Duncan Riley
Latest from Duncan Riley
A new report from software supply chain management startup Lineaje finds an inherent risk of software supply chains being compromised when using the most popular open-source products and dependencies. “What’s in Your Open-Source Software?” was based on Lineage Data Labs researchers analyzing 41,989 open-source components …
Google Chrome update addresses vulnerability being exploited in the wild
Google LLC has released a security update to its popular Chrome browser that addresses a vulnerability that’s being actively exploited in the wild. The Chrome update addresses the vulnerability designated CVE-2023-2033, which Google describes as a “Type Confusion in V8” vulnerability discovered …
New initiatives seek to promote favorable environment for good-faith security research
The Center for Cybersecurity Policy and Law today announced two new initiatives aimed at creating a more favorable legal, policy and business environment for good-faith security research and vulnerability disclosure. The first initiative, the Hacking Policy Council, is a new group that …
European Data Protection Board launches task force to investigate ChatGPT
The European Data Protection Board today announced that it has set up a task force to investigate ChatGPT, a day after Italy rescinded a ban on the generative artificial intelligence service following privacy concerns. The EDPB is an independent body within the European …
FBI arrests Air Force National Guard member accused of leaking classified documents
The U.S. Federal Bureau of Investigation today arrested a 21-year-old Air Force National Guard member over the leak of classified documents. Jack Teixeira, an Airman First Class with the 102nd Intelligence Wing of the Massachusetts Air National Guard, was arrested on allegations that …
Google white paper proposes initiatives to improve the vulnerability management ecosystem
Google LLC is proposing initiatives to improve a vulnerability management ecosystem that’s plagued with an endless “merry-go-round” of problems. A Google whitepaper, released today, argues that while the security industry has improved in many ways, such as in technological advances and collaboration, many …
Fiberplane open-source libraries assist developers using metrics in the observability stack
Collaborative notebook startup Fiberplane BV today announced a new set of open-source libraries that enables developers to take advantage of metrics in the observability stack. Called Autometrics, the libraries are designed to address the issue wherein existing observability tools require complex configurations written in YAML, which …
New Python credential harvester and hacking tool being sold on Telegram
Researchers at cloud forensics and incident response platform startup Cado Security Ltd. today announced details of a recently discovered Python-based credential harvester and hacking tool. Dubbed “Legion,” the credential harvester is being sold via Telegram and is designed to exploit various services for email …
Tetrate launches new service for using Istio and Envoy Proxy on Amazon EKS
Enterprise service mesh startup Tetrate Inc. today announced Tetrate Service Express, a new platform targeted at enterprises using service mesh on Amazon EKS that want to use the open-source tools Istio and Envoy Proxy with it. Tetrate says its new offering has been designed …
IBM reportedly exploring sale of its weather business
International Business Machines Corp. is reportedly exploring the sale of its weather business as part of a move to streamline its operations. The Wall Street Journal, referencing people with the matter, today reported that discussions are only in their early stages and …