Biting the hand that feeds IT — sci/tech news and views for the world
6k followers 35 articles/week
CHERI Alliance formed to promote memory security tech ... but where's Arm?

Academic-industry project takes next step as key promoter chip designer licks its wounds A group of technology organizations has formed the CHERI Alliance CIC (Community Interest Company) to promote industry adoption of the security technology focused on memory access.…

Tue Jun 18, 2024 18:08
Uncle Sam ends financial support to orgs hurt by Change Healthcare attack

Billions of dollars made available but worst appears to be over The US government is winding down its financial support for healthcare providers originally introduced following the ransomware attack at Change Healthcare in February.…

Tue Jun 18, 2024 16:17
NHS boss says Scottish trust didn't meet attackers' demands

CEO of Dumfries and Galloway admits circa 150K people should assume their details leaked The chief exec at NHS Dumfries and Galloway will write to thousands of folks in the Scottish region whose data was stolen by criminals, admitting the lot of it was published after the trust did not give in to the miscreants' demands.…

Tue Jun 18, 2024 14:35
VMware by Broadcom warns of two critical vCenter flaws, plus a nasty sudo bug

Specially crafted network packet could allow remote code execution and access to VM fleets VMware by Broadcom has revealed a pair of critical-rated flaws in vCenter Server – the tool used to manage virtual machines and hosts in its flagship Cloud Foundation and vSphere suites.…

Tue Jun 18, 2024 09:11
Arm security defense shattered by speculative execution 95% of the time

'TikTag' security folks find anti-exploit mechanism rather fragile In 2018, chip designer Arm introduced a hardware security feature called Memory Tagging Extensions (MTE) as a defense against memory safety bugs. But it may not be as effective as first hoped.…

Tue Jun 18, 2024 04:22
Shoddy infosec costs PwC spinoff and NMA $11.3M in settlement with Uncle Sam

Pen-testing tools didn't work – and personal info of folks hit by pandemic started appearing in search engines Two consulting firms, Guidehouse and Nan McKay and Associates, have agreed to pay a total of $11.3 million to resolve allegations of cybersecurity failings over their roll-out of COVID-19 assistance.…

Tue Jun 18, 2024 02:55

Build your own newsfeed

Ready to give it a go?
Start a 14-day trial, no credit card required.

Create account