CISA previously said federal civilian agencies would have until December 24 to address the issue, but it noted that the latest directive “is in response to the active exploitation by multiple threat actors of vulnerabilities found in the widely used Java-based logging package Log4j.” CISA Director Jen Easterly said they are urging organizations of all sizes to also assess their network security and adapt the mitigation measures outlined in the emergency directive....

When security vulnerabilities are severe, and the products they impact are popular or critical to the operations of key industries, the US Cybersecurity and Infrastructure Security Agency (CISA) will often issue advisories to make sure they reach the attention of IT administrators and security staff. On Thursday, CISA issued such an advisory for Airspan Networks Mimosa. Mimosa devices are offered to industrial and enterprise players for point-to-multipoint (PTMP) network deployment....

Webex for Defense has received provisional authorization from the Defense Information Systems Agency (DISA) to operate at DoD Impact Level 5 (IL5). That means it can support the Defense Department’s national security systems, higher-sensitivity controlled unclassified information (CUI), as well as mission-critical information. It’s cleared to support all workloads, including calling, meeting and messaging, and it connects to the full portfolio of Webex devices. The product is connected to the DoD Information Network via DISA-managed Cloud Access Points and delivered out of Cisco-hosted, DoD IL5-certified data centers....

Microsoft took a step backwards in 2021 on its goal, first aired in 2020, to become carbon negative by 2030. The company disclosed a significant 23% rise in carbon output in its 2021 sustainability report. Microsoft breaks down its carbon emissions into three categories: Scope 1 includes direct emissions from fossil fuels used onsite and executive travel; Scope 2 includes indirect emissions from purchased electricity supplied to data centers, buildings and campuses; and Scope 3 includes purchases goods and services, fuel, waste, business travel, employee commuting, use of sold products and more....

One estimate is that enterprises are missing out on $24 billion in wasted or misapplied cloud spending. 451 Research’s Market Monitor service values the global Infrastructure-as-a-Service market at $48 billion for 2021. More than a third of respondents to the survey, 36%, report they are consuming cloud only at on demand rates – the most expensive option. “That’s a shame, because our Cloud Price Index finds that, across the five hyperscalers, average savings of 36% on the cost of a simple application – consisting of virtual machines, storage and networking – can be made just by using commitment discounts,” the study’s authors state....

The auction starts on Friday, Feb. 4 at 10 a.m. PST and will run until Friday, Feb. 11 at 5 p.m. PST on nft.coachella.com and ftx.us/nfts. Called the “Coachella Keys Collection,” the 10 “one-of-one” NFTs will offer buyers lifetime festival access and VIP on-site experiences for 2022 that include front row seats at the Coachella Stage, on-stage access at a specific tent, or a celebrity chef dinner. The auction winners will get passes for one weekend Coachella event each year and permanent access to “virtual experiences” produced by Coachella....

Sampling 3,750 businesses employing between 10 and 999 employees in 14 countries around the region, Cisco said 83% reported an incident in excess of $100,000, and 13% had an incident cost more than $1 million. The survey was conducted between April and July. In Australia, where 306 qualifying businesses responded, the numbers were more stark, with 64% reporting an incident costing over $500,000, and 33% saying they were hit more than $1 million in cost....

Also: Best Cyber Monday 2022 TV deals This 2022 Hisense model comes with a 65" LED display, which is more than adequate for most living rooms and can be a good size option if you want to use a wall mount. In addition, you can expect content to be displayed at a 4K Ultra HD resolution, which offers a superior depth of color and clarity to older HD and below resolutions....

Also: Live blog: The best early Cyber Monday deals 2022 in real time Just in time for the colder months, this smart thermostat lets you control your home’s temperature on the device or with just a tap on your phone, from your bed or outside your home via the Google Home application. And if you prefer an automated lifestyle, you can set schedules for different modes, and routines for temperature control whenever you leave your home....

Dell noted that even cloud-native companies are moving to multi-cloud architectures during the Dell Technologies World 2022 conference. Simply put, he said, that’s because “compute is going to follow the data.” And increasingly, data is being created everywhere. That’s why Dell this week introduced a number of new tools and services that push the company further into multi-cloud service delivery, data management, edge and other new businesses. Among other things, Dell announced a new strategic partnership with Snowflake....

