The US government has no idea how many cybersecurity pros it employs Auditors find federal cybersecurity workforce data messy, incomplete, and unreliable The US federal government employs tens of thousands of cybersecurity professionals at a cost of billions per year – or at least it thinks it does, as auditors have found the figures are incomplete and unreliable. … #theregister #IT
How huge breach started: Drift attackers gained entry via a Salesloft GitHub account Meanwhile the victim count grows The Salesloft Drift breach that compromised "hundreds" of companies including Google, Palo Alto Networks, and Cloudflare, all started with miscreants gaining access to the Salesloft GitHub account in March.… #theregister #IT
Dev snared in crypto phishing net, 18 npm packages compromised Popular npm packages debug, chalk, and others hijacked in massive supply chain attack Crims have added backdoors to at least 18 npm packages after developer Josh Junon inadvertently authorized a reset of the two-factor authentication protecting his npm account.… #theregister #IT
AI chip startup d-Matrix aspires to rack scale with JetStream I/O cards Who needs HBM when you can juggle SRAM speed and LPDDR bulk across racks AI chip startup d-Matrix is pushing into rack scale with the introduction of its JetStream I/O cards, which are designed to allow larger models to be distributed across multiple servers or even racks while minimizing performance bottlenecks.… #theregister #IT
Salt Typhoon used dozens of domains, going back five years. Did you visit one? Plus ties to the Chinese spies who hacked Barracuda email gateways Security researchers have uncovered dozens of domains used by Chinese espionage crew Salt Typhoon to gain stealthy, long-term access to victim organizations going back as far as 2020.… #theregister #IT
Microsoft hits pause on Copilot ... in SQL Server Management Studio Only a temporary reprieve until GitHub Copilot integration is up and running Microsoft's policy of inserting Copilot into every corner of its portfolio is on brief hiatus, at least in the first preview of SQL Server Management Studio (SSMS) 22.… #theregister #IT
Perplexity wants to get discounted AI products into the US government too $0.25-per-agency deal not finalized, and no FedRAMP approval either - so don’t get excited Perplexity has entered the race to inject AI into the federal government with a new public sector version of its AI search engine, another AI discount, and a pledge to start enforcing new security measures for government-… #theregister #IT
Ubuntu users left waiting after Canonical's servers take weekend off Package queues jammed until Monday despite brief downtime When is an outage not an outage? According to Canonical's forum, it's when a 36-minute server disruption creates a multi-day backlog that leaves users unable to install or update Ubuntu systems.… #theregister #IT
French datacenter biz signs 12-year nuclear pact with EDF Data4 to secure 40 MW of atomic juice as part of long-term low-carbon strategy The datacenter industry's unquenchable thirst for nuclear energy has seen French bit barn operator Data4 sign a 12 year supply deal with EDF.… #theregister #IT
PACER buckles under MFA rollout as courts warn of support delays Busy lawyers on hold for five hours as staff handhold users into deploying the security measure US courts have warned of delays as PACER, the system for accessing court documents, struggles to support users enrolling in its mandatory MFA program.… #theregister #IT