RSS_Virtulization

Editor’s note: This article is part of Behind the Firewall, a recurring column for cybersecurity executives to digest, discuss and debate. Next up: How did you get started in security? Email us here. When 5 o’clock hits, many professionals log off to spend their evenings focused on anything but work. Personal and professional worlds are siloed from one another, with nary a care for the office until the next morning.  But working in cybersecurity, even after…

The UK and US governments have agreed to work together more closely to tackle cybercrime as well as enhance the security of supply chains and emerging technologies. The announcement has come amid US President Joe Biden’s visit to the UK for the G7 summit, which has started today. The partnership will be built within the framework of the revitalized Atlantic Charter, first introduced in 1941, and will cover a range of areas in science and…

Hi Everyone, It’s that time again, time to announce episode 2 of the Cloud Technologist Show!! Today, Martijn, Mandy and myself talk about the importance of building a Cloud Operating Model. As a business embarking on a multi-cloud transformation, you probably already have an application strategy (maybe based on the 5 Rs), you probably also have a cloud strategy, defining which combination of private and public clouds. Today we dive into the topic of binding…

Security researchers warn of a series of highly targeted attacks designed to compromise victim networks via Google Chrome and Microsoft Windows zero-day exploits. The attackers are thought to have first exploited the now-patched CVE-2021-21224 remote code execution bug in Chrome. “This vulnerability was related to a Type Mismatch bug in the V8 — a JavaScript engine used by Chrome and Chromium web-browsers,” explained Kaspersky. “It allows the attackers to exploit the Chrome renderer process: the processes…

Western tech firms and other multinationals with a big presence in China could soon find themselves in a difficult position after Beijing passed new retaliatory sanctions laws. The move is widely seen as a reaction to a string of sanctions put in place by the US and allies in recent months over human rights abuses in Xinjiang and the muzzling of democracy protests in Hong Kong. The new law passed on Thursday will reportedly enable…

Long-distance quantum-secured data transfer took a step closer this week after Toshiba announced that scientists in the UK have managed to produce a stable prototype that works over 600 kilometers. Quantum computing is often described as a potential security challenge in that, once states can engineer working machines, they could theoretically crack any public-key cryptography system. However, the technology could also be used to mitigate this risk by producing “unhackable” information streams using quantum key distribution…

This post is co-authored by Connor McKelvey, Tao Jiang, Lavie Tobey, and Thiru Bhat. VMware-Go-KCL is a native open-source Go library for Amazon Kinesis Data Stream (KDS) consumption. It allows developers to program KDS consumers in any language they want and still take advantage of the features presented by the native KDS Java API libraries. Find the project on GitHub at vmware/vmware-go-kcl. While using KDS with cloud-native solutions, we found a gap between what is…

Microsoft uncovered a malicious campaign targeting Kubeflow workloads to deploy TensorFlow pods that are used to mine cryptocurrency. Microsoft researchers uncovered a malicious campaign targeting Kubeflow workloads to deploy TensorFlow pods that are used to mine for cryptocurrency. The campaign was first spotted at the end of May, experts noticed the deployment of TensorFlow pods at scale on multiple Kubernetes clusters. The pods ran legitimate TensorFlow images to mine cryptocurrency. Kubeflow allows deploying machine learning (ML)…