On the Insecurity of Software Bloat
Good essay on software bloat and the insecurities it causes. The world ships too much code, most of it by…
February 2024
CISA adds Microsoft Windows bugs to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds 2 Microsoft Windows flaws to its Known Exploited Vulnerabilities catalog. The U.S.…
Nation-state actors are using AI services and LLMs for cyberattacks
Microsoft and OpenAI warn that nation-state actors are using ChatGPT to automate some phases of their attack chains, including target…
Abusing the Ubuntu ‘command-not-found’ utility to install malicious packages
Researchers reported that attackers can exploit the ‘command-not-found’ utility to trick users into installing rogue packages on Ubuntu systems. Cybersecurity…
Zoom fixed critical flaw CVE-2024-24691 in Windows software
Zoom addressed seven vulnerabilities in its desktop and mobile applications, including a critical flaw (CVE-2024-24691) affecting the Windows software. The…
Top cloud security trends, challenges and best practices (2024)
For more than 25 years, Grant Asplund has been sharing his insights on how businesses can best protect themselves from…
NIST Celebrates National Entrepreneurship Week
What is National Entrepreneurship (NatlEshipWeek) Week? Celebrated February 10-17, 2024, “NatlEshipWeek is a congressionally chartered week dedicated to empowering entrepreneurship…
Sophie Sayer on the IT Governance Partner Programme
The benefits of partnering with us, and our partner-exclusive event IT Governance launched its partner programme in 2017, which now…
Improving the Cryptanalysis of Lattice-Based Public-Key Algorithms
The winner of the Best Paper Award at Crypto this year was a significant improvement to lattice-based cryptanalysis. This is…
ERR_SSL_PROTOCOL_ERROR: Causes & How to Fix It?
ERR_SSL_PROTOCOL_ERROR sometimes occurs when users visit your website. Here is a guide on What is ERR_SSL_PROTOCOL_ERROR and how to fix…