Endpoint Security
Google researcher discloses the details of an Intel CPU attack method named Downfall that may be remotely exploitable.
Hi, what are you looking for?
SecurityWeek
Endpoint Security
Apple's security response team warns that flaws CVE-2023-42916 and CVE-2023-42917 were already exploited against versions of iOS before iOS 16.7.1.
Data Protection
Three critical vulnerabilities in ownCloud could lead to sensitive information disclosure and authentication and validation bypass.
Endpoint Security
Researchers have tested the fingerprint sensors used for Windows Hello on three popular laptops and managed to bypass them.
Endpoint Security
Intel and AMD have informed their customers about a total of more than 130 vulnerabilities found in their products.
Endpoint Security
A new Intel CPU vulnerability tracked as Reptar and CVE-2023-23583 can be exploited for DoS attacks and possibly privilege escalation.
Endpoint Security
A class action lawsuit has been filed against Intel over its handling of CPU speculative execution vulnerabilities, with a focus on Downfall.
Endpoint Security
A new power side-channel attack named Collide+Power can allow an attacker to obtain sensitive information and it works against nearly any modern CPU.
Endpoint Security
AMD has released microcode patches to address Zenbleed, a vulnerability in its Zen 2 CPUs that can allow an attacker to access sensitive information.
Endpoint Security
Two new serious vulnerabilities in AMI BMC, which is used by millions of devices, can allow attackers to take control of systems and cause...
Cybercrime
Microsoft has revoked signed drivers used for post-exploitation activity, in many cases by Chinese cybercriminals.
Endpoint Security
The need for cyber resilience arises from the growing realization that traditional security measures are no longer enough to protect systems, data, and the...
Endpoint Security
Western Digital is blocking access to its cloud services for devices running firmware versions impacted by a critical security vulnerability.
Endpoint Security
CISA and the NSA have published new guidance to help organizations harden baseboard management controllers (BMCs).
Endpoint Security
Microsoft is making SMB signing a default requirement in Windows 11 Enterprise editions, starting with insider preview build 25381.
Endpoint Security
Gigabyte has announced BIOS updates that remove a recently identified backdoor feature in hundreds of its motherboards.
Endpoint Security
A backdoor feature found in hundreds of Gigabyte motherboard models can pose a significant supply chain risk to organizations.
Endpoint Security
Out-of-control devices run the gamut from known to unknown and benign to malicious, and where you draw the line is unique to your organization.
Cyberwarfare
Security agencies say the Cyber Av3ngers group targeting ICS at multiple water facilities is affiliated with the Iranian government.
Identity & Access
Vulnerabilities
Malware & Threats
Cloud Security
While applications and cloud infrastructure present different risk profiles and require different security assessments, they must not be viewed separately with regards to enterprise...