Category: Uncategorized
-
40 Vulnerabilities Patched in Android With August 2023 Security Updates Eduard Kovacs
40 vulnerabilities have been patched by Google in the Android operating system with the release of the August 2023 security updates. The post 40 Vulnerabilities Patched in Android With August 2023 Security Updates appeared first on SecurityWeek. Read More
-
New Android 14 Security Feature: IT Admins Can Now Disable 2G Networks [email protected] (The Hacker News)
Google has introduced a new security feature in Android 14 that allows IT administrators to disable support for 2G cellular networks in their managed device fleet. The search giant said it’s introducing a second user setting to turn off support, at the model level, for null-ciphered cellular connections. “The Android Security Model assumes that all networks…
-
Downfall: New Intel CPU Attack Exposing Sensitive Information Eduard Kovacs
Google researcher discloses the details of an Intel CPU attack method named Downfall that may be remotely exploitable. The post Downfall: New Intel CPU Attack Exposing Sensitive Information appeared first on SecurityWeek. Read More
-
Microsoft Releases Patches for 74 New Vulnerabilities in August Update [email protected] (The Hacker News)
Microsoft has patched a total of 74 flaws in its software as part of the company’s Patch Tuesday updates for August 2023, down from the voluminous 132 vulnerabilities the company fixed last month. This comprises six Critical and 67 Important security vulnerabilities. Also released by the tech giant are two defense-in-depth updates for Microsoft Office (ADV230003) and…
-
Malicious Campaigns Exploit Weak Kubernetes Clusters for Crypto Mining [email protected] (The Hacker News)
Exposed Kubernetes (K8s) clusters are being exploited by malicious actors to deploy cryptocurrency miners and other backdoors. Cloud security firm Aqua, in a report shared with The Hacker News, said a majority of the clusters belonged to small to medium-sized organizations, with a smaller subset tied to bigger companies, spanning financial, aerospace, automotive, industrial, and security sectorsRead…
-
New Report Exposes Vice Society’s Collaboration with Rhysida Ransomware [email protected] (The Hacker News)
Tactical similarities have been unearthed between the double extortion ransomware group known as Rhysida and Vice Society, including in their targeting of education and healthcare sectors. “As Vice Society was observed deploying a variety of commodity ransomware payloads, this link does not suggest that Rhysida is exclusively used by Vice Society, but shows with at…
-
Rapid7 Announces Layoffs, Office Closings Under Restructuring Plan Mike Lennon
Restructuring plan will result in an 18% reduction in employee headcount and closing of some Rapid7 office locations. The post Rapid7 Announces Layoffs, Office Closings Under Restructuring Plan appeared first on SecurityWeek. Read More
-
Patch Tuesday: Microsoft (Finally) Patches Exploited Office Zero-Days Ryan Naraine
Patch Tuesday: A month after confirming active exploitation of Office code execution flaws, Microsoft has shipped patches for multiple affected products. The post Patch Tuesday: Microsoft (Finally) Patches Exploited Office Zero-Days appeared first on SecurityWeek. Read More
-
Patch Tuesday: Adobe Patches 30 Acrobat, Reader Vulns Ryan Naraine
Adobe rolls out a big batch of security updates to fix at least 30 Acrobat and Reader vulnerabilities affecting Windows and macOS users. The post Patch Tuesday: Adobe Patches 30 Acrobat, Reader Vulns appeared first on SecurityWeek. Read More
-
White House Holds First-Ever Summit on the Ransomware Crisis Plaguing the Nation’s Public Schools Associated Press
CISA will step up training for the K-12 sector and technology providers, including Amazon Web Services and Cloudflare, will offer grants and free software. The post White House Holds First-Ever Summit on the Ransomware Crisis Plaguing the Nation’s Public Schools appeared first on SecurityWeek. Read More