Endpoint Security - Security Ticks

Nearly All Modern CPUs Leak Data to New Collide+Power Side-Channel Attack

CPU, Endpoint Security, Featured, side-channel attack / SecurityTicks

Nearly All Modern CPUs Leak Data to New Collide+Power Side-Channel Attack 01/08/2023 at 20:15 By Eduard Kovacs A new power side-channel attack named Collide+Power can allow an attacker to obtain sensitive information and it works against nearly any modern CPU. The post Nearly All Modern CPUs Leak Data to New Collide+Power Side-Channel Attack appeared first […]

React to this headline:

Nearly All Modern CPUs Leak Data to New Collide+Power Side-Channel Attack Read More »

AMD CPU Vulnerability ‘Zenbleed’ Can Expose Sensitive Information

Endpoint Security, Vulnerabilities / SecurityTicks

AMD CPU Vulnerability ‘Zenbleed’ Can Expose Sensitive Information 25/07/2023 at 15:48 By Eduard Kovacs AMD has released microcode patches to address Zenbleed, a vulnerability in its Zen 2 CPUs that can allow an attacker to access sensitive information. The post AMD CPU Vulnerability ‘Zenbleed’ Can Expose Sensitive Information appeared first on SecurityWeek. This article is

React to this headline:

AMD CPU Vulnerability ‘Zenbleed’ Can Expose Sensitive Information Read More »

New AMI BMC Flaws Allowing Takeover and Physical Damage Could Impact Millions of Devices

AMI, BMC, Endpoint Security, Vulnerabilities / SecurityTicks

New AMI BMC Flaws Allowing Takeover and Physical Damage Could Impact Millions of Devices 20/07/2023 at 21:18 By Eduard Kovacs Two new serious vulnerabilities in AMI BMC, which is used by millions of devices, can allow attackers to take control of systems and cause physical damage. The post New AMI BMC Flaws Allowing Takeover and

React to this headline:

New AMI BMC Flaws Allowing Takeover and Physical Damage Could Impact Millions of Devices Read More »

Microsoft Revokes Many Signed Drivers Used by Chinese Cybercriminals

certificates, China, cybercrime, driver, Endpoint Security / SecurityTicks

Microsoft Revokes Many Signed Drivers Used by Chinese Cybercriminals 12/07/2023 at 14:54 By Eduard Kovacs Microsoft has revoked signed drivers used for post-exploitation activity, in many cases by Chinese cybercriminals. The post Microsoft Revokes Many Signed Drivers Used by Chinese Cybercriminals appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

Microsoft Revokes Many Signed Drivers Used by Chinese Cybercriminals Read More »

MOVEit: Testing the Limits of Supply Chain Security

Endpoint Security, MOVEit, Risk Management / SecurityTicks

MOVEit: Testing the Limits of Supply Chain Security 12/07/2023 at 14:54 By Torsten George The need for cyber resilience arises from the growing realization that traditional security measures are no longer enough to protect systems, data, and the network from compromise. The post MOVEit: Testing the Limits of Supply Chain Security appeared first on SecurityWeek.

React to this headline:

MOVEit: Testing the Limits of Supply Chain Security Read More »

Is your browser betraying you? Emerging threats in 2023

Endpoint Security, Malware, News, Ransomware, report, social engineering, Threat Intelligence, threats, WatchGuard / SecurityTicks

Is your browser betraying you? Emerging threats in 2023 07/07/2023 at 07:02 By Help Net Security Network attacks (IPS detections) have remained relatively flat over the last three quarters, technically down a bit more than 3%, according to WatchGuard. “Organisations need to pay more active, ongoing attention to the existing security solutions and strategies their

React to this headline:

Is your browser betraying you? Emerging threats in 2023 Read More »

Western Digital Blocks Unpatched Devices From Cloud Services

CVE-2022-36327, Endpoint Security, firmware, Vulnerabilities, Western Digital / SecurityTicks

Western Digital Blocks Unpatched Devices From Cloud Services 19/06/2023 at 18:08 By Ionut Arghire Western Digital is blocking access to its cloud services for devices running firmware versions impacted by a critical security vulnerability. The post Western Digital Blocks Unpatched Devices From Cloud Services appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Western Digital Blocks Unpatched Devices From Cloud Services Read More »

CISA, NSA Share Guidance on Hardening Baseboard Management Controllers

BMC, Endpoint Security, guidance / SecurityTicks

CISA, NSA Share Guidance on Hardening Baseboard Management Controllers 15/06/2023 at 21:40 By Ionut Arghire CISA and the NSA have published new guidance to help organizations harden baseboard management controllers (BMCs). The post CISA, NSA Share Guidance on Hardening Baseboard Management Controllers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

CISA, NSA Share Guidance on Hardening Baseboard Management Controllers Read More »

Top factors driving enterprise demand for new cybersecurity technology

Application Security, CCgroup, cybersecurity, Endpoint Security, News, report / SecurityTicks

Top factors driving enterprise demand for new cybersecurity technology 08/06/2023 at 06:31 By Help Net Security Despite prevailing economic headwinds, the market for cybersecurity products and services remains buoyant, according to CCgroup. The study found that 78% of enterprises in the U.S. and 58% in the UK have increased cybersecurity investment in the last year,

React to this headline:

Top factors driving enterprise demand for new cybersecurity technology Read More »

Microsoft Makes SMB Signing Default Requirement in Windows 11 to Boost Security

Endpoint Security, Security Architecture, SMB, Windows / SecurityTicks

Microsoft Makes SMB Signing Default Requirement in Windows 11 to Boost Security 05/06/2023 at 16:47 By Ionut Arghire Microsoft is making SMB signing a default requirement in Windows 11 Enterprise editions, starting with insider preview build 25381. The post Microsoft Makes SMB Signing Default Requirement in Windows 11 to Boost Security appeared first on SecurityWeek.

React to this headline:

Microsoft Makes SMB Signing Default Requirement in Windows 11 to Boost Security Read More »

Gigabyte Rolls Out BIOS Updates to Remove Backdoor From Motherboards

Endpoint Security, Vulnerabilities / SecurityTicks

Gigabyte Rolls Out BIOS Updates to Remove Backdoor From Motherboards 05/06/2023 at 14:39 By Ionut Arghire Gigabyte has announced BIOS updates that remove a recently identified backdoor feature in hundreds of its motherboards. The post Gigabyte Rolls Out BIOS Updates to Remove Backdoor From Motherboards appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Gigabyte Rolls Out BIOS Updates to Remove Backdoor From Motherboards Read More »

Organizations Warned of Backdoor Feature in Hundreds of Gigabyte Motherboards

backdoor, Endpoint Security, Featured, Gigabyte, Malware & Threats / SecurityTicks

Organizations Warned of Backdoor Feature in Hundreds of Gigabyte Motherboards 31/05/2023 at 18:34 By Eduard Kovacs A backdoor feature found in hundreds of Gigabyte motherboard models can pose a significant supply chain risk to organizations. The post Organizations Warned of Backdoor Feature in Hundreds of Gigabyte Motherboards appeared first on SecurityWeek. This article is an

React to this headline:

Organizations Warned of Backdoor Feature in Hundreds of Gigabyte Motherboards Read More »