Endpoint Security - Security Ticks

Attackers deploying red teaming tool for EDR evasion

Binary Defense, ConnectWise, Don't miss, Endpoint Security, ExtraHop, Hot stuff, Intel 471, News, SentinelOne, Sophos, threat detection, Trend Micro / SecurityTicks

Attackers deploying red teaming tool for EDR evasion 2024-10-15 at 17:16 By Zeljka Zorz Threat actors are leveraging the open-source EDRSilencer tool to evade endpoint detection and response systems, Trend Micro researchers have noticed. About EDRSilencer The software, which is intended for red teaming, is being abused to “silence” EDR solutions. It works by leveraging […]

React to this headline:

Attackers deploying red teaming tool for EDR evasion Read More »

Controversial Windows Recall AI Search Tool Returns With Proof-of-Presence Encryption, Data Isolation

Artificial Intelligence, Encryption, Endpoint Security, Featured, Microsoft, Privacy & Compliance, Proof-of-Presence, Windows Hello, Windows Recall / SecurityTicks

Controversial Windows Recall AI Search Tool Returns With Proof-of-Presence Encryption, Data Isolation 2024-09-27 at 21:01 By Ryan Naraine Microsoft reboots controversial Windows Recall with proof-of-presence encryption, anti-tampering checks, and secure enclave data management. The post Controversial Windows Recall AI Search Tool Returns With Proof-of-Presence Encryption, Data Isolation appeared first on SecurityWeek. This article is an

React to this headline:

Controversial Windows Recall AI Search Tool Returns With Proof-of-Presence Encryption, Data Isolation Read More »

Kaspersky, Pango Respond to User Backlash as Transition to UltraAV Nearly Complete

antivirus, Endpoint Security, Kaspersky, Pango, UltraAV / SecurityTicks

Kaspersky, Pango Respond to User Backlash as Transition to UltraAV Nearly Complete 2024-09-27 at 13:31 By Ionut Arghire Users continue to flame Kaspersky and Pango Group as the automatic, forced transition to UltraAV gradually progresses. The post Kaspersky, Pango Respond to User Backlash as Transition to UltraAV Nearly Complete appeared first on SecurityWeek. This article

React to this headline:

Kaspersky, Pango Respond to User Backlash as Transition to UltraAV Nearly Complete Read More »

Users Quick to Remove UltraAV After Silent Transition From Kaspersky Antivirus

antivirus, controversy, Endpoint Security, Kaspersky, UltraAV / SecurityTicks

Users Quick to Remove UltraAV After Silent Transition From Kaspersky Antivirus 2024-09-24 at 14:01 By Ionut Arghire Many US users are voicing concerns over the silent, forced transition from Kaspersky’s security products to UltraAV. The post Users Quick to Remove UltraAV After Silent Transition From Kaspersky Antivirus appeared first on SecurityWeek. This article is an

React to this headline:

Users Quick to Remove UltraAV After Silent Transition From Kaspersky Antivirus Read More »

Cybersecurity Products Conking Out After macOS Sequoia Update

buggy update, Endpoint Security, Featured, macOS, security product / SecurityTicks

Cybersecurity Products Conking Out After macOS Sequoia Update 2024-09-23 at 15:01 By Ionut Arghire macOS Sequoia updates are causing cybersecurity software failures and breaking network connectivity for many. The post Cybersecurity Products Conking Out After macOS Sequoia Update appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React

React to this headline:

Cybersecurity Products Conking Out After macOS Sequoia Update Read More »

Post-CrowdStrike Fallout: Microsoft Redesigning EDR Vendor Access to Windows Kernel

CrowdStrike, EDR, Endpoint Security, Featured, kernel, Microsoft, Windows / SecurityTicks

Post-CrowdStrike Fallout: Microsoft Redesigning EDR Vendor Access to Windows Kernel 2024-09-13 at 21:45 By Ryan Naraine Microsoft is revamping how anti-malware tools interact with the Windows kernel to avoid another CrowdStrike faulty update catastrophe. The post Post-CrowdStrike Fallout: Microsoft Redesigning EDR Vendor Access to Windows Kernel appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Post-CrowdStrike Fallout: Microsoft Redesigning EDR Vendor Access to Windows Kernel Read More »

New RAMBO Attack Allows Air-Gapped Data Theft via RAM Radio Signals

air gap, Endpoint Security, RAM / SecurityTicks

New RAMBO Attack Allows Air-Gapped Data Theft via RAM Radio Signals 2024-09-09 at 16:32 By Ionut Arghire An academic researcher has devised a new method of exfiltrating data from air-gapped systems using radio signals from memory buses. The post New RAMBO Attack Allows Air-Gapped Data Theft via RAM Radio Signals appeared first on SecurityWeek. This

React to this headline:

New RAMBO Attack Allows Air-Gapped Data Theft via RAM Radio Signals Read More »

One Million US Kaspersky Customers Transferred to Pango’s UltraAV

antivirus, Endpoint Security, Featured, Kaspersky, UltraAV / SecurityTicks

One Million US Kaspersky Customers Transferred to Pango’s UltraAV 2024-09-09 at 13:31 By Eduard Kovacs Kaspersky’s customers in the US are being acquired by cybersecurity firm Pango and will be offered UltraAV antimalware software. The post One Million US Kaspersky Customers Transferred to Pango’s UltraAV appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

One Million US Kaspersky Customers Transferred to Pango’s UltraAV Read More »

Intel Responds to SGX Hacking Research

Encryption, Endpoint Security, Featured, Intel, SGX / SecurityTicks

Intel Responds to SGX Hacking Research 2024-09-03 at 14:01 By Eduard Kovacs Intel has shared some clarifications on claims made by a researcher regarding the hacking of its SGX security technology. The post Intel Responds to SGX Hacking Research appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

React to this headline:

Intel Responds to SGX Hacking Research Read More »

CrowdStrike Estimates the Tech Meltdown Caused by Its Bungling Left a $60 Million Dent in Its Sales

CrowdStrike, Endpoint Security / SecurityTicks

CrowdStrike Estimates the Tech Meltdown Caused by Its Bungling Left a $60 Million Dent in Its Sales 2024-08-29 at 06:01 By Associated Press Massive outage spooked customers that had been expected to close deals totaling $60 million during the final few weeks of CrowdStrike’s fiscal Q2. The post CrowdStrike Estimates the Tech Meltdown Caused by

React to this headline:

CrowdStrike Estimates the Tech Meltdown Caused by Its Bungling Left a $60 Million Dent in Its Sales Read More »

Microsoft Convenes Endpoint Security Firms Following CrowdStrike Incident

CrowdStrike, Endpoint, Endpoint Security, Microsoft / SecurityTicks

Microsoft Convenes Endpoint Security Firms Following CrowdStrike Incident 2024-08-27 at 16:31 By Eduard Kovacs Microsoft has called together cybersecurity firms and government representatives for its Windows Endpoint Security Ecosystem Summit. The post Microsoft Convenes Endpoint Security Firms Following CrowdStrike Incident appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original

React to this headline:

Microsoft Convenes Endpoint Security Firms Following CrowdStrike Incident Read More »

AMD Says New Sinkclose CPU Vulnerability Only Affects ‘Seriously Breached Systems’

Amd, CPU vulnerability, Endpoint Security, Sinkclose / SecurityTicks

AMD Says New Sinkclose CPU Vulnerability Only Affects ‘Seriously Breached Systems’ 2024-08-13 at 13:46 By Eduard Kovacs Many AMD CPUs are affected by the new Sinkclose vulnerability, but the chipmaker noted that the flaw is not easy to exploit. The post AMD Says New Sinkclose CPU Vulnerability Only Affects ‘Seriously Breached Systems’ appeared first on

React to this headline:

AMD Says New Sinkclose CPU Vulnerability Only Affects ‘Seriously Breached Systems’ Read More »

Microsoft Warns of OpenVPN Vulnerabilities, Potential for Exploit Chains

Endpoint Security, Microsoft, OpenVPN, remote code execution, VPN, Vulnerabilities / SecurityTicks

Microsoft Warns of OpenVPN Vulnerabilities, Potential for Exploit Chains 2024-08-12 at 19:01 By Ryan Naraine The vulnerabilities, patched in OpenVPN 2.6.10, expose users on the Windows platform to remote code execution attacks. The post Microsoft Warns of OpenVPN Vulnerabilities, Potential for Exploit Chains appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Microsoft Warns of OpenVPN Vulnerabilities, Potential for Exploit Chains Read More »

GhostWrite Vulnerability Facilitates Attacks on Devices With RISC-V CPU

CPU, CPU vulnerability, Endpoint Security, GhostWrite, RISC-V, Vulnerabilities / SecurityTicks

