-
"Microsoft Admits Security Failings Allowed China to Access US Government Emails"In summer 2023, Microsoft President Brad Smith admitted that security failings enabled Chinese state hackers to access US government officials' emails.
-
"CISA Warns of Progress Telerik Vulnerability Exploitation"The US Cybersecurity and Infrastructure Security Agency (CISA) warns federal agencies of the ongoing exploitation of a patched authentication bypass vulnerability in Progress Software's Telerik Report Server.
-
"Pakistani Threat Actors Caught Targeting Indian Gov Entities"Cisco Talos and Volexity warn that Pakistan-based threat actors have targeted Indian government entities in two espionage campaigns.
-
"Edge Devices: The New Frontier for Mass Exploitation Attacks"
Edge devices, services, and network infrastructure devices often start mass exploitation attacks. There has been a rise of mass exploitation compromises and criminal targeting of edge and infrastructure devices.
-
"UK General Election: Tech Policy Expert Calls for Law Overhaul to Combat Deepfakes"Matthew Feeney, head of tech and innovation at the UK-based Centre for Policy Studies, warned of the deepfake threat to election integrity. The tech policy expert emphasized how technology has made deepfakes easier and cheaper to make.
-
"GitHub Paid Out Over $4 Million via Bug Bounty Program"
GitHub has recently announced that through its bug bounty program, which the company launched ten years ago, it has paid out more than $4 million. In 2023, the bug bounty paid out exceeded $850,000.
-
"Rockwell Automation Patches High-Severity Vulnerabilities in FactoryTalk View SE"Rockwell Automation recently announced that it has patched three high-severity vulnerabilities in its FactoryTalk View Site Edition (SE) HMI software.
-
"Microsoft Patches One Critical and One Zero-Day Vulnerability"Microsoft recently revealed updates for 51 vulnerabilities, only one of which was rated "critical." Microsoft noted that the bug, CVE-2024-30080, is a remote code execution (RCE) flaw in Microsoft Message Queuing (MSMQ) and has been assigned a CVSS sco
-
"Phishing Emails Abuse Windows Search Protocol to Push Malicious Scripts"
In a new phishing campaign, HTML attachments abusing the Windows Search protocol are used to push batch files hosted on remote servers that deliver malware.
-
"Easily Exploitable Critical Vulnerabilities Found in Open Source AI/ML Tools"
A new Protect AI report delves into a dozen critical vulnerabilities in open source Artificial Intelligence (AI) and Machine Learning (ML) tools discovered in recent months.
-
"Feds Saw More Cyberattacks but Better Detection Last Year, FISMA Report Says"
A Federal Information Security Modernization Act (FISMA) report recently issued to Congress found that federal agencies saw a nearly 10 percent increase in cyberattacks in 2023, but they also improved their detection and categorization.
-
"Cryptojacking Campaign Targets Misconfigured Kubernetes Clusters"
Researchers warn of a cryptojacking campaign targeting misconfigured Kubernetes clusters to mine Dero cryptocurrency.
News