Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
More than 4 million people had their sensitive medical and health information stolen after hackers exploited a zero-day vulnerability in the widely used MOVEit file transfer software.
Canadian dental benefits administrator Alberta Dental Service Corporation (ADSC) has started informing roughly 1.47 million individuals about a ransomware attack discovered on July 9 in which their personal information was compromised. The ADSC stated that less than 7,300 records contained personal banking information.
A guide from HashiCorp on monitoring Vault at scale. It covers threats facing Vault, the various logs and data sources available, core metrics, and tips on monitoring and reporting.
This educational post covers dynamic syscall ID extraction using Hell's Gate and C++ to build basic malware as a springboard for more advanced evasion. While open source tools provide some bypass potential, truly effective and subtle red team engagements require custom malware resilient to signature/behavioral detection. Mastering fundamentals like Hell's Gate lays the groundwork for advanced techniques.
Team82 deep dive into how it created a technique to impersonate NAS devices to redirect users to an attacker-controlled device, allowing attackers to access a user’s remote device, steal personal information, and access stored data.
AWS Backup is a feature for backing up and isolating data in the event of a ransomware attack. It allows for a further level of data isolation. This announcement post includes details of how the capability works and how to use it.
noir is an attack surface detector that uses source code analysis to identify frameworks and programming languages used and endpoints. The data can then be made available to tools like Burp Suite or ZAP.
The CVE Binary Tool helps you determine if your system includes known vulnerabilities. It can scan binaries for over 200 common vulnerable components, including openssl, libpng, libxml2, and expat. It can provide lists of known vulnerabilities associated with a Software Bill of Materials or a list of components and versions.
SpiceDB is an open source, Google Zanzibar-inspired, database system for creating and managing security-critical application permissions.
Illinois has just unanimously passed the Civil Liability for Doxing Act. This law will allow for victims of doxxing recover damages and request a temporary restraining order from their attackers.
Cybercriminals are using maliciously crafted cryptocurrency investment apps as beta versions to steal cryptocurrency from mobile app stores. The malicious apps are submitted as betas, which are not subjected to a thorough code review process and are only superficially examined for safety. The FBI warns that the apps can be used to steal personally identifiable information, financial account access, and take over devices.
The current economic downturn has affected CISOs. 54% of cybersecurity budgets have been frozen or reduced. Startups have opportunities through cost/customization advantages, though vendors overall need to offer flexibility like free trials. Even in times of financial restraint, cyber remains a priority, and smart vendors can creatively align to needs.
AWS Network Load Balancers (NLBs) allow for load balancing arbitrary traffic in AWS. With this new update, security groups can be applied to NLBs. This allows for more advanced NLB filtering.
Synack Red Team has discovered that French company Iagona's ScrutisWeb ATM monitoring software has several vulnerabilities that could be exploited by hackers to remotely hack ATMs, including check deposit machines and payment terminals. The flaws were patched by the vendor in July 2023 with the release of ScrutisWeb version 2.1.38. The vulnerabilities include path traversal, authorization bypass, hard coded cryptographic key, and arbitrary file upload issues that can be exploited by remote, unauthenticated attackers.
Home buyers, sellers, real estate agents, and listing websites throughout the US have been stymied for five days by a cyberattack on a California company that provides a crucial online service used to track home listings. A reminder of the real-world disruptions that cyberattacks can impose on large numbers of people or businesses that depend on a service that gets hacked.
Sponsored
In B2B, more integrations = more potential customers. But if you build connectors all day, you’ll fall behind on features. That’s why the best startups don’t build integrations — they use Merge
The FinTech market in Latin America is growing rapidly, driven by increasing demand for online banking solutions, favorable demographics, and an underserved population. Revolut launched their operations in Brazil in May and they’re looking to Latam for their next stage of growth.
Looking for your next startup? Ideas for new technologies almost always appear in sci-fi before they show up in real life.
Elon Musk-backed biotechnology company Neuralink announced a $280 million Series D funding round led by Peter Thiel’s Founders Fund.
