Using just-in-time credentials to minimize access-based DevOps security risks


While the rapid adoption of DevOps processes has helped companies assume an agile product position in the market, security has lagged. Specifically, DevOps's prioritization of tools and automation has led to an explosion of machine identities that traditional waterfall-based security mechanisms cannot keep pace with.
Verizon's 2021 Data Breach Investigations report highlighted the extent of the problem by revealing that 61 percent of data breaches involved misused credentials data. These breaches are rarely incidents of a malicious actor stealing a human entity's password. Instead, hackers leverage expired or unused machine identities, also known as workload identities, to penetrate networks. As a result, some 92 percent of respondents to a recent Enterprise Strategy Group (ESG) survey indicated that they see workload identities as "critical" or "very important" risks.
One in five CISOs works over 25 hours overtime each week


According to new research from Tessian, 18 percent of UK and US security leaders work over 25 hours extra a week, double the amount of overtime they reported in 2021.
On average, they work 16.5 hours over their contracted weekly hours, up from 11 hours in 2021. Also three-quarters of security leaders say they aren't able to always switch off from work, 16 percent of these say they can rarely or never switch off.
Consumers want businesses to be more transparent about handling data


Consumers want to see more transparency from businesses around how their data is handled, according to the Cisco 2022 Consumer Privacy Survey.
The survey also shows that while consumers are supportive of artificial intelligence -- 54 percent are willing to share their anonymized data to improve AI products -- they are concerned about how businesses use AI, with 65 percent having lost trust in organizations due to their AI use.
UK sees one case of fraud every 85 seconds


A new study finds that £95 ($105) is lost to fraud every second in the UK. This is according to analysis by fraud prevention specialist Outseer of all the reported incidents of fraud to Action Fraud -- the UK's national reporting center for fraud and cybercrime -- between 1st July 2021 to 30th June 2022.
The data shows one case was reported to Action Fraud every 85 seconds and reported losses totalled over £3 billion ($3.31 billion) during the 12-month study period.
YouTube launches @ handles for channels


YouTube has announced that creators can now make use of @ handles for their channels. The move is a long time coming and the aim is to help increase engagement on the platform.
With the introduction of handles, YouTube is making it easier for users to mention others in their comments and more. Handles are rolling out over the next month, and YouTube says that it will notify creators when they are able to choose one for their channel.
Oracle releases VirtualBox 7.0.0 with full Windows 11 support


There are plenty of virtualization tools to choose from, but if for anyone looking for one that offers solid support for a wide range of host and guest operating systems, it's hard to go wrong with VirtualBox. Bringing support for Windows 11 -- something previously available in the beta builds -- Oracle has now released VirtualBox 7.0.0.
As has been the case in the past, VirtualBox 7.0.0 is available for Windows, Linux and macOS (as well as Oracle's own Solaris), but this release is about more than adding full Windows 11 support. There are also new options for cloud-based virtual machine, as well as improved security and much more.
Considerably more businesses running Windows 7 than Windows 11


After Microsoft launched Windows 10 back in 2015 it devoted a lot of time and resources to -- shall we say -- 'encouraging' people and businesses to make the switch from Windows 7, even kindly going as far as to automatically upgrading their systems for them.
Things are very different with Windows 11 as Microsoft is happy for the new OS to coexist alongside its predecessor, for the time being at least. There is a downside to this approach however, as it means there’s not the rush to upgrade that Microsoft will have been hoping for, to the point where significantly more businesses are running Windows 7 than Windows 11, despite the former having reached end of life ages ago.
Cybersecurity fears likely to make businesses Metaverse averse


The virtual world of the Metaverse is already attracting people to attend virtual events and play games. It also has the potential for businesses to make money -- research from McKinsey suggests it could be a $5 trillion industry by 2030.
However businesses are still wary of the additional challenges, particularly with regard to security. New research carried out by YouGov for app security company F5 shows six out of 10 respondents say the Metaverse has introduced security complexities that their organization may not be equipped to address.
How Kubernetes and AI will combine to deliver next-gen services [Q&A]


