Internet Society members' data exposed in breach
The Internet Society (ISOC) is one of the oldest and most important international non-profit organizations related to the internet, but that doesn't make it immune to problems and it's revealed today that ISOC members' details have been exposed in a data security breach
Independent cybersecurity researcher Bob Diachenko, in collaboration with cybersecurity company Clario, discovered an open and unprotected Microsoft Azure blob repository containing millions of files with personal and login details of ISOC members.
CISA says to urgently patch actively exploited SeriousSAM/HiveNightmare flaw affecting Windows 11
The CISA (US Cybersecurity and Infrastructure Security Agency) has published a list of 15 actively exploited software vulnerabilities, encouraging users of Windows and macOS to install the available patches.
Included in the list is the SeriousSAM vulnerability that is also known as HiveNightmare affects Windows 10 and 11. Tracked as CVE-2021-36934, this is a local privilege escalation vulnerability that makes it possible for an attacker to grab password hashes from the registry and gain admin privileges.
ADATA unveils XPG CYBERCORE modular power supply
Power supply units are the unsung heroes of computer builds. They aren't sexy, and they don't really add to performance, but make no mistake -- having a quality PSU maters. A low-quality power supply can lead to system instability, and even worse, fires. Yeah, it is never worth it to choose a PSU from an unknown manufacturer.
With all of that said, today, respected-maker ADATA unveils what looks to be a very nice power supply unit under its popular XPG (XTREME PERFORMANCE GEAR) gaming brand. Called "CYBERCORE," this PSU is offered in two wattage options -- 1,000W and 1,300W. It is also modular, meaning the wires are removable, which is great for cable management.
Enterprises aren't providing a joined-up digital experience
According to a new study from integration and API specialist MuleSoft 70 percent of organizations struggle to provide completely connected user experiences across all channels.
This is despite the fact that almost three-quarters (72 percent) of organizations' customer interactions are now digital.
Your Amazon Prime subscription is about to get much more expensive
Amazon has announced a significant price hike for Prime membership. The company is blaming the COVID-19 pandemic and an increase in labor costs for the subscription fee jumping by nearly 17 percent annually, or just over 15 percent for those paying monthly.
Starting later this month, new Prime members in the US can expect to pay $139 per year, or $14.99 per month. The same price increase is also coming to existing Prime subscribers, but not until the end of March.
Microsoft bringing more experimental features to Windows 11 Insider builds
Microsoft usually rolls out new Windows 11 builds to Insiders in the Dev Channel on a weekly basis, but it won’t be doing so this week as it has run into some quality issues with its planned flight.
What the software giant has done however, is lifted the lid on what’s coming to the Windows Insider Program this year. Microsoft says it has more people running test builds of Windows 11 than it did with Windows 10, and going forward its focus will be on trying out new, more experimental features and services.
More than a third of firms hit by unexpected cloud costs
A survey of 1,000 developers at businesses of all sizes finds that 37 percent have been stung by unexpected cloud costs in the last 12 months.
The study by cloud-native service provider Civo finds that half of those affected say it was a mistake or configuration change that led to the unexpected cost as opaque and complicated cloud billing hinders proper cost planning.
Every major Linux distro has a PwnKit flaw that is easily exploited to gain root access
Linux-based operating systems are frequently touted as being far more secure than the likes of Windows or macOS. More secure they may be, but they are not completely infallible.
A great example of this is the recently discovered PwnKit vulnerability in the pkexec component of Polkit. The flaw can be exploited to gain root access to a system and it has been a security hole in pretty much all major Linux distros for over 12 years, including Debian, Fedora and Ubuntu.
Data breaches expose over 40 billion records in 2021
New figures released today from cyber exposure company Tenable show that over 40 billion records were exposed in data breach incidents last year, a whopping 78 percent increase over the previous year.
The company's 2021 Threat Landscape Retrospective report is based on analysis of 1,825 incidents publicly disclosed between November 2020 and October 2021. Since many reports didn't include details of the number of records breached the true figure is likely to be far higher.
Silicon Power XPOWER XS70 PCIe 4.0 SSD is inspired by sharks
Do you need a PCIe 4.0 NVMe solid state drive? Probably not. I mean, nobody really needs the insane speed these drives offer. However, the drool-worthy performance is certainly nice to have. Look, if you can afford such an SSD and your computer supports it at full speed, you might as well get one. I mean, why not?
Today, Silicon Power announces its latest such PCIe 4.0 SSD. Called "XPOWER XS70," it features blazing fast speeds and capacities up to 4TB. It even has a nice-looking heat sink that the company says is inspired by sharks.
Open source tool helps in the fight against log4j vulnerability exploits
Since the Log4Shell attack targeting a log4j vulnerability was first uncovered towards the end of last year it's posed a threat to web servers worldwide.
It's a tricky problem to address because doing so means updating software dependencies. Meanwhile attackers are seeking to inject text into log messages or log message parameters, then into server logs which can then load code from a remote server for malicious use, using obfuscation techniques to hide from security software.
What can the IT industry expect this year? More of the same -- change
As the age-old saying goes: Change is the only constant in life. The same is particularly true for the IT industry. New technologies birth newer technologies and the cycle of exploration, innovation, and mastery continues on repeat. In my opinion, it’s one of the many perks of working in IT. Variety is the spice of life, to quote another cliche.
The last two years have been, let’s just say, especially spicy -- with all sorts of unexpected challenges and advancements. The year ahead is sure to bring about more of the same. While hindsight may be 20/20 when it comes to 2020 (and 2021), the trick for IT professionals, and the organizations that employ them, will be trying to stay ahead of the ever-changing curve in 2022.
Google Docs comment flaw exploited by attackers
A flaw in the comments feature of Google Docs is allowing attackers to target users with phishing emails.
Security researchers at email security company Avanan have observed what they call, "a new, massive wave of hackers" using the comment feature in Google Docs during December to launch attacks, mainly against Outlook users.
OWC Atlas FXR is the world's smallest Thunderbolt CFexpress card reader
Do photographers and videographers still use SD cards? Yes. In fact, I would guess that most do. However, the writing is on the wall, and the faster CFexpress Type B memory cards are obviously the future. Those with cutting-edge camera equipment are already enjoying the benefits of these superior cards.
The problem? Most computers, including the newest MacBook Pro laptops, do not come with integrated readers for these cards. And so, consumers must invest in external readers. Today, OWC unveils what it says is the "smallest Thunderbolt CFexpress card reader." Called "Atlas FXR," it connects using Thunderbolt 3/4 to provide insane speeds. It is also compatible with USB-C and comes with a USB-A adapter. In addition, the company is releasing its own line of CFexpress Type B memory cards called "Atlas Pro" and "Atlas Pro Ultra."
Exploring the use of the Python programming language for data engineering
Python is one of the most popular programming languages worldwide. It often ranks high in surveys -- for instance, it claimed the first spot in the Popularity of Programming Language index and came second in the TIOBE index.
The chief focus of Python was never web development. However, a few years ago, software engineers realized the potential Python held for this particular purpose and the language experienced a massive surge in popularity.
Recent Headlines
Most Commented Stories
© 1998-2024 BetaNews, Inc. All Rights Reserved. Privacy Policy - Cookie Policy.