Manufacturing faces a wave of advanced email attacks
New data from Abnormal Security shows that between September 2023 and September 2024, phishing, business email compromise, and vendor email compromise attacks on manufacturers increased significantly.
The number of monthly attacks phishing attacks has grown nearly 83 percent between September 2023 and September 2024. Business email compromise attacks are up 56 percent too.
Satechi unveils Mac mini M4 Stand and Hub with SSD Enclosure
Satechi has revealed the Mac Mini M4 Stand & Hub with SSD Enclosure, an accessory designed for the 2024 Mac Mini M4. This stand adds functionality by incorporating additional storage options, connectivity ports, and a sleek aluminum design that complements the Mac Mini M4. For users who don’t require the SSD feature, Satechi is also offering a version without the enclosure, providing similar connectivity options in a compact form.
The SSD-enabled model supports up to 4TB of NVMe storage, making it suitable for users managing large files or media. The hub includes three front-facing USB-A ports for legacy device compatibility and a front SD card reader for quick file transfers. Satechi’s design features heat-dissipating vents to maintain optimal performance during demanding tasks while ensuring the Mac Mini’s wireless connectivity remains uninterrupted.
Supply chain attacks up over 400 percent since 2021
A new report from cyber insurance provider Cowbell shows that supply chain attacks have increased by an astounding 431 percent since 2021.
It also shows that large enterprises (those with greater than $50 million revenue) are 2.5 times more likely to encounter cyber incidents. Manufacturing is the most vulnerable sector, driven by its reliance on automation and exposure to intellectual property threats.
Google calls the AI fuzz to find vulnerabilities
Not familiar with 'fuzzing'? It's a software testing technique that involves feeding invalid, unexpected, or random data into a program to detect coding errors and security vulnerabilities.
Back in August 2023, Google introduced AI-Powered Fuzzing, using large language models (LLM) to improve fuzzing coverage to find more vulnerabilities automatically -- before malicious attackers could exploit them.
HP offers enhanced protection for enterprise endpoints
The rise of remote and hybrid work has increased the risk of PCs being compromised by attackers with brief physical access, underscoring the need for protection and visibility into the integrity of devices throughout their lifetimes.
To combat this, HP is launching a new HP Enterprise Security Edition, a unique suite of capabilities designed to enhance the physical security of PC endpoints.
Google reacts to DOJ’s ‘extreme proposal’ that it should sell Chrome
The US Department of Justice has put forward proposals designed to break Google’s monopoly over online searches. Included in the DOJ’s proposals is the recommendation that Google sell off its Chrome web browser.
Other proposals include putting blocks in place that would stop the tech giant from entering into contracts with companies that result in Google being the default search engine on various platforms. Google has lashed out at the proposals saying that they go too far and would cause harm to customers and innovation.
Google Drive for desktop adds beta support for Windows 11 ARM64
Google is bringing its popular Drive for Desktop application to ARM64 devices running Windows 11. The beta release includes native ARM64 binaries, ensuring better compatibility and performance on these devices. However, there is one caveat -- the Outlook Meet plugin isn’t supported in this version.
As expected with any beta release, Google is warning users to proceed with caution. The company recommends using the application with non-production data or ensuring you have backups stored elsewhere. This is a smart move since beta software often carries bugs that could disrupt critical workflows.
Over 20 years in the making -- FreeCAD 1.0 is finally here!
It’s possibly one of the longest gestation periods in computing history, but after more than two decades of development, FreeCAD 1.0 finally gets its first official, stable release.
The open-source tool for product designers and mechanical engineers has long been used in production despite its lack of official release status, but the resolution of two outstanding issues cleared the way for it to officially reach the 1.0 milestone, complete with brand new logo.
Why you might soon find yourself talking to adverts
We've probably all shouted at an advert on TV or muttered darkly at one that pops up when surfing the web, but how would you feel about ads you can actually converse with?
Communications company GMS has developed Generative Response Ads, a technology that enables consumers to engage in real-time conversations directly within ad spaces using AI.
Porsche Design and AGON by AOC launch 34-inch QD-OLED gaming monitor
Porsche Design and AGON by AOC have collaborated to release the PRO PD34, a 34-inch curved QD-OLED gaming monitor. This ultra-wide display combines Porsche Design’s aesthetics with AGON by AOC’s expertise in gaming and professional monitors, aiming to appeal to both gamers and professionals.
The PD34 features a UWQHD resolution of 3440x1440 pixels, a 21:9 aspect ratio, and an 1800R curvature. The QD-OLED panel supports VESA DisplayHDR True Black 400 certification, a peak brightness of 1000 nits, and covers 100 percent of sRGB, 99 percent of AdobeRGB, and 99 percent of DCI-P3 color spaces. A 240Hz refresh rate and a 0.03ms GtG response time provide smooth motion and responsiveness, while compatibility with AMD FreeSync Premium Pro and NVIDIA G-SYNC reduces screen tearing for gamers.
More than half of organizations think their cloud security is inadequate
A new survey, from infrastructure management provider Pulumi, reveals that 58 percent of organizations feel their cloud security is inadequate, underscoring the critical need for enhanced security measures in cloud environments.
This echoes research from other sources which show a 75 percent increase in cloud intrusions from 2022 to 2023, and 44 percent of organizations having faced a cloud data breach -- 14 percent reporting one in the past year.
Get 'Programming with GitHub Copilot: Write Better Code -- Faster!' for FREE and save $48!
In Programming with GitHub Copilot, veteran software developer and GitHub community hero Kurt Dowswell delivers an insightful and hands-on exploration of GitHub's powerful, new AI coding assistant, Copilot. In the book, you'll discover how to use the tool's capabilities to push the boundaries of what you thought was possible in programming.
Even if you've used autocomplete tools -- like VS Code's TabNine extension -- before, you'll be floored by GitHub Copilot's potential to transform the way you code.
Encrypted Client Hello didn't solve censorship, but still may have a role to play
In November 2024, Russia began blocking Cloudflare’s implementation of Encrypted Client Hello (ECH), a privacy-focused extension of the TLS protocol.“This technology is a means of circumventing restrictions on access to information banned in Russia. Its use violates Russian law and is restricted by the Technical Measure to Combat Threats (TSPU),” the statement by the Russian Internet regulator read.
Russia, known for its tight control over internet access, views ECH as a tool for bypassing geo-restrictions, though that was never its intended purpose. This move follows a broader pattern of censorship and surveillance. Over the past few years, Russia has been cracking down on VPNs, making it harder for users to circumvent government-imposed restrictions.
Attackers target holidays and weekends to catch enterprises off guard
Cyberattackers are targeting holidays and weekends to cause maximum disruption, yet many businesses remain underprepared outside of standard working hours.
A new report from Semperis, based on a survey of almost 1,000 cybersecurity professionals, shows that 86 percent of surveyed organizations in the US, UK, France and Germany that were attacked were targeted during a holiday or weekend.
How the Disney insider threat case breaks the security binary illusion
Security is always a bit like a game of whack-a-mole in that you never quite know where the next incident is going to pop up. On the face of it, this shouldn’t be too hard. Everyone knows to secure your PII, PHI, customer financials, production environments, and other resources that are clearly highly sensitive. But sometimes the question of what is sensitive is less black and white, filled with plenty of gray areas.
This uncertainty can lead to organizations failing to properly secure their resources, as we saw in the recent incident over at Disney.
Recent Headlines
Most Commented Stories
© 1998-2024 BetaNews, Inc. All Rights Reserved. Privacy Policy - Cookie Policy.