Endpoint Security
Intel and AMD have informed their customers about a total of more than 130 vulnerabilities found in their products.
Hi, what are you looking for?
SecurityWeek
Endpoint Security
Pool Party is a new set of eight Windows process injection techniques that evade endpoint detection and response solutions.
Endpoint Security
Security features that major CPU vendors plan on integrating into their future products can increase the surface for certain types of attacks.
Endpoint Security
LogoFAIL is an UEFI image parser attack allowing hackers to compromise consumer and enterprise devices using malicious logo images.
Endpoint Security
Apple's security response team warns that flaws CVE-2023-42916 and CVE-2023-42917 were already exploited against versions of iOS before iOS 16.7.1.
Data Protection
Three critical vulnerabilities in ownCloud could lead to sensitive information disclosure and authentication and validation bypass.
Endpoint Security
Researchers have tested the fingerprint sensors used for Windows Hello on three popular laptops and managed to bypass them.
Endpoint Security
A new Intel CPU vulnerability tracked as Reptar and CVE-2023-23583 can be exploited for DoS attacks and possibly privilege escalation.
Endpoint Security
A class action lawsuit has been filed against Intel over its handling of CPU speculative execution vulnerabilities, with a focus on Downfall.
Endpoint Security
Veeam Software has rolled out patches to cover code execution vulnerabilities in its Veeam ONE IT monitoring product.
Endpoint Security
VMware’s Threat Analysis Unit finds 34 new vulnerable kernel drivers that can be exploited to alter or erase firmware and escalate privileges.
Endpoint Security
Apple patches dozens of serious security flaws in its macOS and iOS platforms, warning that hackers could launch code execution exploits.
CISO Strategy
Microsoft announced a major shakeup of its security hierarchy, removing the CISO and Deputy CISO and handing the reins to a recent hire.
Cyberwarfare
The US cybersecurity agency calls attention to a Russian APT targeting academia, defense, governmental organizations, NGOs and think-tanks.
Application Security
Cybercrime
Artificial Intelligence
