Security vulnerabilities in languages like PHP, Python, and Java may involve updating the language. The problem is that when a language level update is released, it traditionally does not simply address security issues – it introduces other, unrelated, language changes which may break existing code.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
The Uber data breach resulted in the theft of a variety of internal company information, and stemmed from a third-party vendor. The thieves also got away with source code and employee personal information.
Several New Zealand government agencies were impacted by a ransomware attack on Mercury IT, a 25-employee firm that serves dozens of public and private organizations in the country. New Zealand’s Ministry of Justice and Health New Zealand (Te Whatu Ora) have confirmed being impacted by the cyber incident.
The speed at which applications are developed and deployed means businesses must move quickly to meet customer needs. While this is transformative for the development side of the house, security teams have been unable to keep up.
BadUSB attacks have proliferated in the last year for a simple reason — they work as long as curiosity is part of human nature. The impact of BadUSB is tantamount to allowing an unknown hacker to sit at an employee’s unlocked computer and directly attack the network from the inside.
Ransomware attack on the cloud computing company Rackspace caused email outages for thousands of customers forcing it to transfer customers from its Hosted Exchange service to Microsoft 365.
Some users have found that asking ChatGPT to exploit smart contracts actually returns viable vulnerabilities. Experiments are beginning to reveal that AI chatbots may shake up the cybersecurity world.
Security practitioners responding to State of AWS Log Management survey have identified the following top challenges with logging in AWS: redirecting AWS logs, log correlation, too many alerts, and missing segmentation.
Cryptocurrency is increasingly being added to businesses' balance sheets because it helps to reach new customers, and it provides a way to avoid many fees. As with any financial asset, the question of how to secure it is moving to the forefront of the CFO’s mind.
Mapping toxic combinations and implementing separation of duties rules doesn’t have to be a painful process. Strong, regularly maintained SOD controls can help organizations identify and remediate those toxic combinations in an efficient and straightforward manner, limiting the potential damage of fraud and identity-based attacks.










