Endpoint Security - Security Ticks

Research Shows How Attackers Can Abuse EDR Security Products

EDR, Endpoint, Endpoint Security, security product vulnerability, XDR / SecurityTicks

Research Shows How Attackers Can Abuse EDR Security Products 2024-04-22 at 17:46 By Ionut Arghire Vulnerabilities in Palo Alto Networks Cortex XDR allowed a security researcher to turn it into a malicious offensive tool. The post Research Shows How Attackers Can Abuse EDR Security Products appeared first on SecurityWeek. This article is an excerpt from […]

React to this headline:

Research Shows How Attackers Can Abuse EDR Security Products Read More »

Researchers Resurrect Spectre v2 Attack Against Intel CPUs

CPU, CPU vulnerability, Endpoint Security, Intel / SecurityTicks

Researchers Resurrect Spectre v2 Attack Against Intel CPUs 2024-04-10 at 17:32 By Eduard Kovacs VUSec researchers resurrect Spectre v2 attack, showing that it works against the Linux kernel on the latest-generation Intel CPUs. The post Researchers Resurrect Spectre v2 Attack Against Intel CPUs appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Researchers Resurrect Spectre v2 Attack Against Intel CPUs Read More »

ZenHammer Attack Targets DRAM on Systems With AMD CPUs

Amd, CPU vulnerability, Endpoint Security, Featured, Rowhammer, Vulnerabilities / SecurityTicks

ZenHammer Attack Targets DRAM on Systems With AMD CPUs 2024-03-26 at 17:01 By Eduard Kovacs A new Rowhammer attack named ZenHammer has been demonstrated against DRAM on systems with AMD CPUs, including DDR5. The post ZenHammer Attack Targets DRAM on Systems With AMD CPUs appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

ZenHammer Attack Targets DRAM on Systems With AMD CPUs Read More »

Chipmaker Patch Tuesday: Intel, AMD Address New Microarchitectural Vulnerabilities

Amd, Chipmaker Patch Tuesday, CPU, Endpoint Security, Intel / SecurityTicks

Chipmaker Patch Tuesday: Intel, AMD Address New Microarchitectural Vulnerabilities 2024-03-13 at 18:49 By Eduard Kovacs Intel and AMD publish 10 new security advisories this Patch Tuesday to inform customers about vulnerabilities impacting their products. The post Chipmaker Patch Tuesday: Intel, AMD Address New Microarchitectural Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Chipmaker Patch Tuesday: Intel, AMD Address New Microarchitectural Vulnerabilities Read More »

Major CPU, Software Vendors Impacted by New GhostRace Attack

CPU, CPU vulnerability, Endpoint Security, Featured / SecurityTicks

Major CPU, Software Vendors Impacted by New GhostRace Attack 2024-03-13 at 12:33 By Eduard Kovacs CPU makers Intel, AMD, Arm and IBM, as well as software vendors, are impacted by a new speculative race condition (SRC) attack named GhostRace. The post Major CPU, Software Vendors Impacted by New GhostRace Attack appeared first on SecurityWeek. This

React to this headline:

Major CPU, Software Vendors Impacted by New GhostRace Attack Read More »

Broadcom Merges Symantec and Carbon Black Into New Business Unit

Broadcom, Carbon Black, EDR, Endpoint Security, Funding/M&A, Symantec / SecurityTicks

Broadcom Merges Symantec and Carbon Black Into New Business Unit 2024-03-11 at 21:01 By SecurityWeek News Fresh off its $69 billion acquisition of VMware, Broadcom creates an Enterprise Security Group unit that merges Symantec and Carbon Black. The post Broadcom Merges Symantec and Carbon Black Into New Business Unit appeared first on SecurityWeek. This article

React to this headline:

Broadcom Merges Symantec and Carbon Black Into New Business Unit Read More »

Quantum Attack Protection Added to HP Business PCs

Endpoint Security, HP, Quantum, quantum computing, Quantum cryptography / SecurityTicks

Quantum Attack Protection Added to HP Business PCs 2024-03-08 at 13:34 By Eduard Kovacs An upgraded ESC security chip makes the firmware of several HP business PCs resilient to quantum computer attacks. The post Quantum Attack Protection Added to HP Business PCs appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

