Kroger Says It’s Lawful to Harass Workers Into Suicide
If you read the tragic suicide news about American service in the military, you may sense a tone of responsibility. “One suicide is too many and MARMC leadership is taking…
Phylum Automated Vulnerability Reachability strengthens software supply chain security
Phylum has added Automated Vulnerability Reachability to its software supply chain security platform capabilities. With the ability to focus only on fixing what matters, security pros can end the deluge…
Short Takes – 12-2-22
Cops Can Extract Data From 10,000 Different Car Models’ Infotainment Systems. Forbes.com article. Pull quote: “The ATF investigator did, however, detail how cars’ internal computers were “designed to store a…
Senate Passes HJ Res 100 – Railroad Agreement
Yesterday the Senate, after rejecting two associated measures, passed HJ Res 100, To provide for a resolution with respect to the unresolved disputes between certain railroads represented by the National…
Bills Introduced – 12-1-22
Yesterday, with both the House and Senate in lame duck session, there were 64 bills introduced. One of those bills will receive additional coverage in this blog: HR 9386 –…
Uber’s Internal Network Breach and Business-Critical SaaS Data Compromise
Originally published by DoControl on September 16, 2022. Written by Corey O’Connor, DoControl. Multiple sources have reported that Uber has become the next victim to a man-in-the-middle attack with social…
IBM Cost of a Data Breach 2022 – Highlights for Cloud Security Professionals
Originally published by Ermetic. Security professionals are constantly inundated with warnings about the potentially colossal impact of security threats and risks to their organization. But what is colossal in real…
A new Linux flaw can be chained with other two bugs to gain full root privileges
Qualys researchers demonstrated how to chain a new Linux flaw with two other two issues to gain full root privileges on an impacted system. Researchers at the Qualys’ Threat Research…
Veza Open Authorization API boosts security across enterprise data systems
Veza has unveiled that its Open Authorization API (OAA) is now public on GitHub for community collaboration, extending the reach of identity-first security across the enterprise. Developers can now create…
Transatlantic Cable podcast 278 | Kaspersky official blog
Episode 278 of the Transatlantic Cable kicks off with news that the previous Twitter hack, back in 2021, is actually much larger than initially suspected. Not great news for the…