Endpoint Security - Security Ticks

One Million US Kaspersky Customers Transferred to Pango’s UltraAV

antivirus, Endpoint Security, Featured, Kaspersky, UltraAV / SecurityTicks

One Million US Kaspersky Customers Transferred to Pango’s UltraAV 2024-09-09 at 13:31 By Eduard Kovacs Kaspersky’s customers in the US are being acquired by cybersecurity firm Pango and will be offered UltraAV antimalware software. The post One Million US Kaspersky Customers Transferred to Pango’s UltraAV appeared first on SecurityWeek. This article is an excerpt from […]

React to this headline:

One Million US Kaspersky Customers Transferred to Pango’s UltraAV Read More »

Intel Responds to SGX Hacking Research

Encryption, Endpoint Security, Featured, Intel, SGX / SecurityTicks

Intel Responds to SGX Hacking Research 2024-09-03 at 14:01 By Eduard Kovacs Intel has shared some clarifications on claims made by a researcher regarding the hacking of its SGX security technology. The post Intel Responds to SGX Hacking Research appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

React to this headline:

Intel Responds to SGX Hacking Research Read More »

CrowdStrike Estimates the Tech Meltdown Caused by Its Bungling Left a $60 Million Dent in Its Sales

CrowdStrike, Endpoint Security / SecurityTicks

CrowdStrike Estimates the Tech Meltdown Caused by Its Bungling Left a $60 Million Dent in Its Sales 2024-08-29 at 06:01 By Associated Press Massive outage spooked customers that had been expected to close deals totaling $60 million during the final few weeks of CrowdStrike’s fiscal Q2. The post CrowdStrike Estimates the Tech Meltdown Caused by

React to this headline:

CrowdStrike Estimates the Tech Meltdown Caused by Its Bungling Left a $60 Million Dent in Its Sales Read More »

Microsoft Convenes Endpoint Security Firms Following CrowdStrike Incident

CrowdStrike, Endpoint, Endpoint Security, Microsoft / SecurityTicks

Microsoft Convenes Endpoint Security Firms Following CrowdStrike Incident 2024-08-27 at 16:31 By Eduard Kovacs Microsoft has called together cybersecurity firms and government representatives for its Windows Endpoint Security Ecosystem Summit. The post Microsoft Convenes Endpoint Security Firms Following CrowdStrike Incident appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original

React to this headline:

Microsoft Convenes Endpoint Security Firms Following CrowdStrike Incident Read More »

AMD Says New Sinkclose CPU Vulnerability Only Affects ‘Seriously Breached Systems’

Amd, CPU vulnerability, Endpoint Security, Sinkclose / SecurityTicks

AMD Says New Sinkclose CPU Vulnerability Only Affects ‘Seriously Breached Systems’ 2024-08-13 at 13:46 By Eduard Kovacs Many AMD CPUs are affected by the new Sinkclose vulnerability, but the chipmaker noted that the flaw is not easy to exploit. The post AMD Says New Sinkclose CPU Vulnerability Only Affects ‘Seriously Breached Systems’ appeared first on

React to this headline:

AMD Says New Sinkclose CPU Vulnerability Only Affects ‘Seriously Breached Systems’ Read More »

Microsoft Warns of OpenVPN Vulnerabilities, Potential for Exploit Chains

Endpoint Security, Microsoft, OpenVPN, remote code execution, VPN, Vulnerabilities / SecurityTicks

Microsoft Warns of OpenVPN Vulnerabilities, Potential for Exploit Chains 2024-08-12 at 19:01 By Ryan Naraine The vulnerabilities, patched in OpenVPN 2.6.10, expose users on the Windows platform to remote code execution attacks. The post Microsoft Warns of OpenVPN Vulnerabilities, Potential for Exploit Chains appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Microsoft Warns of OpenVPN Vulnerabilities, Potential for Exploit Chains Read More »

GhostWrite Vulnerability Facilitates Attacks on Devices With RISC-V CPU

CPU, CPU vulnerability, Endpoint Security, GhostWrite, RISC-V, Vulnerabilities / SecurityTicks

GhostWrite Vulnerability Facilitates Attacks on Devices With RISC-V CPU 2024-08-07 at 22:16 By Eduard Kovacs Researchers disclose the details of GhostWrite, a RISC-V CPU vulnerability that can be exploited to gain full access to targeted devices. The post GhostWrite Vulnerability Facilitates Attacks on Devices With RISC-V CPU appeared first on SecurityWeek. This article is an

