Cracking the Code: Choosing the Right Software Composition Analysis Tool

Oct 8, 2024 | Articles, Podcast

In today’s fast-paced digital world, where software vulnerabilities can spell disaster for businesses, choosing the right Software Composition Analysis (SCA) tool is like finding the perfect ingredient for your secret sauce. It’s not just about ticking...

Ecovacs Robot Vacuums Collect Home Images for AI Training, Raising Privacy Concerns

Oct 7, 2024 | Podcast

https://www.abc.net.au/news/2024-10-05/robot-vacuum-deebot-ecovacs-photos-ai/104416632 Ecovacs, a major manufacturer of robot vacuums, has come under fire for its data collection practices. The company is reportedly collecting photos, videos, and audio recordings from...

ServiceNow Outage Caused by Expired Root Certificate

Oct 5, 2024 | Podcast

https://www.theregister.com/2024/09/23/servicenow_root_certificate_outage A critical service disruption plagued ServiceNow customers on Monday morning due to an expired root certificate within the company’s Management, Instrumentation, and Discovery (MID)...

Privacy Group Claims Mozilla’s “Privacy-Preserving” Feature Tracks Users

Oct 4, 2024 | Podcast

https://www.bleepingcomputer.com/news/technology/mozilla-accused-of-tracking-users-in-firefox-without-consent European digital rights group NOYB has filed a complaint against Mozilla with the Austrian data protection authority. The complaint alleges that a new feature...

Remote Code Execution Flaw Found in CUPS Printing System (Limited Impact)

Oct 3, 2024 | Podcast

https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I A series of vulnerabilities have been discovered in the CUPS (Common Unix Printing System) open-source printing software that could potentially allow attackers to execute code remotely on...

Critical Vulnerability Found in Nvidia Container Toolkit

Oct 2, 2024 | Podcast

https://www.wiz.io/blog/wiz-research-critical-nvidia-ai-vulnerability A severe security flaw has been discovered in Nvidia’s Container Toolkit, a widely used tool for running AI applications in containerized environments. The vulnerability, designated...