[en] Serious security vulnerabilities in cloud-based password managers : #Bitwarden, #Lastpass, #Dashlane

The research team of Prof. Paterson found cryptographic technologies from the 90s. "We were surprised by the severity of the security vulnerabilities".

In most cases, the researchers were able to gain access to the passwords – and even make changes to them.

https://ethz.ch/en/news-and-events/eth-news/news/2026/02/password-managers-less-secure-than-promised.html

Aside from this research paper, recommended password managers often include #KeePassXC and/or #KeePassDX for Android or #KeePassium for iOS. Also, it's usually a good idea to store only accounts and passwords that are really necessary on the go, especially on mobile devices.

#password #passwordmanager #cloudbased #security #ictsecurity #securityvulnerability #ethz

Anybody using #aws with #graviton nodes or instances? If so, what's your #development workflow? Do you use emulation? Do you have an arm-based development environment? Locally or #cloudBased? Do you support amd64 and arm64? What are you thoughts? #programming #devops #webdev #webdevelopment

EDIT: Also #azure and #gcp users

Telegram scales globally with just 30 employees

https://fed.brid.gy/r/https://dailytimes.com.pk/1409727/telegram-scales-globally-with-just-30-employees/

SOC 2? What's that? If you don't know what it is, then you probably need to know. And this article is going to show you what you need to know.

#Soc2 #Soc2Compliance #CloudBased #Cloud #Grc #Cybersecurity

https://heyjoshlee.medium.com/soc-2-what-it-is-and-why-it-matters-for-cloud-based-businesses-made-easy-a2c984fb27da

The company #RainBird can pound sand! If you update your mobile app to their v2.0 it will reflash your rainbird wifi module and not allow local access, forcing you to use their cloud-based BS. I'm done with them. Going the open-source route here and using the drop-in replacement https://opensprinkler.com/ . Works out of the box with Home Assistant too.

#Sprinklers #CloudBased #Cloud #Irrigation #RightToRepair #OpenSource #DIY #HomeAssistant #SelfHosted

Unlock confidence in your quality processes with Discus QMS — Where Compliance Meets Confidence. From document control to CAPA management, audit readiness to risk minimization, Discus QMS helps you.

Ready to transform your QMS?

Call us now at +91 97277 31777
Visit https://zurl.co/oc8Qc to schedule your free demo!

#DiscusQMS #PharmaCompliance #QualityManagement #AuditReady #CAPAManagement #CloudBased #DigitalTransformation #RegulatoryCompliance #QMSInnovation #DiscusIT

#USTreasury says Chinese #hackers stole documents in 'major incident'

By Raphael Satter and A.J. Vicens
December 30, 2024

Dec 30 (Reuters) - "Chinese state-sponsored hackers broke into the U.S. Treasury Department this month and stole documents from its workstations, according to a letter to lawmakers. The hackers compromised third-party #cybersecurity service provider BeyondTrust and were able to access unclassified documents, the letter said, calling it a 'major incident.'

"According to the letter, hackers 'gained access to a key used by the vendor to secure a #CloudBased service used to remotely provide technical support for Treasury Departmental Offices (DO) end users. With access to the stolen key, the threat actor was able to override the service’s security, remotely access certain Treasury DO user workstations, and access certain unclassified documents maintained by those users.'

"The Treasury Department said it was alerted to the breach by BeyondTrust on Dec. 8 and that it was working with the U.S. Cybersecurity and Infrastructure Security Agency and the FBI to assess the hack's impact.

"The FBI did not immediately respond to Reuters' requests for comment, while CISA referred questions back to the Treasury Department. A spokesperson for the Chinese Embassy in Washington did not immediately respond to a request for comment. Beijing routinely denies responsibility for #cyberespionage incidents."

Read more:
https://www.reuters.com/technology/cybersecurity/us-treasurys-workstations-hacked-cyberattack-by-china-afp-reports-2024-12-30/