Top security trends you can expect in 2023
We’ve already had the first major API-related cybersecurity incident for 2023, and the year has barely started. The T-Mobile API breach exposed the personally identifiable information (PII) of 37 million customers. The API attack had been going on since November but was not discovered and disclosed until January 19, illustrating the threat of the "low and slow" approach of API attacks, which are increasing at a steady pace. Following research by Sam Curry that uncovered hundreds of API vulnerabilities in the automotive industry -- from Mercedes-Benz to Nissan to Kia to Ferrari and more -- it’s not surprising that 2023 has been dubbed "The Year of API Security."
Unfortunately, threats do not stop at API security. Today’s organizations -- and the world -- face inordinate security risks. What other threats and trends can we expect to see in the coming year?
Microsoft warns of Windows 10 and 11 DirectX issues, apphelp.dll errors after installing KB5019980 update
Microsoft has issued a warning to Windows 10 and Windows 11 users with system Intel GPUs. The company says that people who have installed November's cumulative update for Windows (the KB5019980 update) may experience issues if they also have certain versions of the Intel graphics driver installed.
The problems affect apps and games that make use DirectX or Direct3D to render content, and can cause apphelp.dll errors to appear.
Microsoft Support Diagnostic Tool and MSDT Troubleshooters to be killed off with a Windows 11 update
Microsoft has announced a big shakeup to the support and troubleshooting options that are currently available in Windows 11. The company says that over the course of the next three years, it will be gradually retiring the Microsoft Support Diagnostic Tool (MSDT) and MSDT Troubleshooters currently used by many people to diagnose and fix problems with the operating system.
The ultimate plan is to remove all existing troubleshooters and kill off the MSDT platform using an update for Windows 11. The changes are something that we've heard hints and rumors about previously, but now it has been confirmed. So, what does it mean for Windows users?
Best Windows apps this week
Five-hundred-and-twenty-nine in a series. Welcome to this week's overview of the best apps, games and extensions released for Windows 10 and 11 on the Microsoft Store and elsewhere in the past seven days.
Windows users who think that Windows 11 is using too many resources may check out tiny11, a custom third-party build of Windows 11 that is said to run on only 8 gigabytes of disk space and 2 gigabytes of RAM.
Striking the right balance between development and security [Q&A]
Developers need access to many devices and internal services in order to build software. But many of these devices and services are exposed to the public web, creating gaps in security.
Add in the challenges of securing remote working and it's clear that there's a tricky balancing act needed to enable development while keeping the organization secure. We spoke to Avery Pennarun, CEO and co-founder of VPN service Tailscale, to find out how this can be achieved.
Reddit reveals details of security incident that gave hackers access to internal documents, code and internal business systems
Reddit has fallen victim to a security incident that has been described as a "sophisticated and highly-targeted phishing attack". Hackers targeted employees of the site a few days ago, and were able to gain access to "some internal documents, code, and some internal business systems".
The unknown attackers sent Reddit employees "plausible-sounding prompts" leading to a website that cloned the behavior of the company's intranet gateway. While able to use an employee's credentials to steal data and code, user accounts are not affected.
Leak shows Microsoft is working on Windows 11 23H2, AKA Sun Valley 3 or Moment 4
With Microsoft having changed its approach to releasing major updates to Windows 11, users are still familiarizing themselves with the idea of Moments. Moment 1 has already been released, adding tabs to Explorer and more.
We are still waiting for Moment 2 which is due to launch soon, but a new leak shows that Microsoft is already working away on Moment 4. For now, little is known about Moment 4, other than the fact that it is also known as Windows 11 23H2, and is being referred to internally as Sun Valley 3 or SV3.
Microsoft releases Windows 11 Build 25295 with fixes and a new commercial policy
Windows 11 Insiders in the Dev Channel today get a new Windows 11 build to play around with. Build 25295 comes with a decent selection of fixes and improvements, but that’s not all.
There’s also a new commercial policy which makes it possible to enable features introduced via servicing that are off by default.
Get 'Linux Administration Best Practices' (worth $33.99) for FREE
Linux is a well-known, open source Unix-family operating system that is the most widely used OS today.
Linux looks set for a bright future for decades to come, but system administration is rarely studied beyond learning rote tasks or following vendor guidelines. To truly excel at Linux administration, you need to understand how these systems work and learn to make strategic decisions regarding them. Linux Administration Best Practices helps you to explore best practices for efficiently administering Linux systems and servers.
Reducing risk: Top strategies for businesses
Navigating the business landscape is important for continually delivering the high-quality service your clients expect. Efficiency and resilience are key, especially in the face of change, in which your business’s ability to adapt is vital for its success.
However, it can be difficult to know which changes to embark on to ensure your longevity, but with a high risk of change comes a high reward. Here, we will discuss the top strategies your business can implement to reduce risks while adopting change.
Happy phishing day to you!
Phishing emails usually try to trick the user into opening an attachment or visiting a website. Often this is by instilling a sense of urgency -- telling you your account is about to expire, for example.
Researchers at NordVPN have uncovered a new tactic involving email birthday cards. After all, if it's your birthday and you've opened several eCards already you're not going to think there's anything phishy about another one.
AI, Machine Learning and Deep Learning in the enterprise: Implications to data storage
Artificial Intelligence (AI) has been a hot topic for a long time, but its impact on our society and in the enterprise are just beginning to be realized. AI and other forms of machine learning and deep learning will revolutionize business, automating repetitive tasks and accelerating outcomes -- all based on huge sets of data.
Developing deep learning applications generally follows a three-step process of:
Phishing up 36 percent in the last quarter of 2022 as attack tools get more sophisticated
Phishing volumes increased 36 percent, with 278.3M unique phishing emails in the fourth quarter of 2022, while malware volumes increased 12 percent QoQ, accounting for 58.9M emails, in the same period.
The latest Phishing and Malware Report from Vade shows the company detected 278.3 million unique phishing emails in Q4, surpassing the previous quarter’s total by 74.4 million. December saw the biggest jump in phishing emails, up 260 percent, as threat actors tried to cash in on the holiday period, this echoes a similar pattern at the end of 2021.
Big tech layoffs have a far-reaching impact
The recent big tech layoffs have profoundly impacted industries outside of technology because the sector has long been seen as a driving force for innovation and economic growth. The layoff announcements by companies like Google, Microsoft and Amazon have raised concerns about the tech industry's future and the ripple effects throughout the economy.
Below are several major tech companies that have laid off employees as they navigate the challenges of a rapidly changing industry:
HTML smuggling -- the latest way to to deliver malware
Since Microsoft began the default blocking of macros in documents sent over the internet there's been an increase in the use of HTML files to deliver malware.
Research by Trustwave Spiderlabs reveals a rise in so called 'HTML smuggling' using HTML5 attributes that can work offline by storing a binary in an immutable blob of data within JavaScript code. The embedded payload then gets decoded into a file object when opened via a web browser.
BetaNews, your source for breaking tech news, reviews, and in-depth reporting since 1998.
Regional iGaming Content
© 1998-2025 BetaNews, Inc. All Rights Reserved. About Us - Privacy Policy - Cookie Policy - Sitemap.