Security News

GitHub Rolls Out Default Secret Scanning Push Protection for Public Repositories
2024-03-01 05:29

GitHub on Thursday announced that it’s enabling secret scanning push protection by default for all pushes to public repositories. “This means that when a supported secret is detected in any push...

NTT boss takes early retirement to atone for data leak
2024-03-01 05:27

NTT West president Masaaki Moribayashi announced his resignation on Thursday, effective at the end of March, in atonement for the leak of data pertaining to 9.28 million customers that came to light last October. Often resignations are avoided if a leader simply offers up a chunk of their salary instead. On Thursday, NTT West apologized for the leak and released details of a related investigation.

Businesses foresee major impact from new SEC cybersecurity disclosure rules
2024-03-01 05:00

81% of respondents say the new SEC cybersecurity disclosure ruling will substantially impact their business. The SEC's new cybersecurity rules on Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure took effect on Dec. 15, 2023.

98% of businesses linked to breached third parties
2024-03-01 04:30

75% of external business-to-business relationships that enabled third-party breaches involved software or other technology products and services. The remaining 25% of third-party breaches involved non-technical products or services.

GitHub struggles to keep up with automated malicious forks
2024-03-01 00:45

A malware distribution campaign that began last May with a handful of malicious software packages uploaded to the Python Package Index has spread to GitHub and expanded to reach at least 100,000 compromised repositories. According to security firm Apiiro, the campaign to poison code involves cloning legitimate repos, infecting them with malware loaders, uploading the altered files to GitHub under the same name, then forking the poisoned repo thousands of times and promoting the compromised code in forums and on social media channels.

Dashlane Free vs. Premium: Which Plan Is Best For You?
2024-03-01 00:27

Dashlane is one of few password managers that offers a completely free version. While limited in comparison to Dashlane Premium, the free version still allows users access to key password management features.

NordPass Free vs. Premium: Is It Worth the Upgrade?
2024-02-29 23:24

NordPass offers both Free and Premium versions. Learn about the differences and features of each version to determine which one is right for you.

Proton VPN Free vs. Premium: Which Plan Is Best For You?
2024-02-29 22:38

In the case of Proton VPN, we compare the free version to its premium version known as Proton VPN Plus. For a more in-depth analysis, read our full review of Proton VPN. Visit Proton VPN. Feature comparison: Proton VPN Free vs. Proton VPN Plus Number of servers.

Turns out cops are super interested in subpoenaing suspects' push notifications
2024-02-29 22:30

More than 130 petitions seeking access to push notification metadata have been filed in US courts, according to a Washington Post investigation - a finding that underscores the lack of privacy protection available to users of mobile devices. Foreign governments may also demand push notification metadata from Apple, Google, third-party push services, or app developers for their own criminal investigations or political persecutions.

Golden Corral restaurant chain data breach impacts 183,000 people
2024-02-29 22:14

The Golden Corral American restaurant chain disclosed a data breach after attackers behind an August cyberattack stole the personal information of over 180,000 people. "On or about August 15, 2023, Golden Corral experienced a data security incident that caused a temporary disruption to our corporate operations," Golden Corral said.