Cybersecurity News, Insights and Analysis | SecurityWeek
SecurityWeek provides cybersecurity news and information to global enterprises, with expert insights & analysis for IT security professionals
Latest News - SecurityWeek
Dec 20, 2024 · Apple complained that requests from Meta Platforms for access to its operating software threaten user privacy, in a spat fueled by the European Union’s intensifying efforts to get the iPhone maker to open up to products from tech rivals.
Organizations Warned of Exploited Fortinet FortiOS Vulnerability
Oct 10, 2024 · The US cybersecurity agency CISA on Wednesday warned that a Fortinet FortiOS flaw patched in February is being exploited in the wild and has added it to its Known Exploited Vulnerabilities (KEV) list along with two Ivanti Cloud Services Appliance (CSA) bugs.
Malware & Threats Archives - SecurityWeek
News and information on emerging malware and threats for enterprise cybersecurity teams
Microsoft Warns of Six Windows Zero-Days Being Actively Exploited
CVE-2024-38213 — Microsoft describes this as a Windows Mark of the Web security feature bypass being exploited in active attacks. “An attacker who successfully exploited this vulnerability could bypass the SmartScreen user experience.” CVE-2024-38193 – An elevation of privilege security defect in the Windows Ancillary Function Driver for WinSock is being exploited in the wild.
Microsoft Patches Zero-Click Outlook Vulnerability That Could …
Jun 12, 2024 · One of the vulnerabilities that Microsoft addressed as part of its June 2024 Patch Tuesday updates could be exploited to achieve remote code execution (RCE) without user interaction, Morphisec warns.. Tracked as CVE-2024-30103 (CVSS score of 8.8), the security defect allows attackers to bypass Outlook registry block lists and create malicious DLL files, Microsoft says in its advisory.
Deepfakes Are a Growing Threat to Cybersecurity and Society: …
May 3, 2022 · Deepfakes, left unchecked, are set to become the cybercriminals’ next big weapon. Deepfake technology uses artificial intelligence techniques to alter existing or create new audio or audio-visual content.
Microsoft Confirms Exploited Zero-Day in Windows Management …
Oct 8, 2024 · The MSHTML platform is used by Internet Explorer mode in Microsoft Edge as well as other applications through WebBrowser control and has been regularly targeted by ransomware and nation-state APT hacking teams.. The world’s largest software maker also urged Windows users to prioritize fixes for remote code execution bugs in the Microsoft Configuration Manager (CVE-2024-43468) and Remote ...
Phishing Campaign Exploited Proofpoint Email Protections for …
Jul 29, 2024 · However, if the customer has configured a generic Office365 account, any Office365 account can interact with the Proofpoint relay server and because Exchange is configured to blindly relay emails without altering them, the threat actors exploited this super-permissive misconfiguration flaw to generate spoofed emails that Proofpoint’s servers would accept and process.
US, Allies Release Guidance on Securing OT Environments
Oct 2, 2024 · New guidance from government agencies in the US and allied countries provides organizations with details on how to design, implement, and manage safe and secure operational technology (OT) environments.