React to this headline:

GhostWrite Vulnerability Facilitates Attacks on Devices With RISC-V CPU Read More »

CrowdStrike engages external experts, details causes of massive outage

CrowdStrike, Don't miss, EFF, Endpoint Security, Hot stuff, Microsoft, News, product testing, security review / SecurityTicks

CrowdStrike engages external experts, details causes of massive outage 2024-08-07 at 16:01 By Zeljka Zorz CrowdStrike has published a technical root cause analysis of what went wrong when a content update pushed to its Falcon sensors borked over 8.5 million Windows machines around the world on July 19, and has confirmed that it has hired

React to this headline:

CrowdStrike engages external experts, details causes of massive outage Read More »

Some good may come out of the CrowdStrike outage

Bitdefender, CrowdStrike, Don't miss, Endpoint Security, Fortinet, fraud, Hot stuff, Malware, Microsoft, News, SecureWorks, Trellix, UpGuard, Windows / SecurityTicks

Some good may come out of the CrowdStrike outage 2024-07-29 at 19:31 By Zeljka Zorz Estimated financial losses due to the recent massive IT outage triggered by the faulty CrowdStrike update are counted in billions, but the unfortunate incident is having several positive effects, as well. Some silver linings As CrowdStrike was forced to explain,

React to this headline:

Some good may come out of the CrowdStrike outage Read More »

CrowdStrike Explains Why Bad Update Was Not Properly Tested

CrowdStrike, disaster recovery, Endpoint Security, Featured, Incident Response / SecurityTicks

CrowdStrike Explains Why Bad Update Was Not Properly Tested 2024-07-24 at 14:16 By Eduard Kovacs CrowdStrike has shared a preliminary incident review, explaining why the update that caused global chaos was not caught by testing. The post CrowdStrike Explains Why Bad Update Was Not Properly Tested appeared first on SecurityWeek. This article is an excerpt

React to this headline:

CrowdStrike Explains Why Bad Update Was Not Properly Tested Read More »

KnowBe4 Hires Fake North Korean IT Worker, Catches New Employee Planting Malware

Artificial Intelligence, deepfakes, Endpoint Security, KnowBe4, Lazarus, Nation-State, North Korea / SecurityTicks

KnowBe4 Hires Fake North Korean IT Worker, Catches New Employee Planting Malware 2024-07-24 at 05:16 By Ryan Naraine KnowBe4 chief executive Stu Sjouwerman: “We sent them their Mac workstation, and the moment it was received, it immediately started to load malware.” The post KnowBe4 Hires Fake North Korean IT Worker, Catches New Employee Planting Malware

React to this headline:

KnowBe4 Hires Fake North Korean IT Worker, Catches New Employee Planting Malware Read More »

Microsoft Says 8.5 Million Windows Devices Impacted by CrowdStrike Incident, Publishes Recovery Tool

CrowdStrike, Endpoint Security, Featured, Incident Response, Microsoft, outage, tool / SecurityTicks

Microsoft Says 8.5 Million Windows Devices Impacted by CrowdStrike Incident, Publishes Recovery Tool 2024-07-21 at 16:31 By Mike Lennon Microsoft says roughly 8.5 million Windows devices were impacted by the faulty software update from CrowdStrike, and published a tool to help admins through the recovery process. The post Microsoft Says 8.5 Million Windows Devices Impacted

React to this headline:

Microsoft Says 8.5 Million Windows Devices Impacted by CrowdStrike Incident, Publishes Recovery Tool Read More »

Faulty CrowdStrike update takes out Windows machines worldwide

Australia, CrowdStrike, Don't miss, Endpoint Security, Europe, Hot stuff, News, UK, USA, Windows / SecurityTicks

Faulty CrowdStrike update takes out Windows machines worldwide 2024-07-19 at 11:31 By Zeljka Zorz Thousands and possibly millions of Windows computers and servers worldwide have been made inoperable by a faulty update of Crowdstrike Falcon Sensors, and the outage affected transport, broadcast, financial, retail and other organizations have been affected in Europe, Australia, the US

React to this headline:

