Microsoft closes off two avenues of attack: Office macros, RDP brute-forcing
Blockade against VBA scripts in downloaded files is back on by default
CSO22 Jul 2022 | 10
CSO
What does software supply chain pain really feel like? Find out right here
SPONSORED POST This Immersive Labs webinar will make it feel mighty real
SPONSORED POST
TikTok's chief security officer steps aside, thanks to Oracle move
Takes up advisory role that might leave time to play with parent company's homebrew cloudy SmartNICs
CSO18 Jul 2022 |
This big phish can swim around MFA, says Microsoft Security
Slippery AiTM attacks targeted more than 10,000 orgs over the past nine months
CSO13 Jul 2022 | 2
Mergers and acquisitions put zero trust to the ultimate test
Bypasses an arduous integration process with right security footing from the start
CSO13 Jul 2022 | 1
Defense contractor pays $9m to settle whistleblower's cybersecurity allegations
Former Aerojet Rocketdyne employee cites failure to meet minimums for NASA, Pentagon
CSO11 Jul 2022 | 10
Jenkins warns of security holes in these 25 plugins
Relax, most of the vulnerabilities so far have, er, no fix
CSO30 Jun 2022 | 4
Start using Modern Auth now for Exchange Online
Before Microsoft shutters basic logins in a few months
CSO29 Jun 2022 | 28
India extends deadline for compliance with infosec logging rules by 90 days
Updated Helpfully announced extension on deadline day
CSO28 Jun 2022 | 9
Contractor loses entire Japanese city's personal data in USB fail
In brief Also, Chrome add-ons are great for fingerprinting, and hacked hot tubs splurge details
CSO27 Jun 2022 | 14
$6b mega contract electronics vendor Sanmina jumps into zero trust
Company was an early adopter of Google Cloud, which led to a search for a new security architecture
CSO23 Jun 2022 | 1
Voicemail phishing emails steal Microsoft credentials
As always, check that O365 login page is actually O365
CSO21 Jun 2022 | 20
RSAC branded a 'super spreader event' as attendees share COVID-19 test results
RSA Conference That, and Black Hat, are about to reveal risk assessment skills of our cyber-risk experts
CSO16 Jun 2022 | 26
Former US state agency CIO, IT exec plead guilty to bribery and extortion scheme
Pair's multimillion-dollar contract caper unraveled
CSO15 Jun 2022 | 5
Cloudflare says it thwarted record-breaking HTTPS DDoS flood
26m requests a second? Not legit traffic, not even Bill Gates doing $1m giveaways could manage that
CSO14 Jun 2022 | 2
Inside the RSAC expo: Buzzword bingo and the bear in the room
RSA Conference We mingle with the vendors so you don't have to
CSO14 Jun 2022 | 2
US cyber chiefs: Moving to Shields Down isn't gonna happen
RSA Conference Promises new alert notices but warn 'we can sometimes predict thunderstorms but not lightning strikes'
CSO08 Jun 2022 | 6
Cisco EVP: We need to lift everyone above the cybersecurity poverty line
RSA Conference Exclusive It's going to become a human-rights issue, Jeetu Patel tells The Register
CSO06 Jun 2022 | 9
Feeling highly stressed about your job? You must be a CISO
'The attack surface has expanded exponentially' during the work-from-home pandemic, says one
CSO04 Jun 2022 | 23
FBI, CISA: Don't get caught in Karakurt's extortion web
Is this gang some sort of Conti side hustle? The answer may be yes
CSO03 Jun 2022 | 7
Popular
Engineers on the brink of extinction threaten entire tech ecosystems
Opinion Resting on its laurels is costing the industry its hardies
Google, Oracle cloud servers wilt in UK heatwave, take down websites
Clouds burst as nation hits 40C
Atlassian reveals critical flaws in almost everything it makes and touches
Fixes issued, warns it 'has not exhaustively enumerated all potential consequences'
SpaceX crewed flight to ISS delayed by damaged rocket
Just as NASA urged to reuse Musk hardware no more than five times
British intelligence recycles old argument for thwarting strong encryption: Think of the children!
Comment Levy and Robinson are at it again
Google pulls malware-infected apps in its Store, over 3 million users at risk
Some people call me the code cowboy, some call me the gangster of root, 'cause I'm a Joker
Outlook email users alerted to suspicious activity from Microsoft-owned IP address
Updated Netizens turn amateur sleuths to discover Windows giant is the source of weird login attempts
You're not wrong. The scope for quantum computers remains small
Systems Approach Perhaps a QC can help us work out why we'd want a QC
Microsoft Teams outage widens to take out M365 services, admin center
Updated Remember: telephones exist, are handy for collaboration, and usually work
Improve Linux performance with this one weird trick
Unless anyone else ever accesses your PC in any way
STORIES
Cloud security unicorn cuts 20% of staff after raising $1.3b
Time to play blame bingo: Markets? Profits? Too much growth? Russia? Space aliens?
CSO27 May 2022 | 17
How to find NPM dependencies vulnerable to account hijacking
Security engineer outlines self-help strategy for keeping software supply chain safe
CSO23 May 2022 | 21
Patch your VMware gear now – or yank it out, Uncle Sam tells federal agencies
Critical authentication bypass revealed, older flaws under active attack
CSO19 May 2022 | 6
FBI warns of North Korean cyberspies posing as foreign IT workers
Looking for tech talent? Kim Jong-un's friendly freelancers, at your service
CSO17 May 2022 | 10
Europe moves closer to stricter cybersecurity standards, reporting regs
More types of biz fall under expanded rules – and fines for those who fall short
CSO17 May 2022 | 9
Software patching must work like car safety recalls, says US cyber boss
Black Hat Asia Adds infosec regulation coming to more industries but with a light touch, more collaboration
CSO13 May 2022 | 30
Five Eyes turn spotlight on MSPs: Potential weak links in IT supply-chain security
We can think of one thing the S stands for in some unfortunate cases
CSO11 May 2022 | 8
Email domain for NPM lib with 6m downloads a week grabbed by expert to make a point
Special report Campaign to coax GitHub-owned outfit to improve security starts showing results
CSO10 May 2022 | 47
US, Europe formally blame Russia for data wiper attacks against Ukraine, Viasat
Thank goodness someone cleared that one up
CSO10 May 2022 | 9
Industry pushes back against India's data security breach reporting requirements
Filling in a form at 4am improves infosec or privacy how, exactly?
CSO10 May 2022 | 13
False-flag cyberattacks a red line for nation-states, says Mandiant boss
NSA director says he doesn't know of a 'big one' that was successful
CSO07 May 2022 | 27
Walking away from ransomware unscathed. Can you? Really?
Hear how from Wendi Whitmore and more at Rubrik’s FORWARD conference
Sponsored Post
Microsoft, Apple, Google accelerate push to eliminate passwords
Analysis Passphrases PIP'd, FIDO and W3C projects promoted
CSO05 May 2022 | 76
Should security teams be giving service with a smile?
Our Vectra Masked CISO series tackles some of the biggest issues in security and how to overcome them
Advertorial
Homeland Security bug bounty program uncovers 122 holes in its systems
Thinking of another word for this US govt department's name
CSO25 Apr 2022 | 4
CISOs face 'perfect storm' of ransomware and state-supported cybercrime
As some nations turn a blind eye, defense becomes life-or-death matter
CSO18 Mar 2022 | 4
