Cybersecurity News, Insights and Analysis | SecurityWeek
WEBEvent: ICS Cybersecurity Conference. Oct. 21-24, 2024. The leading industrial cybersecurity conference for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity. Register.
Unconfirmed Hack of 2.9 Billion Records at National Public Data …
WEBAug 14, 2024 · National Public Data (NPD) is at the center of controversy with allegations of a massive data breach involving 2.9 billion records. Despite media coverage and a class action lawsuit, verifiable proof remains scarce National Public Data (NPD) was supposedly hacked at some unspecified date. At the ...
Microsoft Patches 67 Security Flaws, Including Zero-Day Exploited …
WEBDecember 14, 2021. Microsoft’s security response engine revved into overdrive this month with the release of patches for 67 documented Windows software vulnerabilities, including a zero-day bug that’s already been exploited by one of the most professional and long lasting cybercrime gangs. In the final Patch Tuesday release for 2021, the ...
Microsoft Catches APTs Using ChatGPT for Vuln Research, Malware ...
WEBFeb 14, 2024 · Microsoft’s threat intelligence team has captured evidence of foreign government-backed hacking teams interacting with OpenAI’s ChatGPT to automate malicious vulnerability research, target reconnaissance and malware creation tasks. In a research report published Wednesday, Microsoft said it partnered with OpenAI to study the use of LLMs by ...
Data in Use Is the Point of Least Resistance - SecurityWeek
WEBApr 26, 2019 · Extracting value from data by performing actions such as search and analytics requires decryption, creating critical points of exposure. Of the three states of data within an organization that constitute the Data Security Triad (Data at Rest, Data in Transit, Data in Use), Data in Use has become a point of least resistance for an attacker.
Windows Updates Patch Actively Exploited ‘Follina’ Vulnerability
WEBJun 14, 2022 · Microsoft has fixed roughly 50 vulnerabilities with its June 2022 Patch Tuesday updates, including the actively exploited flaw known as Follina and CVE-2022-30190. The Follina vulnerability can and has been exploited for remote code execution using specially crafted documents. The root cause of the vulnerability has been known for at …
RSA Conference 2022 – Announcements Summary (Day 2)
WEBJune 8, 2022. Hundreds of companies are showcasing their products and services this week at the 2022 edition of the RSA Conference in San Francisco. To help cut through the clutter, the SecurityWeek team is publishing a daily digest summarizing some of the announcements made by vendors. The daily summaries will …
Apple Finally Patches Exploited Vulnerabilities in macOS Big Sur ...
WEBBy. Eduard Kovacs. May 17, 2022. Apple on Monday rolled out security updates to patch tens of vulnerabilities across its operating systems, and it has finally released macOS Big Sur and Catalina patches for two exploited vulnerabilities. The exploited vulnerabilities, tracked as CVE-2022-22675 and CVE-2022-22674, were disclosed in late March.
Google Discovers Attack Exploiting Chrome Zero-Day Vulnerability
WEBFeb 15, 2022 · Google on Monday announced the release of 11 security patches for Chrome, including one for a vulnerability exploited in the wild. Tracked as CVE-2022-0609 and rated high severity, the exploited vulnerability is described as a use-after-free issue in Animation that was reported by Adam Weidemann and Clément Lecigne of Google’s Threat Analysis Group.
Seizing Cryptocurrency: How is Law Enforcement Tracing and …
WEBJul 12, 2021 · A look into recent cryptocurrency tracing and recovery operations by the FBI and UK’s Metropolitan Police. On June 7, 2021, the U.S. Department of Justice announced that it had seized $2.3 million in cryptocurrency paid to the DarkSide ransomware gang following the Colonial Pipeline attack. On June 24, 2021, the UK’s Metropolitan Police announced that it had seized £114 million in money ...