Experimental News Clipping Site

Tag: attack

  • CSA: Unpacking the LastPass Hack: A Case Study

    —

    by

    Kurt Seifried
    in

    Source URL: https://insidersecurity.co/lastpass-hack-illustrative-case-study/ Source: CSA Title: Unpacking the LastPass Hack: A Case Study Feedly Summary: AI Summary and Description: Yes Summary: The text provides an in-depth analysis of the LastPass hack, emphasizing the importance of security practices in cloud computing and software services. It discusses the vulnerabilities exploited during the breach, the implications of the…

  • NCSC Feed: Passkeys: they’re not perfect but they’re getting better

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.ncsc.gov.uk/blog-post/passkeys-not-perfect-getting-better Source: NCSC Feed Title: Passkeys: they’re not perfect but they’re getting better Feedly Summary: Passkeys are the future of authentication, offering enhanced security and convenience over passwords, but widespread adoption faces challenges that the NCSC is working to resolve. AI Summary and Description: Yes Summary: The text discusses the emergence of passkeys…

  • Alerts: Fortinet Releases Security Updates for Multiple Products

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2025/01/14/fortinet-releases-security-updates-multiple-products Source: Alerts Title: Fortinet Releases Security Updates for Multiple Products Feedly Summary: Fortinet released security updates to address vulnerabilities in multiple Fortinet products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following and apply necessary…

  • Alerts: Microsoft Releases January 2025 Security Updates

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2025/01/14/microsoft-releases-january-2025-security-updates Source: Alerts Title: Microsoft Releases January 2025 Security Updates Feedly Summary: Microsoft released security updates to address vulnerabilities in multiple Microsoft products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system.  CISA encourages users and administrators to review the following and apply necessary updates:…

  • The Register: Microsoft fixes under-attack privilege-escalation holes in Hyper-V

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/15/patch_tuesday_january_2025/ Source: The Register Title: Microsoft fixes under-attack privilege-escalation holes in Hyper-V Feedly Summary: Plus: Excel hell, angst for Adobe fans, and life’s too Snort for Cisco Patch Tuesday The first Patch Tuesday of 2025 has seen Microsoft address three under-attack privilege-escalation flaws in its Hyper-V hypervisor, plus plenty more problems that deserve…

  • Krebs on Security: Microsoft: Happy 2025. Here’s 161 Security Updates

    —

    by

    Kurt Seifried
    in

    Source URL: https://krebsonsecurity.com/2025/01/microsoft-happy-2025-heres-161-security-updates/ Source: Krebs on Security Title: Microsoft: Happy 2025. Here’s 161 Security Updates Feedly Summary: Microsoft today unleashed updates to plug a whopping 161 security vulnerabilities in Windows and related software, including three “zero-day" weaknesses that are already under active attack. Redmond’s inaugural Patch Tuesday of 2025 bundles more fixes than the company…

  • Alerts: CISA Adds Four Known Exploited Vulnerabilities to Catalog

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2025/01/14/cisa-adds-four-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Four Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added four vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-55591 Fortinet FortiOS Authorization Bypass Vulnerability CVE-2025-21333 Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability CVE-2025-21334 Microsoft Windows Hyper-V NT…

  • The Register: FBI wipes Chinese PlugX malware from thousands of Windows PCs in America

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/14/fbi_french_cops_boot_chinas/ Source: The Register Title: FBI wipes Chinese PlugX malware from thousands of Windows PCs in America Feedly Summary: Hey, Xi: Zài jiàn! The FBI, working with French cops, obtained nine warrants to remotely wipe PlugX malware from thousands of Windows-based computers that had been infected by Chinese government-backed criminals, according to newly…

  • Microsoft Security Blog: 3 takeaways from red teaming 100 generative AI products

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.microsoft.com/en-us/security/blog/2025/01/13/3-takeaways-from-red-teaming-100-generative-ai-products/ Source: Microsoft Security Blog Title: 3 takeaways from red teaming 100 generative AI products Feedly Summary: Since 2018, Microsoft’s AI Red Team has probed generative AI products for critical safety and security vulnerabilities. Read our latest blog for three lessons we’ve learned along the way. The post 3 takeaways from red teaming…

  • Microsoft Security Blog: Analyzing CVE-2024-44243, a macOS System Integrity Protection bypass through kernel extensions

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.microsoft.com/en-us/security/blog/2025/01/13/analyzing-cve-2024-44243-a-macos-system-integrity-protection-bypass-through-kernel-extensions/ Source: Microsoft Security Blog Title: Analyzing CVE-2024-44243, a macOS System Integrity Protection bypass through kernel extensions Feedly Summary: Microsoft discovered a macOS vulnerability allowing attackers to bypass System Integrity Protection (SIP) by loading third party kernel extensions, which could lead to serious consequences, such as allowing attackers to install rootkits, create persistent…