GhostWrite Vulnerability Facilitates Attacks on Devices With RISC-V CPU 2024-08-07 at 22:16 By Eduard Kovacs Researchers disclose the details of GhostWrite, a RISC-V CPU vulnerability that can be exploited to gain full access to targeted devices. The post GhostWrite Vulnerability Facilitates Attacks on Devices With RISC-V CPU appeared first on SecurityWeek. This article is an

React to this headline:

GhostWrite Vulnerability Facilitates Attacks on Devices With RISC-V CPU Read More »

CrowdStrike engages external experts, details causes of massive outage

CrowdStrike, Don't miss, EFF, Endpoint Security, Hot stuff, Microsoft, News, product testing, security review / SecurityTicks

CrowdStrike engages external experts, details causes of massive outage 2024-08-07 at 16:01 By Zeljka Zorz CrowdStrike has published a technical root cause analysis of what went wrong when a content update pushed to its Falcon sensors borked over 8.5 million Windows machines around the world on July 19, and has confirmed that it has hired

React to this headline:

CrowdStrike engages external experts, details causes of massive outage Read More »

Some good may come out of the CrowdStrike outage

Bitdefender, CrowdStrike, Don't miss, Endpoint Security, Fortinet, fraud, Hot stuff, Malware, Microsoft, News, SecureWorks, Trellix, UpGuard, Windows / SecurityTicks

Some good may come out of the CrowdStrike outage 2024-07-29 at 19:31 By Zeljka Zorz Estimated financial losses due to the recent massive IT outage triggered by the faulty CrowdStrike update are counted in billions, but the unfortunate incident is having several positive effects, as well. Some silver linings As CrowdStrike was forced to explain,

React to this headline:

Some good may come out of the CrowdStrike outage Read More »

CrowdStrike Explains Why Bad Update Was Not Properly Tested

CrowdStrike, disaster recovery, Endpoint Security, Featured, Incident Response / SecurityTicks

CrowdStrike Explains Why Bad Update Was Not Properly Tested 2024-07-24 at 14:16 By Eduard Kovacs CrowdStrike has shared a preliminary incident review, explaining why the update that caused global chaos was not caught by testing. The post CrowdStrike Explains Why Bad Update Was Not Properly Tested appeared first on SecurityWeek. This article is an excerpt

React to this headline:

CrowdStrike Explains Why Bad Update Was Not Properly Tested Read More »

KnowBe4 Hires Fake North Korean IT Worker, Catches New Employee Planting Malware

Artificial Intelligence, deepfakes, Endpoint Security, KnowBe4, Lazarus, Nation-State, North Korea / SecurityTicks

KnowBe4 Hires Fake North Korean IT Worker, Catches New Employee Planting Malware 2024-07-24 at 05:16 By Ryan Naraine KnowBe4 chief executive Stu Sjouwerman: “We sent them their Mac workstation, and the moment it was received, it immediately started to load malware.” The post KnowBe4 Hires Fake North Korean IT Worker, Catches New Employee Planting Malware

React to this headline:

KnowBe4 Hires Fake North Korean IT Worker, Catches New Employee Planting Malware Read More »

Microsoft Says 8.5 Million Windows Devices Impacted by CrowdStrike Incident, Publishes Recovery Tool

CrowdStrike, Endpoint Security, Featured, Incident Response, Microsoft, outage, tool / SecurityTicks

Microsoft Says 8.5 Million Windows Devices Impacted by CrowdStrike Incident, Publishes Recovery Tool 2024-07-21 at 16:31 By Mike Lennon Microsoft says roughly 8.5 million Windows devices were impacted by the faulty software update from CrowdStrike, and published a tool to help admins through the recovery process. The post Microsoft Says 8.5 Million Windows Devices Impacted

React to this headline:

Microsoft Says 8.5 Million Windows Devices Impacted by CrowdStrike Incident, Publishes Recovery Tool Read More »

Faulty CrowdStrike update takes out Windows machines worldwide

Australia, CrowdStrike, Don't miss, Endpoint Security, Europe, Hot stuff, News, UK, USA, Windows / SecurityTicks

Faulty CrowdStrike update takes out Windows machines worldwide 2024-07-19 at 11:31 By Zeljka Zorz Thousands and possibly millions of Windows computers and servers worldwide have been made inoperable by a faulty update of Crowdstrike Falcon Sensors, and the outage affected transport, broadcast, financial, retail and other organizations have been affected in Europe, Australia, the US

React to this headline:

Faulty CrowdStrike update takes out Windows machines worldwide Read More »