That’s one less step JavaScript developers need to complete when debugging a project. In the past, developers would have typically installed VS Code extensions such as the popular Microsoft-made Debugger for Chrome or the Debugger for Microsoft Edge. Instead of installing and using these extensions, developers can debug a project by pressing F5 or activating the debug icon in the menu bar and selecting “Run and debug”. SEE: Hiring Kit: Python developer (TechRepublic Premium) Another option is using the VS Code command palette and running the “Debug: Open Link” command to debug in Chrome, Edge or Node....

Also: Why is Twitter turning millions of accounts into defenseless targets? While Twitter is still up, numerous features aren’t working. Specifically, you can’t view many images, and links aren’t working. Worse, when you try to look up the Twitter application programming interface (API) error message, you’ll get the same API error message. At 12:19 Eastern, Twitter admitted the network was in trouble. The message read: “Some parts of Twitter may not be working as expected right now....

Cyberspace Administration of China (CAC) said Thursday Didi had violated the country’s cybersecurity and data security laws. The industry regulator pointed to the Cybersecurity Law, Data Security Law, and Personal Information Protection Law (PIPL), reported state-run media agency China Daily. CAC said Didi had illegally collected its users’ personal data, including 107 million pieces of passengers’ facial recognition details as well as their photos and short messages. In addition, the company’s CEO Cheng Wei and president Liu Qing were each fined 1 million yuan ($148,070), in accordance with the respective regulations....

Gleicher told the Select Committee on Foreign Interference Through Social Media that, last October, Facebook removed a network that was linked to marketing firms based in the UAE, Nigeria, and Egypt. The network targeted public debate around the world, primarily in the Middle East and Africa, but with some focus in Australia. “[There is] an increasing use of marketing firms or PR agencies that are essentially running disinfo-for-hire businesses: You hire them and they run your disinformation campaign,” he said on Friday morning....

The good news is that you can increase your competitiveness with an effective cybersecurity resume. But don’t just take our word for it. We also spoke to Zoë Morris and John Boyle, two experts in recruiting and staffing, to bring you even more helpful advice. Read on to learn how to craft a succinct, quantitative, and thorough cybersecurity resume that will help you stand out among thousands of applicants. Important: Tailor your resume to each cybersecurity job One big part of preparing your job application is tailoring your resume to each role to which you apply....

Back in 2018, I tested out a Roborock S5 and found it to be an incredible robot vacuum. After firing up the Mi Home app required to control this new DreameBot D10 Plus, it was nice to see that the Roborock S5 and S6 were still saved in my profile. It’s interesting to see that the Dreametech robots are now a part of the Xiaomi organization, which means much of what I loved about the S5 is found in the D10 Plus....

Describing JIT compiling as a “remarkably complex process that very few people understand and it has a small margin for error”, Norman pointed out that half of all vulnerabilities for the V8 JavaScript engine was related to the process. With the JIT engine turned off, it was possible for Edge to turn on protections – such as the hardware-based Control-flow Enforcement Technology (CET) from Intel, and Windows’ Arbitrary Code Guard (ACG) and Control Flow Guard (CFG) – that were previously incompatible with JIT....

Except for Tesla’s home charger, I’ve tested all the leading contenders for best home EV charger in the smart category – ChargePoint, Electrify America, Grizzle-E Smart, and Emporia Energy. While I like them for different reasons, the Emporia Energy unit is my favorite. Why? Price, the level of detail of energy consumption telemetry and app quality, and the potential for whole-home energy monitoring. Also: The best home EV chargers...

What’s new on iOS 16? iOS 16 brings “new intelligence, sharing, and communication features” that are meant to enhance and help you personalize the iPhone experience, Apple SVP Craig Federighi said during the keynote. Here’s every iOS 16 feature that was announced at WWDC 2022. Lock screen There’s no denying that the iPhone lock screen has always been its dullest feature. That changes today. On iOS 16, iPhones will receive a batch of informational and interactive wallpapers....

The leak is courtesy of Evan ‘Evleaks’ Blass, who dropped a lot of photos onto Twitter. The product is called Ray-Ban Stories, and will be offered in three Ray-Ban styles – Wayfarer, Round, and Meteor. Oddly for a collaboration with a brand as big as Facebook, apart from the box, the product is free of any Facebook branding. Is this a move to make them more discreet to prevent a backlash?...