August 2024

New Malware Hits 300,000 Users with Rogue Chrome and Edge Extensions 2024-08-10 at 18:32 By An ongoing, widespread malware campaign has been observed installing rogue Google Chrome and Microsoft Edge extensions via a trojan distributed via fake websites masquerading as popular software. “The trojan malware contains different deliverables ranging from simple adware extensions that hijack […]

React to this headline:

Microsoft Warns of Unpatched Office Vulnerability Leading to Data Breaches 2024-08-10 at 08:45 By Microsoft has disclosed an unpatched zero-day in Office that, if successfully exploited, could result in unauthorized disclosure of sensitive information to malicious actors. The vulnerability, tracked as CVE-2024-38200 (CVSS score: 7.5), has been described as a spoofing flaw that affects the

React to this headline:

Twilio’s Segment SDK challenged with wiretapping claim 2024-08-10 at 02:31 By Thomas Claburn Mobile app analytics software said to surreptitiously snarf data Twilio, a communications service provider, was sued on Thursday based on allegations that the developer’s Segment software siphons data from mobile apps without consent.… This article is an excerpt from The Register View

React to this headline:

Experts Uncover Severe AWS Flaws Leading to RCE, Data Theft, and Full-Service Takeovers 2024-08-10 at 01:46 By Cybersecurity researchers have discovered multiple critical flaws in Amazon Web Services (AWS) offerings that, if successfully exploited, could result in serious consequences. “The impact of these vulnerabilities range between remote code execution (RCE), full-service user takeover (which might

React to this headline:

Raptor Lake microcode limits Intel chips to a mere 1.55 volts to prevent CPU destruction 2024-08-09 at 22:31 By Matthew Connatser Is that a lot? Depends on the context. GHz, no. Voltage, yes Intel has divulged more details on its Raptor Lake family of 13th and 14th Gen Core processor failures and the 0x129 microcode

React to this headline:

Microsoft Reveals Four OpenVPN Flaws Leading to Potential RCE and LPE 2024-08-09 at 22:01 By Microsoft on Thursday disclosed four medium-severity security flaws in the open-source OpenVPN software that could be chained to achieve remote code execution (RCE) and local privilege escalation (LPE). “This attack chain could enable attackers to gain full control over targeted

React to this headline:

Intel’s annus horribilis continues as AMD gains ground 2024-08-09 at 20:32 By Dan Robinson Rival making its biggest inroads in server CPU segment The bad news for Intel keeps coming as rival AMD is slowly chipping away at its dominance in server, desktop and mobile processors, although the industry giant still holds onto the lion’s

React to this headline:

Secure Web Gateways are anything but as infosec hounds spot dozens of bypasses 2024-08-09 at 19:17 By Brandon Vigliarolo ‘Vendors can fix’ this architectural failure, SquareX founder tells us Defcon  Secure Web Gateways (SWGs) are an essential part of enterprise security, which makes it shocking to learn that every single SWG in the Gartner Magic

React to this headline:

FCC proposes consumer protections for AI-generated robocalls 2024-08-09 at 19:17 By The FCC proposed a first-of-their-kind ruling on AI-generated robocalls and robotexts.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

Microsoft really wants those old Exchange 2016 servers put out to pasture 2024-08-09 at 18:16 By Richard Speed Come to 2019. The in-place upgrades to the Subscription Edition will be lovely Microsoft is getting serious about the impending end of extended support for Exchange 2016 and has published a guide on stripping the product from

React to this headline:

Software innovation just isn’t what it used to be, and Moxie Marlinspike blames Agile 2024-08-09 at 17:16 By Brandon Vigliarolo Layers of abstraction and speedy development have left engineers unable to understand what lies beneath black hat  There’s a rot at the heart of modern software development that’s destroying innovation, and infosec legend Moxie Marlinspike

React to this headline:

New Flaws in Sonos Smart Speakers Allow Hackers to Eavesdrop on Users 2024-08-09 at 17:16 By Cybersecurity researchers have uncovered weaknesses in Sonos smart speakers that could be exploited by malicious actors to clandestinely eavesdrop on users. The vulnerabilities “led to an entire break in the security of Sonos’s secure boot process across a wide

React to this headline:

Pro-Iran groups lay groundwork for ‘chaos and violence’ as US election meddling intensifies 2024-08-09 at 16:16 By Connor Jones Political officials, advisors targeted in cyber attacks as fake news sites deliver lefty zingers Microsoft says Iran’s efforts to influence the November US presidential election have gathered pace recently and there are signs that point toward

React to this headline: