Endpoint Security
Hundreds of PC and server models may be affected by CVE-2024-0762, a privilege escalation and code execution flaw in Phoenix SecureCore UEFI firmware.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
Artificial Intelligence
AI model weights govern outputs from the system, but altered or ‘poisoned’, they can make the output erroneous and, in extremis, useless and dangerous.
Data Breaches
AMD has launched an investigation after a notorious hacker announced selling sensitive data allegedly belonging to the company.
Endpoint Security
Researchers have targeted the MTE security feature in Arm CPUs and showed how attackers could bypass protections.
Cybercrime
A British man has been arrested in Spain for allegedly being the ringleader of the notorious Scattered Spider cybercrime group.
Artificial Intelligence
Microsoft is not rolling out Recall with Copilot+ PCs as it’s seeking additional feedback and working on improving security.
ICS/OT
Analysis and insights on the prevalence and impact of password exposure vulnerabilities in ICS and other OT products.
Vulnerabilities
Microsoft’s June 2024 Patch Tuesday updates resolve a zero-click Outlook vulnerability leading to remote code execution.
Ransomware
The TellYouThePass ransomware gang started exploiting a recent code execution flaw in PHP days after public disclosure.
IoT Security
Apple has released a visionOS update that patches CVE-2024-27812, which may be the first flaw specific to the VR headset.
Malware & Threats
Arm warns that CVE-2024-4610, a Mali GPU kernel driver vulnerability addressed two years ago, is exploited in attacks.
Cloud Security
Mandiant says a financially motivated threat actor has compromised hundreds of Snowflake instances using customer credentials stolen via infostealer malware that infected non-Snowflake owned...
Cloud Security
Fortinet announces plans to acquire Lacework, a late-stage cloud security startup that was once listed as a “unicorn” company valued north of $1 billion.
Data Breaches
Auction house Christie's says the data breach caused by the recent ransomware attack impacts the information of 45,000 individuals.
Artificial Intelligence
Amidst public pressure, Microsoft changes the set-up experience of Copilot+ PCs to disable the controversial Windows Recall feature by default.
Vulnerabilities
SolarWinds has released patches for high-severity vulnerabilities in Serv-U and the SolarWinds Platform.
Mobile & Wireless
To comply with new UK government regulations, Apple has specified that iPhones will get at least 5 years of security updates.
Incident Response
Log tampering is an almost inevitable part of a compromise. Why and how do cybercriminals target logs, and what can be done to protect...
Malware & Threats
Google and Microsoft warn of elevated risks of cyber threats facing the 2024 Paris Olympics, especially from Russian threat actors.
Cybercrime
The FBI has obtained more than 7,000 LockBit ransomware decryption keys and is urging victims to get in touch with its IC3.
Artificial Intelligence
A cybersecurity advisory with technical details and recommendations has been written by the NSA, CISA and other agencies.
Artificial Intelligence
Vulnerabilities
Vulnerabilities
The flaws could be exploited to execute arbitrary code, access sensitive information, and elevate privileges.
Vulnerabilities
Artificial Intelligence
Artificial Intelligence
