FBI confirms ‘multiple’ arrests related to ShinyHunters hack
The FBI and law enforcement partners have arrested “multiple” suspects as part of an investigation into a September hack allegedly involving data-theft-and-extortion group ShinyHunters, the bureau told The Register. “The…
Debian’s latest kernel security update has 1,313 reasons to patch
The age of LLM-assisted security vulnerability discovery is really starting to bite. Debian’s latest Linux kernel security update comes with a formidable reading list of 1,313 CVE identifiers. The DSA-6528-1…
Legacy sign-on service comes back to bite school software provider Bromcom
UK education software provider Bromcom has notified customers of a personal data breach affecting its single sign-on (SSO) technology. In a September 24 EduGeek post, an account named Bromcom_Alastair said…
Knowing which vulnerability to fix first
Common Vulnerability Scoring System (CVSS) severity tells you how serious a vulnerability could be. Exploit Prediction Scoring System (EPSS) estimates how likely exploitation is in the next 30 days. Neither…
What cloud infrastructure taught me about building billing systems
For years, I thought of billing as a domain I would have to learn from scratch. Ledgers. Taxes. Proration. Regulations. Money. After 11 years building cloud datacenter management systems, I…
