Weekend Reads 042321


The average software application depends on more than 500 open source libraries and components, up 77% from 298 dependencies in two years, highlighting the difficulty of tracking the vulnerabilities in every software component, according to a new report from software management firm Synopsys.


Ambient computing is a broad term that describes an environment of smart devices, data, A.I. decisions, and human activity that enables computer actions alongside everyday life, without the need for direct human commands or intervention.


The emergence of new protocols such as DNS-over HTTPS (DoH) has resulted in some browsers changing security critical behaviour without explaining the implications to users.


In early March 2021, a hacker group publicly exposed the username and password of an administrative account of a security camera vendor. The credentials enabled them to access 150,000 commercial security systems and, potentially, set up subsequent attacks on other critical equipment.


Security automation for posture assessment has been difficult to achieve even though many standards-based and proprietary solutions have been developed. The primary problem is the complexity of solutions requiring customisation by each enterprise.


In this study, we investigate DoT using 3.2k RIPE Atlas home probes deployed across more than 125 countries in July 2019.


The SolarWinds attack, which succeeded by utilizing the sunburst malware, shocked the cyber-security industry. This attack achieved persistence and was able to evade internal systems long enough to gain access to the source code of the victim.


A team of Internet of Things security researchers has discovered vulnerabilities in the way IoT device vendors manage access across multiple clouds and users, putting both individuals and vendors at risk.


IT Home reports that Netac has the modules in its research and development department, and is currently overclocking them to hit an impossibly fast speed: 10,000MHz.


Cyber attackers are very skilled at infiltration. They’d find ways into a house through cracks and holes that the homeowner doesn’t know about. Analogically speaking, that’s what the new cyber attack group dubbed “Hafnium” did when they identified several zero-day Microsoft Exchange vulnerabilities to get into target networks.


Terraform is a tool that helps you manage various cloud infrastructure services in the form of code. You codify your infrastructure, and so it’s also known as Infrastructure as Code (IaC).


People talk about the cybersecurity job market like it’s a monolith, but there are a number of different roles within cybersecurity, depending not only on your skill level and experience but on what you like to do.


Weather bureau responsible for one-tenth of the planet wants a fixed-line connection between Australia and Antarctica, but it has warned icebergs could be an issue.


It’s reported that if the new Chia cryptocurrency takes off, the PC industry and gamers may have to grapple with a shortage of storage, as inventory of hard disk drives and solid-state drives could quickly become depleted.


If you live in the cybersecurity news cycle, you could be forgiven for thinking that ransomware is the only threat. There is always a report of another victim, a new approach, or a new crew.