model at the

en-US

Confronting quantum computers' cryptanalysis concerns

Security – BetaNews ·

2024/05/07

The race to successfully build quantum computers is on. With the potential to solve all manner of problems for humanity, players across the globe -- from tech companies to academic institutions to governments -- have been busy investing significant resources into quantum computing initiatives for some years now. But what are they exactly? A traditional (digital) computer processes zeros and ones, so called bits. These, to a first order approximation, are represented as on/off electrical signals

en-US

It's time to get proactive on the UK's critical...

Security – BetaNews ·

2024/04/29

The critical national infrastructure that underpins the UK has undergone a tremendous amount of digital transformation in recent years. Areas like water treatment, energy and food production are still heavily reliant on operational technology (OT) systems that were often designed and implemented long before the digital revolution. Digitizing these systems and connecting them to standard IT networks has allowed operators to boost efficiency and bring in practices like remote working and data

en-US

Why the financial services industry has to start...

Security – BetaNews ·

2024/04/24

The digital revolution continues at pace. Yet, whilst many industries are looking to harness the transformative impact of AI and other innovative tech, there are many firms in financial services that are simply unprepared and unable to capitalize on the latest advancements. A reliance on legacy systems and the use of paper-based forms of communication and record-keeping is holding the sector back. Now is the time for the industry to fully embrace digital transformation strategies or risk being left

en-US

Cisco warns of serious CLI command injection...

Security – BetaNews ·

2024/04/18

A serious security vulnerability exists in Cisco Integrated Management Controller (IMC) which can be used by an attacker to elevate privileges to root. The company has issued a warning about the vulnerability and acknowledged the availability of proof-of-concept exploit code for it. The high severity warning is accompanied by the release of patches, as well as a note that there is no workaround other than a software update. See also: The vulnerability has a CVSS score of 8.8, and Cisco says of it:

en-US

Microsoft releases Windows 11 Moment 5 and fixes...

Security – BetaNews ·

2024/04/10

Windows 11 Moment 5 is now available to everyone. Microsoft has released the KB5036893 update as part of its monthly update schedule, bringing the new Moment 5 features to all users, not just Windows Insiders. As well as updating Snap Layouts and Copilot, KB5036893 also includes changes to widgets and injects AI features into Photos and Clipchamp. There are also fixes for a huge number of security issues. See also: The fact that Moment 5 features are now available to everyone creates a more level

en-US

Security vendor consolidation or best of breed? Why...

Security – BetaNews ·

2024/04/03

Trends in cybersecurity (like many areas of technology and life) tend to make pendulum-like swings over time. One such shifting debate is around security tool philosophy: is it best to use an array of best-in-class tools or consolidate to a single, “do it all” security platform? I argue that it is essential to planfully and strategically implement a hybrid approach. By combining some best-of-class tools with integrated platforms, you can eliminate the chaos of countless single tools and embrace the

en-US

Shielding the lifelines: Protecting energy and...

Security – BetaNews ·

2024/04/03

The energy and infrastructure sectors serve as the backbone of global stability and economic health, underpinning nearly all facets of modern society. As such, the integrity and reliability of these systems are paramount, and failure to maintain their uptime could lead to unprecedented disruptions in daily life. This reality underscores the pressing need to safeguard these sectors from evolving cybersecurity threats. However, the very importance of energy and infrastructure makes them prime targets

en-US

Microsoft is great, but not enough for email security

Security – BetaNews ·

2024/04/03

Microsoft 365 is the default software in SMEs, and understandably. The software offers a comprehensive set of productivity tools; flexible, scalable, and affordable licensing options, and compliance and security capabilities. However, given the ever-growing and persistent threat of cyberattacks, for email security, the standard security safeguards offered are insufficient. Analysis of over 1 billion emails worldwide shows that emails are the preferred vehicle of cybercriminals. Email-delivered

en-US

Microsoft is deprecating 1024-bit RSA certificate...

Security – BetaNews ·

2024/03/19

Microsoft has quietly announced plans to deprecate TLS server authentication certificates using RSA keys with key lengths shorter than 2048 bits. The change means that it will not be possible to use 1024-bit keys, although Microsoft is yet to reveal exactly when the changeover will start. This is important information for companies using aging hardware and software as it will mean weaker keys can no longer be used for authentication. See also: Microsoft's deprecation decision comes more than a

en-US

Immutability: A boost to your security backup

Security – BetaNews ·

2024/03/14

As the volume of data continues to increase and the threat landscape continues to evolve, it is increasingly important for organizations to protect backup data from unwanted deletion. Threats today can take the form of a malicious insider deleting backup data or a targeted cyberattack on the backups themselves. Modern ransomware attacks often first seek out and destroy backups before moving on to encrypting production data. However, companies will benefit from implementing immutability, the act of

en-US

Microsoft releases KB5035845 update for Windows 10,...

Security – BetaNews ·

2024/03/13

Windows 10 users have a new security update to install in the form of the KB5035845 update. In addition to addressing a number of security issues, this mandatory update also kills the Windows Backup app for many people and introduces various other changes. One of the most interesting additions to be found in the KB5035845 update are improvements to Windows share. There are also fixes for various issues in Windows 10 including Windows Hello problems. See also: Microsoft is using the KB5035845 update

en-US

223 results