Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror

Submission + - Microsoft To Appoint a Deputy CISO for Europe (csoonline.com)

An anonymous reader writes: In a move designed to reassure European leaders of the company's commitment to the region, Microsoft earlier this week announced that it will be creating a new position: a Deputy CISO for Europe. In reaction to the news, one analyst quipped, “I was mostly surprised that they don’t already have one,” adding that Microsoft is not creating the role “because they really believe in it. It’s because they don’t want to lose that business. It’s that simple."

Submission + - JetBrains AI Assistant Panned In JetBrains Marketplace (infoworld.com)

itwbennett writes: From the article:

Despite having been downloaded nearly 23 million times, the JetBrains AI Assistant has received bad reviews on the company’s JetBrains Marketplace website, prompting JetBrains to remove some of the reviews.

Unveiled in December 2023, the JetBrains AI Assistant rates only 2.3 stars out of a possible five stars on the company’s ratings system, with 851 total ratings as of May 1. “I’ve been a long-time user of JetBrains IDEs and generally appreciate the thoughtful tooling they offer,” reviewer Haso Keric wrote. “Unfortunately, the AI Assistant doesn’t live up to the same standard. It feels bolted on rather than integrated, and it quickly becomes more of a novelty than a productivity tool.”


Submission + - Chase CISO Condemns SaaS Security (csoonline.com)

itwbennett writes: In an open letter to suppliers, Chase CISO Patrick Opet, took the industry to task for 'quietly enabling cyber attackers,' among a litany of other security sins. Sources quoted in this CSOonline article didn't disagree with what is generally agreed to be an accurate description of today's security challenges, but what Opet hoped to accomplish with this letter is unclear. One analyst described it as 'more of a call to discussion than a call to action.' Another pinned the lack of specificity on the likely involvement of Chase legal and other officials making edits that watered down the substance, so 'the essence of the letter is lost trying to protect themselves.'

Submission + - Lesson from Blue Shield California Data Breach: Read the Manual (csoonline.com)

itwbennett writes: Personal health information on 4.7 million Blue Shield California subscribers was unintentionally shared between Google Analytics and Google Ads between April 2021 and January 2025 due to a misconfiguration error. Security consultant and SANS Institute instructor Brandon Evans points to two lessons to take from this debacle:
  • read the documentation of any third party service you sign up for, to understand the security and privacy controls;
  • know what data is being collected from your organization, and what you don’t want shared.

Submission + - Vendors Slowly Patch Critical MegaRAC Flaw (networkworld.com)

itwbennett writes: From the Network World article:

Weeks after BIOS developer AMI released an update fixing a critical vulnerability in its MegaRAC baseband management controller (BMC) firmware used in many enterprise servers and storage systems, OEM patches addressing the issue are slowly trickling out.

The latest vendor to release patches was Lenovo, which appears to have taken until April 17 to release its patch. And although Asus patches for four motherboard models appeared only this week, the exact time these were posted is unconfirmed; the dates on the updates range from March 12 to March 28.

Among the first to release a patch was Hewlett Packard Enterprise (HPE), which on March 20 released an update for its HPE Cray XD670, used for AI and high-performance computing (HPC) workloads. Other OEMs known to use AMI’s MegaRAC BMC include AMD, Ampere Computing, ASRock, ARM, Fujitsu, Gigabyte, Huawei, Nvidia, Supermicro, and Qualcomm.


Submission + - Tariffs May Finally Make Recycling Rare Earth Elements Pay Off (networkworld.com)

itwbennett writes: Computerworld reports that Western Digital and Microsoft are testing ways to recover precious materials from old servers. “A new advanced sorting ecosystem with an eco-friendly non-acid process not only recaptures essential rare earth elements but also extracts metals like gold, copper, aluminum, and steel, feeding them back into the US supply chain,” Western Digital said in a statement. This part isn't new. What's new is the math. Thanks to Trump's tariff war and 'moves by China to halt the export of bismuth, which might hold the key to future faster and more efficient semiconductors,' the few dollars' worth of materials in one server might be enough ROI to make it worthwhile. Gartner analyst Autumn Stanish is positive about the Western Digital news, but advises caution. 'This seems, based on the public information, far from the volume and scale to achieve the independence and carbon savings potential presented,' she said.

Submission + - Russia-linked APT29 Targets European Diplomats with Wine-Tasting Invites (csoonline.com)

itwbennett writes: From the department of doing-your-research, the cyberespionage group also known as Cozy Bear, which is linked to Russia's foreign intelligence service, is targeting 'European diplomatic entities, including non-European countries’ embassies located in Europe,' according to a new report from Check Point. 'In this current wave of attacks, the threat actors impersonate a major European Ministry of Foreign Affairs to send out invitations to wine tasting events, prompting targets to click a web link leading to the deployment of a new backdoor called GRAPELOADER.'

Submission + - Vendors Vote to Radically Slash Website Certificate Duration (computerworld.com)

itwbennett writes: In a move that will further overburden IT staff, members of the CA/Browser Forum voted to cut the lifespan of the web certificates to just 47 days by 2029. The changes, which have been debated over a year, were expected and will be phased in gradually. But Jon Nelson, a principal advisory director at Info-Tech Research Group, questioned the motives of the group: "They are doing this under the auspices of reducing risk, but I question if that is the real reason. Do the people making up this group have a conflict of interest in that this move could generate additional revenue for their companies?”

Comment Should be spending on defeating Russia (Score -1) 120

USSR — and then Russia — were/are the supporters and often outright instigators of most of the world's terrorism and other evil.

All efforts should be aimed on defeating that first and foremost.

If the Ukrainians are on the tip of that spear today, they must not lack for weapons, supplies, nor other support.

Comment Re:Collectivist mantra (Score 0) 81

And you represent the essence of neo-feudalism where my bank account is the sole determiner of my worth to society and those poor's should just die more efficiently to pave the way for the glorious ubermensch to rule the masses.

You libertarian types

There is nothing — zero — in the Libertarian doctrine, that mentions anything anywhere near the strawman you attributed to me. Indeed, your verbiage is straight out of the most infamous (though not the most evil) Statist of all L-)

Live on a different planet. Go live where you are alone and die well there.

This is an interesting attitude — considering, that Libertarians don't at all mind other people organizing themselves into any kind of Collectives they genuinely want to. A Libertarian government wouldn't touch you — as long you don't coerce anyone to join you.

It is the other way around, that is impossible — Statists wouldn't leave the Libertarians be. So, if anyone ought to be exiled to a different planet, it is you — the oppressors — not us...

Comment Sabotage by Russia (Score -1, Flamebait) 21

Baltic nations said this week they are investigating whether the cutting of two fiber-optic undersea telecommunication cables in the Baltic Sea was sabotage.

Of course, it was. We even know, who the saboteurs are.

Though the collective "Biden" may not realize it, Russia's been at war with the West for many years... They started it, and we ought to end it — on our terms.

Comment Collectivist mantra (Score -1, Troll) 81

Have fun applying for a new job at 50. Especially after the gut the labor board and age discrimination is legal.

This quote represents the very essence of Statism. It openly admits, that government needs to — indeed, must — maintain and enforce rules, which would compel people to hire those, whom they don't want to hire.

It is quite funny, that these are the same Statists, who are trying to scare us, that it is the other side, that "threaten our freedoms"...

Slashdot Top Deals

The trouble with opportunity is that it always comes disguised as hard work. -- Herbert V. Prochnow

Working...