Log4j lessons learned: A blueprint for zero-day defence
Two years ago, the zero-day vulnerability, known as Log4Shell unwrapped itself spoiling holiday celebrations for many across the globe leaving organizations scrambling for a fix before it could be exploited.
The vulnerability was discovered in Log4j, a widely used logging tool used by millions of computers worldwide running online services. Its profound impact on IT environments has called for a fundamental shift in how organizations think about their security strategies.
People cannot be patched
When an organization is aware software is vulnerable, it focuses on patching systems to mitigate the risk. Likewise, when security technology becomes outdated, newer versions plug the gaps. However, with people there’s no patch or update readily available.
Instead, a workforce needs to stay abreast of the current threat landscape to ensure the company remains in a good position to combat cyber risks. However, almost 80 percent of leaders lack confidence in their team's ability to tackle cyber threats effectively. This highlights a substantial weakness in current cybersecurity strategies.
HexChat open-source IRC client is forking dead
In a surprising turn of events, the popular IRC client HexChat has announced its final release, 2.16.2, marking the end of an era for the open-source project. The release, which was made public on February 9, 2024, includes a handful of minor fixes and features that have been in the works over the past two years.
The decision to cease development comes from the project's lead, who revealed that HexChat has been largely unmaintained for several years. Despite the lack of active maintenance, the client continued to be a favorite among many in the IRC community. However, with no one stepping up to take over the reins, the time has come to say goodbye.
How to prepare for the new PCI DSS 4.0 requirements [Q&A]
The Payment Card Industry Data Security Standard (PCI DSS) turns 20 next year and has remained largely unchanged during that time. But version 4.0, due to become mandatory from April 2024, will bring the standard bang up-to-date and usher in a number of big changes.
We spoke to Phil Robinson, principal consultant and QSA at Prism Infosec, to explore what's changing and how organizations can prepare to meet the new requirements.
Managing multi-cloud complexity: Frameworks to adopt, pitfalls to avoid, and strategies to bring it all together
As many companies are discovering, a multi-cloud environment can offer improved workload portability, purchasing power and increased innovation velocity, as well as other significant benefits. However, managing a multi-cloud environment can be challenging. From complex integrations to fragmented cost visibility to security and compliance concerns, today’s tech leaders can become overwhelmed.
Competing organizational interests, lack of expertise, and unexpected or hidden costs can detract from the great promise of a multi-cloud environment. Organizations need the right people, processes, and tools to overcome the challenges and realize the rewards.
SABRENT launches high-speed 20Gbps Rocket RGB SSD Enclosure
In a significant upgrade from its predecessor, SABRENT has launched the Rocket RGB USB-C 20Gbps M.2 SATA/NVMe SSD Enclosure, promising to double the transfer speed of the previous 10Gbps model. This latest enclosure is available in two editions -- the EC-RGBG (available here for $49.99) and the "special edition" EC-RGBC (available here, also for $49.99) The special edition is essentially the same, but with a funky pinkish color scheme rather than grey.
The Rocket RGB enclosure supports both NVMe and SATA M.2 SSDs, accommodating a variety of sizes including 2230, 2242, 2260, and 2280. This versatility ensures that users won't be limited by the type of SSD they can use, making it a flexible option for a wide range of storage needs. The device operates over a USB 3.2 Gen 2x2 connection, offering speeds of up to 20Gbps with compatible USB ports, and maintains backward compatibility with 5 and 10Gbps ports.
What does the future hold for content management services?
For many years, organizations have relied on Enterprise Content Management (ECM) systems to help manage information in an efficient and secure fashion. However, with the advent of new content management technologies -- including cloud-based content management systems -- there are signs that the prominence of traditional ECMs is on the wane.
As the challenges faced by businesses continue to grow, achieving new standards of flexibility and efficiency when it comes to content management is key. This is why first-generation ECM systems -- built on decades-old technologies -- are not as effective as they once were.
