Recent Security News
-
Orca Flags Dangerous Google Kubernetes Engine Misconfiguration
January 24, 2024 at 11:18AM A misconfiguration in Google Kubernetes Engine (GKE) has allowed a security loophole, enabling attackers to access sensitive information and take over clusters. Cloud security startup Orca Security reported that the issue is due to privileges granted to the system:authenticated group. Approximately 250,000 GKE clusters were found exposed, with over 1,300…
-
Israeli Startup Gets $5M Seed Capital to Tackle AI Security
January 24, 2024 at 11:18AM Israeli company Prompt Security has secured $5 million in seed funding led by Hetz Ventures and backed by Four Rivers and notable CISOs. It aims to prevent sensitive data exposure in generative-AI apps, offering a product to secure AI deployments and prevent exposure of sensitive data, along with governance over…
-
Google Pixel phones unusable after January 2024 system update
January 24, 2024 at 10:19AM Google Pixel smartphone owners are experiencing issues with their devices after installing the January 2024 Google Play system update. These problems include being unable to access internal storage, use the camera, take screenshots, or open apps across various Pixel models. The root cause is unknown, and affected users have not…
-
How to secure AD passwords without sacrificing end-user experience
January 24, 2024 at 10:19AM Hackers attempted 1,287 password attacks per second in 2022, highlighting the importance of strong password security. Many users still use easy-to-guess passwords, creating security vulnerabilities. Organizations can promote longer, unique passwords and correlate password expiration with password length to enhance security. Tools like Specops Password Policy can help enforce these…
-
Filling the Cybersecurity Talent Gap
January 24, 2024 at 10:13AM The nation is experiencing unprecedented challenges, particularly in cybersecurity. Nation-state-backed hackers pose more sophisticated and indiscriminate threats than ever before, requiring collaboration between public and private sectors. The shortage of cybersecurity professionals further exacerbates the issue, making veterans with their adaptable, problem-solving, and technical skills, coupled with security clearances, valuable…