News

Apple has released its macOS Big Sur 11.4 that expands support for external GPUs, fixes bugs in Safari and more. In addition, this update also makes the system more secure by patching an exploit that let sneaky malware take screenshots without the user being aware.  Jamf, an Apple-focused mobile device management company, reported that the XCSSET malware was using an exploit to take screenshots of Mac computers without asking for any permission. The malware targets...

In conversations with our customers, it’s very clear that organisations need to establish a comprehensive view of their IT asset infrastructure because you can’t secure what you don’t know or can’t see. But that comprehensive view needs to be specific to the security team, which has a different role than IT teams concerned with inventory, software support and license oversight. Security teams that rely on asset inventory from their IT counterparts are challenged by a...

City police opened 50 per cent more Covid loan fraud probes in February, according to a City AM report. It noted that the City of London police had begun more investigations into fraud connected to the government’s Bounce Back Loan scheme (BBLs) in February than the prior month. In fact, police opened 26 fraud probes in relations to BBLs in February, up from 17 in January, and a further 28 in March- according to international...

Tech Crunch has reported that a recently found Air India passenger data breach indicates that the SITA hack is worse than first anticipated. Three months after air transport data giant SITA reported its own data breach, the damage is still mounting. Air India said this week that personal data of about 4.5 million passengers had been compromised following the security incident at SITA, the data processor for the airline. The stolen information included passengers’ name,...

A pair of TPG TrustedCloud customers were breached, ZDNet reported. The telco said two customers on the legacy TrustedCloud hosting service were breached in a recent security incident that it announced on Monday morning. The company added that it did not believe any other customers were impacted by the breach. "The incident was isolated to the TrustedCloud service. The TrustedCloud service is hosted in a standalone environment that is separate from our telecommunications networks and...

Eufy warned its customers this week after discovering an internal server bug that gave strangers the power to access and control private home-video feeds for an entire day. Customers were also given access to do the same to other users. The vulnerability was the result of a planned server upgrade, which accidentally connected Eufy customers with the home-video streams of other customers. Fortunately, the China-based parent company, Anker, managed to patch the vulnerability quickly.

Domain Group, an Australian digital real estate business has recently confirmed being targeted in a phishing attack. Jason Pellegrino, CEO of Domain Group, released a statement, in which he stated that " have identified a scam that used a phishing attack to gain access to Domain's administrative systems to engage with people who have made rental property enquiries." He added: "We understand the scammers then contacted some of these people by email to suggest that...

Synopsys, Inc. has announced the expansion of the Technology Alliance Partner (TAP) segment of the Software Integrity Group’s new Global Partner Program at RSA Conference. Synopsys is showcasing integrations between the company’s Intelligent Orchestration solution and technology partner tools, including CloudBees and GitHub Actions. With more than 40 DevOps ecosystem vendors currently engaged, the TAP program simplifies and accelerates partner integration with Intelligent Orchestration and other Synopsys application security solutions. Recognised as a leader by...

The National Audit Office (NAO) has said that the Covid-19 pandemic has "laid bare" issues caused by legacy IT within the government. The report analysing the government and the pandemic exposed some significant issues with regards to legacy data and IT systems. A large part of the government's Covid-19 response has been the use and sharing of data, however NAO found that this was not always "timely". The report claims that local authorities did not...

Researchers from NETSCOUT's ATLAS Security Engineering & Response Team (ASERT) have reported that the first quarter of 2021 saw the launch of approximately 2.9 Distributed Denial of Service (DDoS) attacks. This is a 31% increase to the amount launched at the same time last year. The researchers claimed that "the first two months of the year are usually the slowest months in the DDoS attack calendar. This year, we saw 972,000 attacks in January, which...