Software bugs put nearly 100 million health records at risk of exposure

The slew of vulnerabilities – since patched – were found without the use of automated testing tools. A team of seven researchers has discovered more than 20 security vulnerabilities in OpenEMR, an open-sourceapplication used worldwide for the electronic management of the medical records of almost 100 million people. In keeping with the principles of responsible disclosure, … More Software bugs put nearly 100 million health records at risk of exposure

AI hot air creating real risks for enterprises

The hype around artificial intelligence (AI) in cybersecurity has reached fever pitch. You just have to scan the news to see that the media is awash with stories about how AI will transform cybersecurity practices – making threat detection faster and more accurate than ever before. What’s more, marketing materials from next-generation vendors further claim … More AI hot air creating real risks for enterprises

Apple chip supplier blames WannaCryptor variant for plant shutdowns

The malware outbreak has even prompted concerns of delays in the shipments of the next wave of iPhones. Taiwan Semiconductor Manufacturing Company (TSMC) has reverted to normal operations after a “mutation” of the WannaCryptor (aka WannaCry) malware forced the closure of several of its fabrications plants over the weekend, according to a BBC report. The company … More Apple chip supplier blames WannaCryptor variant for plant shutdowns

Interviewing ESET’s experts about the Web’s journey so far

What has the journey of the World Wide Web been like so far, as seen and experienced by ESET’s security folk? ESET Senior Research Fellow David Harley provides his take in the first installment of our series of interviews marking the Web’s 27th birthday. On August 6, 1991, English computer scientist Tim Berners-Lee publicly announced … More Interviewing ESET’s experts about the Web’s journey so far

Reddit reveals breach as attacker circumvents staff’s 2FA

The company has learned the hard way that there are better ways to deliver two-factor authentication than via text messages. Reddit has announced that a hacker has broken into some of its systems and accessed some user data, including an old database backup copy containing user credentials, email addresses, and messages. Additionally, the breach affected … More Reddit reveals breach as attacker circumvents staff’s 2FA