Okta is pitching new features to address what it sees as critical security holes in the way SaaS and cloud vendors interact. The new Workforce Identity Cloud (WIC) features will target areas such as multi-factor authentication, deepfake incidents, phishing, and credential theft. Speaking at the Oktane conference in Las Vegas, WIC Chief Product Officer Arnaub … Read more
China has called on Pakistan to protect Chinese workers after a resurgence in militant violence that has targeted some of Beijing’s $60bn of investments in the country. Two Chinese engineers were killed this month in a bomb attack by ethnic separatists on a convoy leaving Karachi’s international airport. Those in the convoy were employees of … Read more
Perfectl Malware Perfectl in an impressive piece of malware: The malware has been circulating since at least 2021. It gets installed by exploiting more than 20,000 common misconfigurations, a capability that may make millions of machines connected to the Internet potential targets, researchers from Aqua Security said. It can also exploit CVE-2023-33246, a vulnerability with … Read more
The growing connectivity of automotive systems exposes connected vehicles to cybersecurity risks that must be mitigated to ensure the development of safe and secure vehicles. One component of effective, comprehensive security testing is fuzzing, a test automation method that injects invalid, malformed, or unexpected inputs into a device to reveal defects and vulnerabilities. Keysight Technologies … Read more
Transport for London (TfL) suffers a cybersecurity incident and tells its 30,000 staff they will all have to their identities verified… in-person. Who might have been behind the attack and why? Meanwhile, Donald Trump’s curious relationship with cryptocurrency is explored. All this and Demi Moore is discussed in the latest edition of the “Smashing Security” … Read more
