Vulnerabilities Patched in CrowdStrike, Tenable Products 2026-04-24 at 13:17 By Eduard Kovacs CrowdStrike has fixed a critical LogScale vulnerability, while Tenable addressed a high-severity Nessus flaw. The post Vulnerabilities Patched in CrowdStrike, Tenable Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Vulnerabilities Patched in CrowdStrike, Tenable Products Read More »
GPUBreach: Root Shell Access Achieved via GPU Rowhammer Attack 2026-04-07 at 14:58 By Eduard Kovacs Researchers have demonstrated that GPU Rowhammer attacks can be used to escalate privileges. The post GPUBreach: Root Shell Access Achieved via GPU Rowhammer Attack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
GPUBreach: Root Shell Access Achieved via GPU Rowhammer Attack Read More »
Dell and HP Roll Out Quantum-Resistant Device Security and AI-Era Cyber Resilience 2026-03-26 at 10:57 By Eduard Kovacs The computer giants have announced new security capabilities for PCs and printers. The post Dell and HP Roll Out Quantum-Resistant Device Security and AI-Era Cyber Resilience appeared first on SecurityWeek. This article is an excerpt from SecurityWeek
Dell and HP Roll Out Quantum-Resistant Device Security and AI-Era Cyber Resilience Read More »
iOS, macOS 26.4 Roll Out With Fresh Security Patches 2026-03-25 at 18:18 By Ionut Arghire Apple released security fixes for older devices as well, in iOS 18.7.7, iPadOS 18.7.7, macOS Sequoia 15.7.5, and macOS Sonoma 14.8.5. The post iOS, macOS 26.4 Roll Out With Fresh Security Patches appeared first on SecurityWeek. This article is an
iOS, macOS 26.4 Roll Out With Fresh Security Patches Read More »
1stProtect Emerges From Stealth With $20 Million in Funding 2026-03-19 at 22:27 By Ionut Arghire The company’s endpoint security platform monitors behavior and verifies user intent to stop cyberattacks in real time. The post 1stProtect Emerges From Stealth With $20 Million in Funding appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View
1stProtect Emerges From Stealth With $20 Million in Funding Read More »
Secure endpoint management systems immediately, CISA urges 2026-03-19 at 14:59 By Sinisa Markovic The US Cybersecurity and Infrastructure Security Agency (CISA) warns that the cyberattack on Stryker Corporation serves as a signal to U.S. organizations that foreign cyber activity tied to Middle East conflicts may be spilling into their operations. Attackers breached Stryker’s internal Microsoft
Secure endpoint management systems immediately, CISA urges Read More »
Apple Debuts Background Security Improvements With Fresh WebKit Patches 2026-03-18 at 14:49 By Ionut Arghire The lightweight updates are meant to deliver security protections between security updates. The post Apple Debuts Background Security Improvements With Fresh WebKit Patches appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Apple Debuts Background Security Improvements With Fresh WebKit Patches Read More »
Stop fixing OT security with IT thinking 2026-03-12 at 08:35 By Mirko Zorz In this Help Net Security interview, Ejona Preçi, Group CISO at Lindal Group, discusses the specific cybersecurity challenges in manufacturing environments. The conversation covers why standard IT security practices break down on shop floors, where PLCs and decade-old firmware were never designed
Stop fixing OT security with IT thinking Read More »
‘BlackSanta’ Malware Activates EDR and AV Killer Before Detonating Payload 2026-03-11 at 11:42 By Kevin Townsend The malware disables antivirus and EDR protections at the kernel level, clearing the path for credential harvesting, system reconnaissance, and eventual data exfiltration. The post ‘BlackSanta’ Malware Activates EDR and AV Killer Before Detonating Payload appeared first on SecurityWeek.