Delegating authority and fostering open communication allows organizations to tap into the collective wisdom of their workforce and overcome indecision.
Pierre Berlin, VP Sales at Figma, shares his insights on building and scaling GTM teams. It includes strategies for sequencing expansion, sourcing talent, hiring, and retaining top performers.
Commitment, coverage, and stamina: the three required variables of effective brand building. You’ve gotta give your creative ideas time in the market to connect with an audience and understand the impact.
Generative AI is significantly ramping up the volume of content being produced and put out to the world. This article explores how we attempt to keep humanity at the forefront by integrating in-person events and leaning into the individual over the institution.
It’s the relationship between low supply and high demand that creates valuable scarcity, and you simply can’t have that with a lot of digital goods where the supply is infinite. In-person events provide an opportunity to cultivate scarcity and deliver outsized money making.
Quick read on why AI is on track to disrupt. A little cheeky too.
We can begin to understand why someone acts in a surprising way by wondering what they might be afraid of.
A look at what makes working at a startup so much more fun than working at a large company.
Google states that it does not consider scores about a website from external SEO tools when defining its rank on the results page. However, that does not mean they are all useless as they can be helpful to improve performance and user experience.
Sponsored
What happens when there’s trouble in production? Right now, you dig through logs. Then you correlate. Then you add missing logs. Then you redeploy. Then you find out you need to do it all again 😖 If that sounds a bit meh, here’s another idea. Join tens of thousands of other developers and use Lumigo
Most people have experienced finding something great beyond the popular defaults. People are shutting themselves off from great things without even realizing it because they aren't trying to find better things beyond familiar boundaries. This applies to tools and workflows, just as much as it does to any other area of life. This article looks at how React is the new default framework and how many people who use it on a regular basis don't realize how much it has fallen behind other tools.
A company built a Twitter-scale Mastodon instance from scratch in only 10k lines of code. They used a platform called Rama to build it quickly and efficiently. Rama unifies computation and storage into a coherent model capable of building end-to-end backends at any scale in 100x less code than otherwise.
A microservices architecture for application development in the cloud is an architectural approach that builds a software application as a collection of small (micro), loosely coupled services. Microservices came in with a great deal of momentum a few years ago, but now we’re seeing their drawbacks for applications on cloud platforms.
This article jumps into actionable advice for salary negotiation, manager 1-1s, promotion, and more. It goes into how to show your value as an engineer and how to prepare yourself for promotion at all times.
Explore the five pillars that create extraordinary team cultures in organizations. These are the keys to boosting productivity, cultivating fulfillment, and fostering well-being among your team.
Lottielab is a web-based animation tool. It aims to reduce the friction of creating and editing product animations by providing an easy-to-use editor with out-of-the-box support for import and export of the Lottie format and many others.
Nim is a programming language that is good for everything, but not for everybody. It focuses on the imperative programming paradigm and enhances it with a macro system. Version 2.0 is an evolution (not revolution) of Nim, bringing ORC memory management as a default, along with many other new features and improvements.
One way to look at progress in tech is that we’re just working our way through ideas that sci-fi writers came up with a long time ago. So a bank of those ideas might be a roadmap to the future and a compass for those who want to build the sci-fi futures we were promised. This author has put together a list of 3,746 sci-fi ideas that are from various pieces of fiction and media.
Recently, a project rewrote the LLaMa inference code in raw C++. With some optimizations and quantizing the weights, this allows running an LLM locally on a wild variety of hardware, like a Pixel 5 and Macbook Pro. This is possible because of the memory bandwidth requirements of the model.
This interview with a software engineer based in New York with more than 15 years of experience looks at how they navigated the job market after being impacted by the industry-wide job cuts earlier this year.
Selecting the appropriate programming language is a critical decision that can significantly impact the success of your software project. With an abundance of options available, it's easy to feel overwhelmed. This comprehensive guide explored practical insights, real-world examples, and actionable tips to help you navigate this crucial choice and ensure your project's success.