Page 5 - Luta Security News Today

Copy Chinese makers of network software and hardware must alert Beijing within two days of learning of a security vulnerability in their products under rules coming into force in China this year. Details of holes cannot be publicized until the bugs are fixed. Malicious or weaponized exploit code cannot be released. There are restrictions on disclosing details of flaws to foreign organizations. And vendors will be under pressure to address these vulnerabilities as soon as they can and set up bou...

Kaseya Had a History of Security Issues Before Ransomware Attack 8 hours ago Software firm Kaseya had a history of security issues long before the latest one that allowed the biggest ransomware attack in history to occur. Kaseya went from relative obscurity to being one of the most well-known software firms in the world, thanks to being ground zero for the worst ransomware attack in history. Kaseya makes software used for managed services. As such, it made for a prime target, since compromis...

Jul 8, 2021 3:28 PM EDT A slew of disruptive ransomware attacks have rattled the U.S., including the recent massive breach of software company Kaseya, and a reported attempted hack on the Republican National Committee. In the aftermath, both the corporate sector and U.S. government officials are scrambling to address how Congress and individual businesses should handle the growing threat. “We’ve got a moment in time where you can’t ignore it anymore,” sai...

The White House wants a 14 percent across the board funding hike amid a rash of damaging hacks.

Rep. Ted Lieu, D-Calif., arrives on Capitol Hill on February 13, 2021 in Washington, DC. Lieu introduced a bill which would require vulnerability disclosures of fedreal contractors. (Photo by Stefani Reynolds – Pool/Getty Images) Rep. Ted Lieu, D-Calif., will announce Tuesday a bill that would require all federal contractors to have a vulnerability disclosure program.  The Improving Contractor Cybersecurity Act draws inspiration from the Department of Homeland Security’s Binding Operat...

Gone Too Soon: Dan Kaminsky, Hacker Hero Gone Too Soon: Dan Kaminsky, Hacker Hero The cybersecurity researcher community has been in mourning this past week as legendary hacker Dan Kaminsky tragically passed away on April 23. Kaminsky was a well known and widely loved figure, for his character, his skills and his research. He was a fixture in the security conference scene, in particular at the annual Black Hat and DEFCON security conferences where he was legendar...

Beloved security industry leader and researcher passes away unexpectedly at the age of 42.

‘We owe him so much… People who will never know his name owe Dan’ The information security community has lost another leading light, after it was announced that prominent security researcher and DNS specialist Dan Kaminsky has died. The news was confirmed by Kaminsky’s niece yesterday (April 25), who said her uncle had passed away after a short illness due to complications arising from diabetes, a condition he had “struggled [with] for years”. Kaminsky, 42, was known for his many co...

Share Over 90 percent of cabinet-level agencies have now published a vulnerability-disclosure policy (VDP) in compliance with a September mandate from the Cybersecurity and Infrastructure Security Agency (CISA). The CISA binding operational directive (BOD) required federal agencies to implement programs that would give vulnerability reporters clear guidelines for submitting bugs found in government systems, by March 1. On Friday, a CISA spokesperson said that with the March deadline now passe...

Our community does not appreciate being experimented on says Kroah-Hartman Share Copy Updated Computer scientists at the University of Minnesota theorized they could sneak vulnerabilities into open-source software – but when they tried subverting the Linux kernel, it backfired spectacularly. And now their entire school – or at least anyone using a umn.edu email address – has been banned from offering future Linux kernel contributions. Qiushi Wu, a doctoral student in computer scie...