Yasna brings together recent headlines from selected sources and makes them easier to sort with tags, filters, and search.
Search across headline titles and summaries.
Will players press start to continue with this outfit? Shadow, which hosts Windows PC gaming in the cloud among other services, has confirmed criminals stole a database containing customer data following a social-engineering attack against one of its employees.…
First attempt to exploit latest Progress Software bug spotted in the wild The first ransomware campaign against organizations using the vulnerability in Progress Software's WS_FTP Server was this week spotted by security researchers.…
Two years on and Microsoft refuses to address the issue Perceived weaknesses in the security of Microsoft's Visual Studio IDE are being raised once again this week with a fresh single-click exploit.…
The road to Hell is paved with good intentions, and for open source this is a well meaning cluster fudge Opinion When I was in Bilbao recently for the Open Source Summit Europe event, the main topic of conversation was the European Union's (EU) Cyber Resilience Act (CRA). Everyone – and I mean everyone – mentioned it. Why? Because pretty much everyone with an open source clue sees it as strangling open source software development.…
Not quite a pound for every one of the 13.8 million affected UK citizens, and it could have been more The UK's Financial Conduct Authority (FCA) has fined Equifax a smidge over £11 million ($13.6 million) for severe failings that put millions of consumers at risk of financial crime.…
We'd like to say don't panic … but maybe? 35 vulnerabilities in the Squid caching proxy remain unfixed more than two years after being found and disclosed to the open source project's maintainers, according to the person who reported them.…
The ransomware gang changes identities more than Jason Bourne The Everest ransomware group is stepping up its efforts to purchase access to corporate networks directly from employees amid what researchers believe to be a major transition for the cybercriminals.…
How continuous data protection and isolated cyber recovery vaults provide effective defense against ransomware Sponsored Feature In August 2023, Danish hosting subsidiaries CloudNordic and AzeroCloud were on the receiving end of one of the most serious ransomware attacks ever made public by a cloud services company.…
Simpson Manufacturing yanks systems offline, warns of ongoing disruption Simpson Manufacturing Company yanked some tech systems offline this week to contain a cyberattack it expects will "continue to cause disruption."…
Partner Content According to the Cyber Security Breaches Survey 26 percent of medium businesses, 37 percent of large businesses and 25 percent of high-income charities have experienced cyber crime in the last 12 months.…
Worth it for 20 years behind bars? A US Navy service member pleaded guilty yesterday to receiving thousands of dollars in bribes from a Chinese spymaster in exchange for passing on American military secrets.…
We still doubt any infosec leaders will be going without heating this winter The gap between the top and bottom-earning CISOs is growing wider, with the highest-paid execs having their salaries increased at three times the rate of those at the lower echelons.…
IT folks look back on 20 years of what is now infosec tradition Feature Twenty years ago this month, Microsoft did something pretty revolutionary at the time when it formalized the Windows software release schedule.…
The coordinated disclosure didn’t quite go to plan, though After a week of rampant speculation about the nature of the security issues in curl, the latest version of the command line transfer tool was finally released today.…
Britain's privacy watchdog still not happy that agreement 'appropriately' protects sensitive data Opinion The UK Extension to the EU-US Data Privacy Framework (aka Data Bridge) will enter into force on October 12, allowing certifying entities to easily transfer personal data from the UK to the US.…
Happy Halloween! Security bugs under attack squashed, more flaws fixed Patch Tuesday Microsoft on Tuesday issued more than 100 security updates to fix flaws in its products, including two bugs that are already under active attack, as well as addressing an HTTP/2 weakness that has also been exploited in the wild.…
And Caroline Ellison says she was told by Bankman-Fried to take $10B from customer accounts At the fraud trial of former FTX head Sam Bankman-Fried, prosecutors presented the jury with Python code for the FTX backend that allowed flagged client accounts to spend money they didn't have on the cryptocurrency exchange.…
Botnet storm drowned last record with 398 million requests per second A zero-day vulnerability in the HTTP/2 protocol was exploited to launch the largest distributed denial-of-service (DDoS) attack on record, according to Cloudflare.…
With 13 new payloads it's the biggest update to the botnet in months The infamous Mirai botnet was spotted by researchers who say it is spinning up again, this time with an "aggressively updated arsenal of exploits."…
One-click exploit could potentially affect most major distros Researchers discovered a high-severity remote code execution (RCE) vulnerability in an inherent component of GNOME-based Linux distros, potentially impacting a huge number of users.…