News

The Mozilla Foundation yesterday issued a security update for its Thunderbird open-source email client, fixing two critical vulnerabilities involving its IonMonkey JavaScript JIT (just-in-time) compiler. The first of the two flaws, CVE-2019-9810, consists of incorrect alias information when using the Array.prototype.slice method, which could result in a missing bound check and buffer overflow. The second issue, CVE-2019-9813, is described as the mishandling of __proto__ mutations of, which can lead to type confusion in IonMonkey JIT code, allowing...

A new ransomware called Unnam3d R@nsomware is being distributed via email that will move a victim's files into password protected RAR archives.  The ransomware then demands a $50 Amazon gift card code in order to get the archive password. Source: BleepingComputer

nCipher Security, the provider of trust, integrity and control for business critical information and applications, announces that as organizations embrace the cloud and new digital initiatives such as the internet of things (IoT), blockchain and digital payments the use of trusted cryptography to protect their applications and sensitive information is at an all-time high, according to the 2019 Global Encryption Trends Study from the Ponemon Institute. With corporate data breaches making the headlines on an...

Google has set up an advisory council to advise it on ethical issues surrounding artificial intelligence (AI), automation and other emerging technologies. The so-called Advanced Technology External Advisory Council (ATEAC) consists of eight members and includes technology experts and 'digital ethicists'. Source: Computing

Federal Reserve Bank (FRB) systems are exposed to an increased risk of unauthorized access because of security weaknesses found in the U.S. Treasury Department's computing systems according to a management report issued by the U.S. Government Accountability Office (GAO). Source: Bleeping Computer

ASUS released today a new version of the Live Update tool that contains fixes for vulnerabilities that were exploited by a nation-state group to deploy the ShadowHammer backdoor on up to one million Windows PCs. Source: ZDNet

The European Parliament has backed controversial copyright laws critics say could change the nature of the net. The new rules include holding technology companies responsible for material posted without proper copyright permission. Many musicians and creators say the new rules will compensate artists fairly - but others say they will destroy user-generated content. Source: BBC

Facebook has removed over 2,600 fake pages, groups, and accounts from the social network and Instagram which have been involved in "inauthentic" behaviour designed to stir up political tension worldwide. Source: ZD Net

Lack of confidence and skills holding businesses back when it comes to cloud security New analysis from Intercity Technology has revealed that only 18% of organisations have a fully comprehensive cloud security solution in place. The enterprise mobility, cloud and IT specialist canvassed the views of IT professionals across a range of sectors, and uncovered that many businesses are still struggling to put in place and maintain cloud security solutions. 45% stated that implementing the...

GlobalPlatform, the standard for secure digital services and devices, has signed a memorandum of understanding (MoU) with the Trusted Platform Association, an organization which brings together Russian cybersecurity companies to create a collaborative internet of things (IoT) ecosystem that meets diverse market needs with flexible security. The joint work initiative will focus on aligning GlobalPlatform’s specifications, which standardize the secure management of digital services and devices, with existing Russian requirements and regulations. This harmonization of...