Security News > 2021 > May

Organizations have seen an increase in device encryption
2021-05-31 03:30

32% of organizations have seen an increase in device encryption in the past year, according to a Vanson Bourne survey. 31 percent noted that their organization now requires all data to be encrypted as standard, whether it's at rest or in transit, and 24 percent require the encryption of all data when it's being stored on their systems or in the cloud.

SeKVM: Securing virtual machines in the cloud
2021-05-31 03:00

They have developed SeKVM, the first system that guarantees - through a mathematical proof - the security of virtual machines in the cloud. The researchers hope to lay the foundation for future innovations in system software verification, leading to a new generation of cyber-resilient system software.

AlmaLinux OS 8.4: A free open source alternative to CentOS
2021-05-31 01:30

The AlmaLinux OS Foundation announced availability of AlmaLinux OS 8.4 just one week after the release of Red Hat Enterprise Linux 8.4. "This is our second stable release, since the project was announced in December," said Jack Aboutboul, community manager of AlmaLinux.

SnapLogic Fast Data Loader simplifies cloud data warehouse loading
2021-05-31 01:00

SnapLogic announced the latest release of the SnapLogic Fast Data Loader, making it fast and easy for an IT specialist, data engineer, or business analyst to load data into a cloud data warehouse. With the SnapLogic Fast Data Loader, users can quickly and easily load data from SaaS applications such as Salesforce, ServiceNow, and Coupa, as well as cloud databases including Oracle and Microsoft SQL Server into a cloud data warehouse such as Amazon Redshift, Snowflake, or SAP Data Warehouse Cloud.

Elastic broadens support for osquery, the open source host instrumentation framework
2021-05-31 00:30

Elastic announces new updates across the Elastic Security solution in its 7.13 release to broaden support for osquery, the open source host instrumentation framework, with a new host management integration for Elastic Agent and unified analysis of osquery host data. The osquery host management integration, now in beta, enables security teams to use osquery results to address cyber threats without the complexity or cost of a separate management layer.

Amazon ECS Anywhere enables customers to run Amazon ECS on any infrastructure
2021-05-31 00:00

Amazon Web Services announced the general availability of Amazon Elastic Container Service Anywhere, a new capability for Amazon ECS that enables customers to run and manage container-based applications on-premises using the same APIs, cluster management, workload scheduling, monitoring, and deployment pipelines they use with Amazon ECS in AWS. Amazon ECS Anywhere provides a fully managed container orchestration service that allows customers to easily run, scale, and secure Docker container applications on any customer-managed infrastructure in addition to all AWS Regions, AWS Local Zones, and AWS hybrid infrastructure deployments. Amazon ECS Anywhere gives customers the ability to run Amazon ECS on any infrastructure using the same cloud-based, fully managed, highly scalable container orchestration service and control plane they use in AWS today.

Bishop Fox appoints Patty Wright as SVP and GM of consulting
2021-05-30 22:15

Bishop Fox announced the appointment of accomplished industry executive, Patty Wright, as senior vice president and general manager of consulting. Wright reports to Bill Carroll, Bishop Fox's chief operations officer.

#GM
WhatsApp Sues Indian Government Over New Internet Regulations
2021-05-30 20:42

WhatsApp on Wednesday fired a legal salvo against the Indian government to block new regulations that would require messaging apps to trace the "First originator" of messages shared on the platform, thus effectively breaking encryption protections. "Requiring messaging apps to 'trace' chats is the equivalent of asking us to keep a fingerprint of every single message sent on WhatsApp, which would break end-to-end encryption and fundamentally undermines people's right to privacy," a WhatsApp spokesperson told The Hacker News via email.

Newly Discovered Bugs in VSCode Extensions Could Lead to Supply Chain Attacks
2021-05-30 20:41

Severe security flaws uncovered in popular Visual Studio Code extensions could enable attackers to compromise local machines as well as build and deployment systems through a developer's integrated development environment. The vulnerable extensions could be exploited to run arbitrary code on a developer's system remotely, in what could ultimately pave the way for supply chain attacks.

Microsoft teases next generation of Windows 10 — What to expect
2021-05-30 19:12

CEO Satya Nadella has confirmed that Microsoft is working on the next generation of Windows, which features a new design language internally codenamed "Sun Valley" and is reportedly launching later this year. "Windows brings together all developer and collaboration tools in one place. It lets you choose the hardware you want, works with Linux and Windows as one, and has a modern terminal. And soon we will share one of the most significant updates to Windows of the past decade to unlock greater economic opportunity for developers and creators," Nadella said during Build 2021 conference.