Infosec.Pub

The owners of Novo Nordisk A/S and the Danish government are new anchor investors in what they say will become the world’s largest quantum venture fund, in a bid to boost Europe’s position in technological development.

Executives and technology departments at large organizations are being extorted by a notorious ransomware group that claims to have stolen their data from a suite of popular Oracle Corp. applications.

Mass fraudulent text campaigns hit mobile users worldwide.

From Ergo Platform via this RSS feed

Baseboard management controller vulnerabilities make remote attacks possible.

The chipmakers say physical attacks aren't in the threat model. Many users didn't get the memo.

A key US law covering cyber security intelligence sharing has expired without an extension or replacement amid a total shutdown of the federal government, putting global security collaboration at risk.

Collaboration between departments and a better understanding of organizational metrics are key to addressing security blindspots

Canadian airline WestJet is informing customers that the cyberattack disclosed in June compromised the personal information of 1.2 million customers, including passports and ID documents. [...]

The Financial Times reports that the U.K. is once again demanding that Apple create a backdoor into its encrypted backup services. The only change since the last time they demanded this is that the order is allegedly limited to only apply to British users. That doesn’t make it any better. The demand uses a power called a “Technical Capability Notice” (TCN) in the U.K.’s Investigatory Powers Act. At the time of its signing we noted this law would likely be used to demand Apple spy on its users. After the U.K. government first issued the TCN in January, Apple was forced to either create a backdoor or block its Advanced Data Protection feature—which turns on end-to-end encryption for iCloud—for all U.K. users. The company decided to remove the feature in the U.K. instead of creating the backdoor. The initial order from January targeted the data of all Apple users. In August, the US claimed the U.K. withdrew the demand, but Apple did not re-enable Advanced Data Protection. The new order provides insight into why: the U.K. was just rewriting it to only apply to British users. This is still an unsettling overreach that makes U.K. users less safe and less free. As we’ve said time and time again, any backdoor built for the government puts everyone at greater risk of hacking, identity theft, and fraud. It sets a dangerous precedent to demand similar data from other companies, and provides a runway for other authoritarian governments to issue comparable orders. The[...]

From Input Output via this RSS feed

I see touches of Limbo and Shadows of the Colossus

A vast ecosystem, crumbling ruins, towering creatures, a world in collapse—cut, connect, control, replicate, and blast your way through it in this Metroidvania, shaping it as you please.

🌐 Steam

Kotama&Academy Citadel is a 3D Metroidvania game. Players assume the role of an exchange student named Kotama as she explores through the mysterious Academy Citadel, aiming to become the esteemed [Carmel Star].

🌐 Steam

Weekly thread to discuss whatever you’re working on, big or small, at work or in your free time.

L’Oréal UK and Ireland will work with law enforcement, cyber educators and students, and other large organisations to help thousands of small salons across the UK improve their cyber resilience practice

Financial Times: Digital bank Monzo, which has 13M UK customers, plans to launch a mobile phone service; Revolut and Klarna, each with ~11M UK customers, announced similar plans  —  Digital bank is exploring launching its own digital sim and offering monthly contracts  —  Monzo is planning to launch …