Why the biggest laptop vendors are ignoring Microsoft's Pluton security
Both Dell and Lenovo appear to be passing on Microsoft's Pluton technology for securing their PCs. But the reason why might not be all that complicated.
Stay updated with breaking news from El Reg. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
Both Dell and Lenovo appear to be passing on Microsoft's Pluton technology for securing their PCs. But the reason why might not be all that complicated.
Copy Western cybersecurity agencies have published a list of 30 of the most exploited vulnerabilities abused by hostile foreign states in 2020, urging infosec bods to ensure their networks and deployments are fully patched against them. Number one on the US, UK, and Australia's jointly published [PDF] list was the well-known Citrix arbitrary code execution vuln in Application Delivery Controller, aka Netscaler load-balancer. Tracked as CVE-2019-19781, the vuln has been the subject of repeated patch-it-now warnings ever since. "In 2021, malicious cyber actors continued to target vulnerabilitie...
Copy If you're a gentleman looking to counteract the effects of ageing, a new study on sheep may have the answer – but you're going to have to say goodbye to your family jewels in return for a slowdown of your DNA's ageing process. "Both farmers and scientists have known for some time that castrated male sheep live on average much longer than their intact counterparts," explained first author Victoria Sugrue, an anatomy PhD student at the University of Otago. "However, this is the first time anyone has looked at DNA to see if it also ages slower." Key to the study – more key than knife-wi...
While the move addresses user privacy regulations and is a means of taking on rivals who use improved privacy as a selling point, critics also fear Alphabet's moves will benefit itself the most, meaning advertising spending will become even more concentrated on Google, thus harming consumers. Some of the sandbox proposals are particularly divisive, including first-party sets – which allow multiple domains to declare themselves to be one domain for so they can exchange data amongst themselves and still say it's been kept "private"- one such set, for example, could be youtube.com, google.com,...
Last week, Charles Carmakal, senior VP at cybersecurity firm Mandiant, which responded to the incident, revealed in an interview, that crooks accessed Colonial Pipeline's network using an old VPN and password thought to have fallen into the wrong hands via the dark web, although investigations are still ongoing. Speaking yesterday, Blount added that the password used to gain access to the VPN was "complex" – it wasn't just "colonial123", he told the hearing. Giving an account of the events surrounding the 7 May cyberattack, Blount said he had no choice but to pay up once the scale of the br...