“Considering an infrastructure refresh in data center consolidation, edge deployment, or compute refresh and consolidation? Today’s decision-making requires analysis, vision, calibration, and foresight for the next request from the business. For successful organizations and leaders, this requires a review of success factors for Business, Technical and Compliance / Risk goals.” This is part four in a five-part series for organizations considering a refresh of computing infrastructure, moving, or migrating to the cloud or application consolidation….

Two brothers from Peru have admitted their role in an international call-center scam that defrauded Spanish-speaking immigrants to the United States.  Under the conspiracy, victims were called up and threatened with legal action or deportation if they didn’t buy certain educational products. The scam was perpetrated from a series of call centers in Peru, including several that were operated and owned or co-owned by 32-year-old Josmell Espinoza Huerta (Josmell Espinoza) and his big brother, Carlos…

Dozens of universities are being hit with a coordinated cyber-attack that uses news of the Omicron variant as a lure to steal login credentials. Evidence of the malicious phishing campaigns was dredged up from the murky depths of the cyber-criminal underworld by researchers at the cybersecurity firm Proofpoint. The universities targeted are mostly based in North America and include the University of Central Missouri in Warrensburg, Missouri, and Vanderbilt University, a private research university in Nashville,…

Six months since its launch at DockerCon, the Docker Verified Publisher program delivers on its promise to developers and partners alike The Docker Verified Publisher program means trusted content and trusted sources for the millions of Docker users. At the May 2021 DockerCon, Docker announced its Secure Software Supply Chain initiative, highlighting Docker Verified Publisher as a key component of that trusted content.  The trusted images in Docker Hub help development teams build secure software…

A cybersecurity researcher has discovered multiple vulnerabilities in an open-source call center software suite used around the world. The Synopsys Cybersecurity Research Center (CyRC) released an advisory today exposing two API vulnerabilities in GOautodial. While multiple providers sell GOautodial as a paid-for cloud service, it is available as a free download.  “The vulnerabilities discovered can be exploited remotely to read system settings without authentication and allow arbitrary code execution by any authenticated user via unrestricted file upload,” wrote researchers in the GOautodial…

With pandemic-induced pressures impacting many employees, burnout can easily lead to security risks, says 1Password. Image: Shutterstock/Oleksii Didok Employee burnout is a potential problem under normal circumstances. But throw in a pandemic, and workers are even more prone to experience job-related stress. This type of burnout not only affects productivity but also triggers cybersecurity risks as employees become less careful about following proper security guidelines. A report released Tuesday by password manager 1Password examines the…