Quantum Attack Protection Added to HP Business PCs Read More »

Is XDR Enough? The Hidden Gaps in Your Security Net

Endpoint, Endpoint Security, XDR / SecurityTicks

Is XDR Enough? The Hidden Gaps in Your Security Net 2024-02-28 at 14:52 By Etay Maor When evaluating XDR, consider its value based on its ability to reduce complexity and improve threat detection and response times. The post Is XDR Enough? The Hidden Gaps in Your Security Net appeared first on SecurityWeek. This article is

React to this headline:

Is XDR Enough? The Hidden Gaps in Your Security Net Read More »

Intel Core Ultra vPro Platform Brings New Security Features

CPU, Endpoint Security, Featured, Intel / SecurityTicks

Intel Core Ultra vPro Platform Brings New Security Features 2024-02-28 at 14:52 By Eduard Kovacs Intel announces new and improved security features with the latest vPro platform and Core Ultra processors. The post Intel Core Ultra vPro Platform Brings New Security Features appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

Intel Core Ultra vPro Platform Brings New Security Features Read More »

Chipmaker Patch Tuesday: AMD and Intel Patch Over 100 Vulnerabilities

Amd, Endpoint Security, Intel, Patch Tuesday, Vulnerabilities / SecurityTicks

Chipmaker Patch Tuesday: AMD and Intel Patch Over 100 Vulnerabilities 2024-02-14 at 16:17 By Ionut Arghire AMD and Intel patch dozens of vulnerabilities on February 2024 Patch Tuesday, including multiple high-severity bugs. The post Chipmaker Patch Tuesday: AMD and Intel Patch Over 100 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Chipmaker Patch Tuesday: AMD and Intel Patch Over 100 Vulnerabilities Read More »

Palo Alto Networks Completes Acquisition of Talon

Acquisition, Endpoint Security, Funding/M&A, Palo Alto Networks / SecurityTicks

Palo Alto Networks Completes Acquisition of Talon 2023-12-28 at 19:18 By SecurityWeek News Palo Alto Networks completed the acquisition of Talon Cyber Security, an Israeli startup selling a secure browser technology to enterprise customers. The post Palo Alto Networks Completes Acquisition of Talon appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Palo Alto Networks Completes Acquisition of Talon Read More »

ESET Patches High-Severity Vulnerability in Secure Traffic Scanning Feature

Endpoint Security, ESET, security product vulnerability, vulnerability / SecurityTicks

ESET Patches High-Severity Vulnerability in Secure Traffic Scanning Feature 21/12/2023 at 16:31 By Eduard Kovacs ESET has patched CVE-2023-5594, a high-severity vulnerability that can cause a browser to trust websites that should not be trusted. The post ESET Patches High-Severity Vulnerability in Secure Traffic Scanning Feature appeared first on SecurityWeek. This article is an excerpt

React to this headline:

ESET Patches High-Severity Vulnerability in Secure Traffic Scanning Feature Read More »

“Pool Party” process injection techniques evade EDRs

CrowdStrike, Cybereason, Don't miss, Endpoint Security, Hot stuff, Microsoft, News, Palo Alto Networks, PoC, research, SafeBreach, SentinelOne, threat detection, XDR / SecurityTicks

“Pool Party” process injection techniques evade EDRs 12/12/2023 at 14:01 By Zeljka Zorz SafeBreach researchers have discovered eight new process injection techniques that can be used to covertly execute malicious code on Windows systems. Dubbed “Pool Party” because they (ab)use Windows thread pools, these process injection techniques work across all processes and, according to the

React to this headline:

“Pool Party” process injection techniques evade EDRs Read More »

New ‘Pool Party’ Process Injection Techniques Undetected by EDR Solutions

EDR, Endpoint, Endpoint Security, process injection / SecurityTicks

New ‘Pool Party’ Process Injection Techniques Undetected by EDR Solutions 07/12/2023 at 17:01 By Ionut Arghire Pool Party is a new set of eight Windows process injection techniques that evade endpoint detection and response solutions. The post New ‘Pool Party’ Process Injection Techniques Undetected by EDR Solutions appeared first on SecurityWeek. This article is an