‘BlackSanta’ Malware Activates EDR and AV Killer Before Detonating Payload Read More »
Google Plans Two-Week Release Schedule for Chrome 2026-03-04 at 13:52 By Ionut Arghire Starting September 2026, new Chrome iterations will be released twice as fast, part of a two-week cycle. The post Google Plans Two-Week Release Schedule for Chrome appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Google Plans Two-Week Release Schedule for Chrome Read More »
Trend Micro Patches Critical Apex One Vulnerabilities 2026-02-26 at 12:27 By Eduard Kovacs TrendAI has fixed eight critical and high-severity issues in Windows and macOS endpoint security products. The post Trend Micro Patches Critical Apex One Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Trend Micro Patches Critical Apex One Vulnerabilities Read More »
Why a decade-old EnCase driver still works as an EDR killer 2026-02-05 at 14:02 By Zeljka Zorz Attackers are leaning on a new EDR killer malware that can shut down 59 widely used endpoint security products by misusing a kernel driver that once shipped with Guidance Software’s EnCase digital forensics tool, Huntress researchers warn. This
Why a decade-old EnCase driver still works as an EDR killer Read More »
Old Attack, New Speed: Researchers Optimize Page Cache Exploits 2026-01-22 at 17:22 By Eduard Kovacs A team of researchers from the Graz University of Technology in Austria has revived page Linux page cache attacks. The post Old Attack, New Speed: Researchers Optimize Page Cache Exploits appeared first on SecurityWeek. This article is an excerpt from
Old Attack, New Speed: Researchers Optimize Page Cache Exploits Read More »
New StackWarp Attack Threatens Confidential VMs on AMD Processors 2026-01-15 at 20:27 By Eduard Kovacs Researchers have disclosed technical details on a new AMD processor attack that allows remote code execution inside confidential VMs. The post New StackWarp Attack Threatens Confidential VMs on AMD Processors appeared first on SecurityWeek. This article is an excerpt from
New StackWarp Attack Threatens Confidential VMs on AMD Processors Read More »
OpenAEV: Open-source adversarial exposure validation platform 2026-01-05 at 08:02 By Sinisa Markovic OpenAEV is an open source platform designed to plan, run, and review cyber adversary simulation campaigns used by security teams. The project focuses on organizing exercises that blend technical actions with operational and human response elements, all managed through a single system. Scenarios
OpenAEV: Open-source adversarial exposure validation platform Read More »
UEFI Vulnerability in Major Motherboards Enables Early-Boot Attacks 2025-12-18 at 17:42 By Eduard Kovacs ASRock, Asus, Gigabyte, and MSI motherboards are vulnerable to early-boot DMA attacks. The post UEFI Vulnerability in Major Motherboards Enables Early-Boot Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
UEFI Vulnerability in Major Motherboards Enables Early-Boot Attacks Read More »
How exposure management changes cyber defense 2025-12-17 at 07:36 By Help Net Security In this Help Net Security video, Larry Slusser, VP of Strategy at SixMap, explains why endpoint detection and response is only part of the security story. Drawing on his work as an incident responder, engagement manager, and ransomware negotiator, he describes EDR
How exposure management changes cyber defense Read More »
MITRE Posts Results of 2025 ATT&CK Enterprise Evaluations 2025-12-11 at 16:25 By Eduard Kovacs Eleven companies took part in the evaluations and several have boasted 100% detection and coverage rates. The post MITRE Posts Results of 2025 ATT&CK Enterprise Evaluations appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
MITRE Posts Results of 2025 ATT&CK Enterprise Evaluations Read More »
Intel, AMD Processors Affected by PCIe Vulnerabilities 2025-12-10 at 10:22 By Eduard Kovacs The PCIe flaws, found by Intel employees, can be exploited for information disclosure, escalation of privilege, or DoS. The post Intel, AMD Processors Affected by PCIe Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Intel, AMD Processors Affected by PCIe Vulnerabilities Read More »
Microsoft Silently Mitigated Exploited LNK Vulnerability 2025-12-03 at 14:35 By Ionut Arghire Windows now displays in the properties tab of LNK files critical information that could reveal malicious code. The post Microsoft Silently Mitigated Exploited LNK Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Microsoft Silently Mitigated Exploited LNK Vulnerability Read More »