Faulty CrowdStrike update takes out Windows machines worldwide Read More »

Intel Says No New Mitigations Required for Indirector CPU Attack

CPU vulnerability, Endpoint Security, Indirector, Intel / SecurityTicks

Intel Says No New Mitigations Required for Indirector CPU Attack 2024-07-03 at 13:31 By Eduard Kovacs Researchers disclosed a new high-precision Branch Target Injection attack method named Indirector, but Intel says no new mitigations are needed. The post Intel Says No New Mitigations Required for Indirector CPU Attack appeared first on SecurityWeek. This article is

React to this headline:

Intel Says No New Mitigations Required for Indirector CPU Attack Read More »

Hundreds of PC, Server Models Possibly Affected by Serious Phoenix UEFI Vulnerability

Endpoint Security, UEFI, vulnerability / SecurityTicks

Hundreds of PC, Server Models Possibly Affected by Serious Phoenix UEFI Vulnerability 2024-06-20 at 16:46 By Eduard Kovacs Hundreds of PC and server models may be affected by CVE-2024-0762, a privilege escalation and code execution flaw in Phoenix SecureCore UEFI firmware. The post Hundreds of PC, Server Models Possibly Affected by Serious Phoenix UEFI Vulnerability

React to this headline:

Hundreds of PC, Server Models Possibly Affected by Serious Phoenix UEFI Vulnerability Read More »

New TikTag Attack Targets Arm CPU Security Feature

Arm, CPU, CPU vulnerability, Endpoint Security, Featured / SecurityTicks

New TikTag Attack Targets Arm CPU Security Feature 2024-06-18 at 19:45 By Eduard Kovacs Researchers have targeted the MTE security feature in Arm CPUs and showed how attackers could bypass protections. The post New TikTag Attack Targets Arm CPU Security Feature appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

New TikTag Attack Targets Arm CPU Security Feature Read More »

Microsoft Delaying Recall Feature to Improve Security

AI, Artificial Intelligence, Endpoint Security, Featured, Microsoft, Privacy, Windows Recall / SecurityTicks

Microsoft Delaying Recall Feature to Improve Security 2024-06-14 at 13:46 By Eduard Kovacs Microsoft is not rolling out Recall with Copilot+ PCs as it’s seeking additional feedback and working on improving security. The post Microsoft Delaying Recall Feature to Improve Security appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

Microsoft Delaying Recall Feature to Improve Security Read More »

Upleveling the State of SMB Cybersecurity

Endpoint Security, Management & Strategy, SMB / SecurityTicks

Upleveling the State of SMB Cybersecurity 2024-06-06 at 14:46 By Torsten George Gone are the days when cyberattacks were deemed concerns solely by corporate giants. The post Upleveling the State of SMB Cybersecurity appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to this headline:

React to this headline:

Upleveling the State of SMB Cybersecurity Read More »

No summer break for cybercrime: Why educational institutions need better cyber resilience

cyber resilience, cybercrime, cybersecurity, Don't miss, education, Endpoint Security, Expert analysis, Expert corner, Hot stuff, News, opinion, Tanium / SecurityTicks

No summer break for cybercrime: Why educational institutions need better cyber resilience 2024-06-05 at 07:31 By Help Net Security The education system isn’t equipped to handle today’s cyberthreats. I’m not just talking about cybersecurity education in schools shaping the technical workforce of the future – America’s schools themselves are prime targets for cybercrime today. In

React to this headline:

No summer break for cybercrime: Why educational institutions need better cyber resilience Read More »

Microsoft’s Windows Recall: Cutting-Edge Search Tech or Creepy Overreach?

AI/ML, Artificial Intelligence, ChatGPT, Data Protection, Endpoint Security, Microsoft, Windows Recall / SecurityTicks

Microsoft’s Windows Recall: Cutting-Edge Search Tech or Creepy Overreach? 2024-05-30 at 20:31 By Ryan Naraine SecurityWeek editor-at-large Ryan Naraine examines the broad tension between tech innovation and privacy rights at a time when ChatGPT-like bots and generative-AI apps are starting to dominate the landscape. The post Microsoft’s Windows Recall: Cutting-Edge Search Tech or Creepy Overreach?

React to this headline:

Microsoft’s Windows Recall: Cutting-Edge Search Tech or Creepy Overreach? Read More »