Biztonsági szemle

The bug (CVE-2024-6385) is similar — but not identical — to a critical flaw GitLab patched just two weeks ago.

U.S. government organizations are falling short on their cybersecurity practices.

In the scrum, countless call and text records leaked, other cell companies caught strays, the DoJ became involved, and someone has already been arrested.

Both are accused of espionage and face a maximum penalty of 15 years imprisonment each for their crimes.

The Cloud Safe Task Force aims to unite the US government and cloud service providers, like Amazon, Google, IBM, Microsoft, and Oracle, to provide a "National Cyber Feed": a continuous threat-monitoring tool for federal agencies.

Records of over 100 million AT&T customers' calls and texts affected — “nearly all.”

Agencies say flaws are preventable and can be addressed with secure-by-design principles.

Even though the new incident reporting rules create pressure, they serve as a forcing function for building a strong security foundation.

Cyber spending requests should consider the recently issued critical infrastructure national security memorandum, according to a memo issued by Office of Management and Budget Director Shalanda Young and National Cyber Director Harry Coker Jr.