Insikt Group research examines the complex and dynamic risk environment of submarine cables, the information superhighways that underpin the global economy and facilitate worldwide telecommunications. The rapid expansion of the submarine cable network in the 21st century, driven by data demands, cloud computing, and the needs of hyperscalers like Amazon, …
Read More »Oracle’s AI to revolutionize human resources software
Oracle Corp announced on Wednesday that it will add generative AI features to its human resources software. The new features will help businesses draft job descriptions and employee performance goals, among other tasks. Generative AI systems like ChatGPT have become popular in recent years, but some businesses have been hesitant …
Read More »Ireland: Draconian law to make data protection procedures confidential
Ahead of a discussion in the Oireachtas (Irish parliament) today on a proposed amendment to a bill that would allow the Irish Data Protection Commission (DPC) to label all matters before it as confidential, Rasha Abdul-Rahim, Programme Director at Amnesty Tech, said: “The government’s attempt to allow the Irish Data …
Read More »IBM QRadar SIEM Users at Risk of XSS Attack and Information Disclosure
IBM QRadar is a popular SIEM (Security Incident and Event Management) tool that organizations use to detect and monitor threats. It can be used in the form of a physical appliance, a software-only solution, or a virtual appliance. As of 2023, over 1,130 companies worldwide use IBM QRadar as part …
Read More »Cisco AsyncOS Software Flaw Let Remote Hackers Launch XSS Attack
Cisco AsyncOS Software, used by Cisco Secure Email and Web Manager, Cisco Secure Email Gateway (previously Cisco Email Security Appliance; ESA), and Cisco Secure Web Appliance (WSA), has multiple flaws in its web-based management interface. The vulnerabilities could allow a remote attacker to launch cross-site scripting (XSS) attack against a …
Read More »Two big energy giant hit by cyber attack, who are in list next?
Petro-Canada gas stations, following a cyberattack on parent company Suncor: Suncor is a Canada-based energy company that owns a network of more than 1,800 Petro-Canada retail and wholesale locations. On June 25, Suncor said it had experienced a cybersecurity incident that may impact some transactions with suppliers and customers. The …
Read More »Fortinet Patches Critical RCE Vulnerability in FortiNAC
Fortinet has released patches to address a critical vulnerability in its FortiNAC network access control solution. The vulnerability, tracked as CVE-2023-33299, is a deserialization of untrusted data issue that could allow an unauthenticated attacker to execute unauthorized code or commands on affected devices. The vulnerability impacts FortiNAC versions up to …
Read More »Google chrome patched 4 high vulnerabilities
Google has released a security update for Chrome that patches four high-severity vulnerabilities. The update is available for Mac, Linux, and Windows, and it will be rolled out over the next few days/weeks. The vulnerabilities were discovered by three outside researchers, and they could have been exploited by attackers to …
Read More »Again! Two big airlines disclosed data breaches
American Airlines and Southwest Airlines, two of the largest airlines in the world, disclosed on Friday that their data had been breached. The breach was caused by a hack of Pilot Credentials, a third-party vendor that manages pilot applications and recruitment portals for multiple airlines. The breach affected 5745 pilots …
Read More »Twitter Hacker Sentenced to 5 Years in Prison for $120,000 Crypto Scam
Joseph James O’Connor, a 24-year-old British citizen, was sentenced to five years in prison in the United States for his role in the July 2020 Twitter hack. O’Connor, who went by the online alias “PlugwalkJoe,” pleaded guilty to criminal schemes that included unauthorized access to Twitter’s backend tools, SIM swapping …
Read More »