Security News
![Urgent: GitLab Releases Patch for Critical Vulnerabilities - Update ASAP](/static/build/img/news/urgent-gitlab-releases-patch-for-critical-vulnerabilities-update-asap-small.jpg)
GitLab has released security updates to address two critical vulnerabilities, including one that could be exploited to take over accounts without requiring any user interaction. Tracked...
![On IoT Devices and Software Liability](/static/build/img/news/alt/IoT-Cybersecurity-Predictions-2-small.jpg)
Abstract: Smart devices are used to facilitate cyberattacks against both their users and third parties. While users are generally able to seek redress following a cyberattack via data protection legislation, there is no equivalent pathway available to third-party victims who suffer harm at the hands of a cyberattacker.
![Data regulator fines HelloFresh £140k for sending 80M+ spams](/static/build/img/news/data-regulator-fines-hellofresh-ps140k-for-sending-80m-spams-small.jpg)
Food delivery company HelloFresh is nursing a £140,000 fine by Britain's data privacy watchdog after a probe found it had dispatched upwards of a staggering 79 million spam email and one million texts in just seven months. The Information Commissioner's Office says the company claimed messages were based on an opt-in statement, yet this statement did not include any reference to the sending of marketing messages via text.
![Critical GitLab flaw allows account takeover without user interaction, patch quickly! (CVE-2023-7028)](/static/build/img/news/critical-gitlab-flaw-allows-account-takeover-without-user-interaction-patch-quickly-cve-2023-7028-small.jpg)
A critical vulnerability in GitLab CE/EE can be easily exploited by attackers to reset GitLab user account passwords.Users who have two-factor authentication enabled on their account are safe from account takeover.
![While we fire the boss, can you lock him out of the network?](/static/build/img/news/while-we-fire-the-boss-can-you-lock-him-out-of-the-network-small.jpg)
"The engineer was very skilled at gaslighting the management regarding such things, and without me present they feared he would just flim-flam his way out of trouble - and not for the first time," Alvin told On Call. The biz countered that the engineer had done good work for years, and had built the network from scratch.
![Cryptominers Targeting Misconfigured Apache Hadoop and Flink with Rootkit in New Attacks](/static/build/img/news/cryptominers-targeting-misconfigured-apache-hadoop-and-flink-with-rootkit-in-new-attacks-small.jpg)
Cybersecurity researchers have identified a new attack that exploits misconfigurations in Apache Hadoop and Flink to deploy cryptocurrency miners within targeted environments. "This attack is...
![Drivers: We'll take that plain dumb car over a flashy data-spilling internet one, thanks](/static/build/img/news/drivers-we-ll-take-that-plain-dumb-car-over-a-flashy-data-spilling-internet-one-thanks-small.jpg)
CES Despite all the buzz around internet-connected smart cars at this year's CES in Las Vegas, most folks don't want vehicle manufacturers sharing their personal data with third parties - and even say they'd consider buying an older or dumber car to protect their privacy and security. According to a survey of 2,000 Americans conducted by Kaspersky in November and published this week, 72 percent of drivers are uncomfortable with automakers sharing their data with advertisers, insurance companies, subscription services, and other third-party outfits.
![Act Now: CISA Flags Active Exploitation of Microsoft SharePoint Vulnerability](/static/build/img/news/act-now-cisa-flags-active-exploitation-of-microsoft-sharepoint-vulnerability-small.jpg)
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical security vulnerability impacting Microsoft SharePoint Server to its Known Exploited Vulnerabilities (KEV)...
![Cloud security predictions for 2024](/static/build/img/news/cloud-security-predictions-for-2024-small.jpg)
As we reflect on the cybersecurity landscape and the trajectories of threat vectors, it's evident that we're on the cusp of a paradigm shift in cloud security. It's a reminder that even with advancements in cloud security, fundamental principles like IAM can't be overlooked.
![Cyber budgets and the VC landscape in 2024](/static/build/img/news/cyber-budgets-and-the-vc-landscape-in-2024-small.jpg)
The U.S. will be in a recession by Q4 2024, and tech companies will continue reducing their workforce. Still, VCs will be able to capitalize on these economic conditions, which create an opportunity for investment as prices remain depressed despite the immense technical talent in the market looking to create the next generation of disruptive companies.