React to this headline:

New ‘Pool Party’ Process Injection Techniques Undetected by EDR Solutions Read More »

Enterprise, Consumer Devices Exposed to Attacks via Malicious UEFI Logo Images

Endpoint Security, UEFI, Vulnerabilities, vulnerability / SecurityTicks

Enterprise, Consumer Devices Exposed to Attacks via Malicious UEFI Logo Images 06/12/2023 at 19:03 By Eduard Kovacs LogoFAIL is an UEFI image parser attack allowing hackers to compromise consumer and enterprise devices using malicious logo images. The post Enterprise, Consumer Devices Exposed to Attacks via Malicious UEFI Logo Images appeared first on SecurityWeek. This article

React to this headline:

Enterprise, Consumer Devices Exposed to Attacks via Malicious UEFI Logo Images Read More »

Apple Patches WebKit Flaws Exploited on Older iPhones

apple, CVE-2023-42916, CVE-2023-42917, Endpoint Security, Featured, iOS, macOS, Malware & Threats, Vulnerabilities / SecurityTicks

Apple Patches WebKit Flaws Exploited on Older iPhones 30/11/2023 at 23:02 By Ryan Naraine Apple’s security response team warns that flaws CVE-2023-42916 and CVE-2023-42917 were already exploited against versions of iOS before iOS 16.7.1. The post Apple Patches WebKit Flaws Exploited on Older iPhones appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Apple Patches WebKit Flaws Exploited on Older iPhones Read More »

Critical ownCloud Flaws Lead to Sensitive Information Disclosure, Authentication Bypass

CVSS 10, Data Protection, Endpoint Security, GraphAPI, ownCloud, Vulnerabilities / SecurityTicks

Critical ownCloud Flaws Lead to Sensitive Information Disclosure, Authentication Bypass 27/11/2023 at 19:46 By Ionut Arghire Three critical vulnerabilities in ownCloud could lead to sensitive information disclosure and authentication and validation bypass. The post Critical ownCloud Flaws Lead to Sensitive Information Disclosure, Authentication Bypass appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Critical ownCloud Flaws Lead to Sensitive Information Disclosure, Authentication Bypass Read More »

Windows Hello Fingerprint Authentication Bypassed on Popular Laptops

biometric, bypass, Endpoint Security, Fingerprint / SecurityTicks

Windows Hello Fingerprint Authentication Bypassed on Popular Laptops 22/11/2023 at 17:17 By Eduard Kovacs Researchers have tested the fingerprint sensors used for Windows Hello on three popular laptops and managed to bypass them. The post Windows Hello Fingerprint Authentication Bypassed on Popular Laptops appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Windows Hello Fingerprint Authentication Bypassed on Popular Laptops Read More »

New Intel CPU Vulnerability ‘Reptar’ Can Allow DoS Attacks, Privilege Escalation

Endpoint Security / SecurityTicks

New Intel CPU Vulnerability ‘Reptar’ Can Allow DoS Attacks, Privilege Escalation 15/11/2023 at 13:17 By Eduard Kovacs A new Intel CPU vulnerability tracked as Reptar and CVE-2023-23583 can be exploited for DoS attacks and possibly privilege escalation. The post New Intel CPU Vulnerability ‘Reptar’ Can Allow DoS Attacks, Privilege Escalation appeared first on SecurityWeek. This

React to this headline:

New Intel CPU Vulnerability ‘Reptar’ Can Allow DoS Attacks, Privilege Escalation Read More »

Chipmaker Patch Tuesday: Intel, AMD Address Over 130 Vulnerabilities

Amd, CPU vulnerability, Endpoint Security, Intel, Vulnerabilities / SecurityTicks

Chipmaker Patch Tuesday: Intel, AMD Address Over 130 Vulnerabilities 15/11/2023 at 13:17 By Eduard Kovacs Intel and AMD have informed their customers about a total of more than 130 vulnerabilities found in their products. The post Chipmaker Patch Tuesday: Intel, AMD Address Over 130 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Chipmaker Patch Tuesday: Intel, AMD Address Over 130 Vulnerabilities Read More »