Page 14 - Staff Editor News Today : Breaking News, Live Updates & Top Stories | Vimarsana

Sigstore aims to improve the open source software supply chain by simplifying the process of cryptographic software signing.

"A lot of the way it [the role] has changed is in the face of ever-increasing complexity and impact," says Rob Lefferts, corporate vice president for Microsoft 365 Security in Security and Compliance. Microsoft faced this precise challenge a few months ago, following the major supply chain attack that initially targeted SolarWinds and distributed a backdoor Trojan to some 18,000 organizations via infected software updates. Microsoft was one of thousands affected by the tainted updates; using their access, the attackers were able to view some of its source code. The company took steps to remed...

Microsoft Ignite Brings Security & Compliance Updates Microsoft announces support for data loss prevention in Google Chrome, co-authoring of protected files, and more at Ignite 2021. Microsoft today debuted several security and compliance updates as part of its Ignite 2021 conference, including the extension of data loss prevention (DLP) to the Chrome browser and on-premises files, the ability to co-author protected documents, and the extension of Azure Purview. Related Content: During last year's Ignite conference, Microsoft extended its data loss prevention capabilities to Microsoft Cloud A...

Microsoft fixes multiple Exchange Server vulnerabilities being weaponized in attacks from a group it believes operates out of China.

Their goal is to make the pervasive operating system more sustainable as research indicates a need to improve open source software security, specifically in Linux. A report from the Linux Foundation's Open Source Security Foundation (OpenSSF) and the Laboratory for Innovation Science at Harvard University (LISH) found a lack of security efforts in open source software. It's worth noting Linux has more than 20,000 contributors and 1 million commits as of August 2020. But while there are thousands of Linux developers, Google's contribution to underwrite two full-time Linux security maintainers ...