Showing only posts by Simon Sharwood. Show all posts.

Trump kills clearances for infosec's SentinelOne, ex-CISA boss Chris Krebs

Source

Alleges cybersecurity agency was ‘weaponized’ to suppress debunked theories Updated The Trump administration on Wednesday ordered a criminal investigation into alleged censorship conducted by the USA’s Cybersecurity and Infrastructure Security Agency, aka CISA, plus revocation of any security clearances held by the agency's ex-head Chris Krebs and anyone …

Signalgate solved? Report claims journalist’s phone number accidentally saved under name of Trump official

Source

PLUS: Google re-patches Quick Share flaws; Critical Cisco flaw exploited; WordPress plugin trouble; and more Infosec in Brief How did journalist Jeffrey Goldberg’s phone number end up in a Signal group chat? According to The Guardian, US national security adviser Mike Waltz accidentally saved it into the contact …

Public-facing Kubernetes clusters at risk of takeover thanks to Ingress-Nginx flaw

Source

How many K8s systems are sat on the internet front porch like that... Oh, thousands, apparently Cloudy infosec outfit Wiz has discovered serious vulnerabilities in the admission controller component of Ingress-Nginx Controller that could allow the total takeover of Kubernetes clusters – and thinks more than 6,000 deployments of …

Judge says US Treasury ‘more vulnerable to hacking’ since Trump let the DOGE out

Source

Order requires destruction of departmental data accessed by Musky men Trump administration policies that allowed Elon Musk's Department of Government Efficiency to access systems and data at the Bureau of the Fiscal Service (BFS) have left the org “more vulnerable to hacking” according to federal Judge Paul A. Engelmayer …

Privacy Commissioner warns the ‘John Smiths’ of the world can acquire ‘digital doppelgangers’

Source

Australian government staff mixed medical info for folk who share names and birthdays Australia’s privacy commissioner has found that government agencies down under didn’t make enough of an effort to protect data describing “digital doppelgangers” – people who share a name and date of birth and whose government …

« newer articles | page 3 | older articles »