Security News > 2020 > November
Google this week announced the availability of a new set of monthly patches for the Android operating system, containing fixes for a total of 30 vulnerabilities. The first part of the update, the 2020-11-01 security patch level addresses a total of 17 vulnerabilities in the Android runtime, Framework, Media Framework, and System components.
A password-protected Bitcoin wallet with almost $1 billion in cryptocurrency has just been emptied out. "UNBELIEVABLE - Someone was able to crack the password of the Bitcoin wallet I reported on only a short time ago and spend the $1,000,000,000 that was inside it!".
Smartphones and the rise of IoT. Relying on the ubiquity of smartphones and the rise of remote controls, users and vendors alike have embraced the move away from physical device interfaces. The communication between an IoT device and its app is often not properly encrypted nor authenticated - and these issues enable the construction of exploits to achieve remote control of victim's devices.
Despite a global pandemic, direct digital transformation investment is still growing at a compound annual growth rate of 15.5% from 2020 to 2023 and is expected to approach $6.8 trillion as companies build on existing strategies and investments, becoming digital-at-scale future enterprises, according to IDC. Digital transformation investment predictions. The economy remains on course to its digital destiny with 65% of global GDP digitalized by 2022 and will drive over $6.8 trillion of direct DX investments from 2020 to 2023.
SaltStack has officially revealed three bugs in its code - two of them seemingly critical - and told users: "We strongly recommend that you prioritize this update." But the biz appears to have known about the bugs for months and quietly patched them over the summer. SaltStack offers open-source, Python-based automation tools.
ACI Worldwide announced ACI Fraud Management in the cloud enables Indian banks to protect the rapidly growing number of Unified Payments Interface transactions across the region. "A supportive regulatory environment, coupled with ever-increasing smartphone usage, internet access and customer acceptance, has powered rapid UPI transaction growth. However, surging transaction volumes pose a complex challenge to banks and financial institutions when it comes to upgrading and maintaining their back-end risk management systems," said Kaushik Roy, vice president and country leader - South Asia, ACI Worldwide.
Amazon Web Services announced the general availability of Amazon Elastic Compute Cloud P4d instances, the next generation of GPU-powered instances delivering 3x faster performance, up to 60% lower cost, and 2.5x more GPU memory for machine learning training and high-performance computing workloads when compared to previous generation P3 instances. Using P4d instances with AWS's Elastic Fabric Adapter and NVIDIA GPUDirect RDMA, customers are able to create P4d instances with EC2 UltraClusters capability.
Social media firms remained on high alert Tuesday against Election Day misinformation and manipulation efforts as polling places began closing in the US and focus turned to tallying ballots. "Our Election Operations Center will continue monitoring a range of issues in real time - including reports of voter suppression content," said a Facebook statement posted on Twitter.
iStorage has launched the diskAshur M2. The diskAshur M2 is iStorage's smallest, lightest, fastest and most rugged FIPS compliant encrypted portable SSD and includes connectivity for both USB type A and C ports. The new diskAshur M2 SSD encrypts data using FIPS PUB 197 validated, AES-XTS 256-bit hardware encryption and uniquely incorporates a Common Criteria EAL4+ ready secure microprocessor, which employs built-in physical protection mechanisms designed to defend against external tamper, bypass physical attacks and more.
New capabilities extend endpoint management features for Windows, Android, Mac, iOS and Linux devices while giving IT teams the ability to deliver a more ambient, personalized device experience for their end-users. "Our latest releases of Unified Endpoint Manager and User Workspace Manager further simplify the IT management experience while adding robust support for devices of all types, securing and controlling them no matter where and how they are accessing corporate data - all from a single and intuitive console."