Microsoft fixes accidental import of Chrome Tabs in Edge
Microsoft has fixed a puzzling issue in the latest version of its Edge web browser. Some users reported that Microsoft Edge was importing open tabs from Google Chrome automatically on their devices about two weeks ago.
While Microsoft Edge does have a preference to do so, the users claimed that the preference was set to off on their devices.
Google releases Android 15 Developer Preview
Today, Google releases Android 15… sort of. You see, it is not a stable release, but instead, it is the official Developer Preview. And most likely, you cannot run it on your phone or tablet either. Right now, it is only available for certain Google Pixel devices -- the Pixel 6 series, Pixel 7 series, Pixel 8 series, Pixel Fold, and Pixel Tablet. Got a different Android device? Sorry, you must wait.
Android 15 continues to focus on elevating developer productivity while introducing new capabilities for creating superior media experiences. The platform is designed to minimize battery impact and maximize app performance, all while maintaining a strong emphasis on user privacy and security.
Employees tricked into downloading remote monitoring software
New research from Malwarebytes reveals that employees are being tricked into downloading remote monitoring and management tools like AnyDesk to open up back doors to corporate networks.
In a standard phishing technique potential victims are targeted via an email or SMS message, personalized to match their roles within the organization. The link in the email goes to what looks like a legitimate bank website with a link to open a chat support session.
Best Windows apps this week
Five-hundred-and-eighty-two in a series. Welcome to this week's overview of the best apps, games and extensions released for Windows 10 and 11 on the Microsoft Store and elsewhere in the past seven days.
Microsoft introduced several upcoming features in developer builds this weeks. From Notepad's AI integration to AI Super Resolution. AI in Notepad may be used to get an "explanation" for the selected text. AI Super Resolution promises improved gaming performance and visuals.
Get 'The Self-Taught Cloud Computing Engineer' (worth $35.99) for FREE
The Self-Taught Cloud Computing Engineer is an all-inclusive guide for IT professionals to master cloud computing concepts by building a broad and deep cloud knowledge base, developing hands-on cloud skills, and achieving professional cloud certifications.
If you’re a beginner with basic computer hardware and software understanding, this book provides the means to transitions into a cloud computing career. Starting with a focus on the Amazon cloud, you’ll be introduced to fundamental AWS cloud services, followed by advanced AWS cloud services in the domains of data, machine learning, and security.
Kodi 21 'Omega' hits a big development milestone -- download it now! [Updated]
Kodi 21 -- codenamed 'Omega' -- is the next version of the hugely popular home theater software. The Kodi Foundation released the second beta version of the program two months ago, introducing a number of new features, fixes, and cleanups.
Today, a brand new build arrives, which will be much more appealing to those users seeking greater stability from the software.
Microsoft pushes KB5034848 update so more people can try Windows 11 Moment 5
Anyone signed up to the Release Preview Channel has a little treat from Microsoft. The company has just released the KB5034848 update to Windows 11 22H2 and 23H2 giving the first proper look at what appears to be the Moment 5 update which is due for release later this year.
KB5034848 is a big update, bringing a host of new features to Windows 11. As well as fixing a series of problems with the operating system, the update also includes major improvements and additions to Voice Access, the arrival of WhatsApp support for sharing, and new suggestions in Snap Layouts.
Unlocking business potential through outcome-based security [Q&A]
Traditionally, organizations have focused on measuring the results of their cyber security strategies in terms of threat events or security incidents to determine how effective their security controls are.
However, in today's fast-paced world, the real game-changer is aligning security outcomes with business objectives and this is where 'outcome-based security' plays a huge role. It's a shift in focus for organizations, but one which can empower security teams to add even greater value to the strategic goals of the business.
Most Commented Stories
Windows 12.1 is everything Windows 11 should be -- and the Microsoft operating system we need!
Apple Intelligence will launch in beta and that’s unacceptable for a trillion-dollar company
© 1998-2024 BetaNews, Inc. All Rights Reserved. Privacy Policy - Cookie Policy.