The popularity of Kubernetes has led to its rapid adoption, but as with any advanced technology, the benefits come alongside challenges.
Being able to take full advantage of the technology means understanding what it can offer and how it fits with other developments like artificial intelligence. We spoke to Tobi Knaup, CEO of independent Kubernetes platform D2iQ, to find out about the current state of Kubernetes and what it promises for the future.
Silicon Power Boost Charger QM25 offers both USB-A and USB-C charging


If you are anything like me, you have several devices that use various chargers and cables. For instance, I recently went on a cruise with an iPhone and a Kindle. For the iPhone, I have a USB-C to lightning cable. For the Kindle, I have USB-A to micro USB cable. When packing for my trip, I had to pack both a USB-A and USB-C adapter so I could charge both devices. Isn't there a better way?
Yes, actually. Had I planned better, I could have purchased a single wall adapter that offered both USB-C and USB-A ports for simultaneous charging. This would have allowed me to pack less and use fewer outlets in my room. While there are plenty of these wall adapters on the market, a diminutive new model from Silicon Power, called "Boost Charger QM25," looks quite nice.
Twitter wants you to stop screengrabbing tweets and share them instead


Twitter is taking steps to increase engagement on the platform by discouraging people from taking screenshots of tweets. iOS users are the first to be subjected to prompt to share a tweet rather than a screengrab of it.
The move makes it clear that Twitter is able to determine when users are taking screengrabs, and while many of the images will end up being shared on Twitter itself, the company would prefer that links were shared to other platforms to encourage click-throughs.
How cloud print solutions enhance the hybrid working model


According to Gartner, Inc., as much as 3 percent of a company’s revenue is spent on paper, printing, and other associated costs. This can easily become inefficient over time, compromised by ad hoc expansion, obsolete or mismatched technology and lapsed servicing contracts. Unmanaged print networks cost businesses hundreds of thousands of pounds or more a year in server space, network bandwidth, IT support, hardware maintenance, toner, ink, and energy.
Alongside the financial costs, poor print performance is a threat to commercial agility, user satisfaction, network security and progressive business policy. An organization may also be exposed to breaches and cyber-attacks, leading to hefty fines and a damaged brand reputation.
Microsoft confirms worrying slow file copying problem in Windows 11 2022 Update


The problems with Windows 11 2022 Update just keep on coming. Microsoft has just confirmed an issue that people have been complaining about since the release of the first major update for Windows 11 -- slow file copying.
It is a problem that the company previous acknowledged quite quietly when it released the preview version of the KB5017389 update recently, but is now being rather more open about. Microsoft is describing the issue as "slower SMB read performance for large files in 22H2", and while there is currently no fix, there is a workaround.
Reducing quiet quitting in tech


"Quiet quitting" is a growing trend among the Millennial and Gen Z workforce. Rather than being proactive and putting in extra effort, young workers have decided to take the opposite approach and do only what they must at their jobs. They say this approach is an organized response to low wages, poor working conditions and a lack of work/life balance.
Whatever the reason behind quiet quitting, it’s hurting advanced and competitive industries like tech the most. A strong work ethic is a must-have for anyone who wants to succeed in tech. You need to nip this problem in the bud before it impacts your company’s bottom line. Here are five tips to help your tech company reduce quiet quitting and revitalize your workforce.
Cybersecurity Awareness Month -- this year it's personal


In what was a far-sighted move back in 2004, the President of the United States and Congress declared October to be Cybersecurity Awareness Month, dedicated to helping individuals protect themselves online as threats to technology and confidential data become more commonplace.
This has now become a regular event on the calendar and the theme of this year's campaign is 'See Yourself in Cyber', aiming to underline the fact that cybersecurity is ultimately about people rather than technology.
Recent Headlines
BetaNews, your source for breaking tech news, reviews, and in-depth reporting since 1998.
© 1998-2025 BetaNews, Inc. All Rights Reserved. About Us - Privacy Policy - Cookie Policy - Sitemap.