Endpoint Security - Security Ticks

Intel Sued Over ‘Downfall’ CPU Vulnerability

Endpoint Security, Featured, Intel, lawsuit / SecurityTicks

Intel Sued Over ‘Downfall’ CPU Vulnerability 10/11/2023 at 17:47 By Eduard Kovacs A class action lawsuit has been filed against Intel over its handling of CPU speculative execution vulnerabilities, with a focus on Downfall. The post Intel Sued Over ‘Downfall’ CPU Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed […]

React to this headline:

Intel Sued Over ‘Downfall’ CPU Vulnerability Read More »

Critical Vulnerabilities Expose Veeam ONE Software to Code Execution

CVE-2023-38547, CVE-2023-38548, Endpoint Security, Network Security, Veeam, Veeam ONE, Vulnerabilities / SecurityTicks

Critical Vulnerabilities Expose Veeam ONE Software to Code Execution 07/11/2023 at 19:46 By Ionut Arghire Veeam Software has rolled out patches to cover code execution vulnerabilities in its Veeam ONE IT monitoring product. The post Critical Vulnerabilities Expose Veeam ONE Software to Code Execution appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Critical Vulnerabilities Expose Veeam ONE Software to Code Execution Read More »

Dozens of Kernel Drivers Allow Attackers to Alter Firmware, Escalate Privileges

Endpoint Security / SecurityTicks

Dozens of Kernel Drivers Allow Attackers to Alter Firmware, Escalate Privileges 01/11/2023 at 18:47 By Eduard Kovacs VMware’s Threat Analysis Unit finds 34 new vulnerable kernel drivers that can be exploited to alter or erase firmware and escalate privileges. The post Dozens of Kernel Drivers Allow Attackers to Alter Firmware, Escalate Privileges appeared first on

React to this headline:

Dozens of Kernel Drivers Allow Attackers to Alter Firmware, Escalate Privileges Read More »

Apple Ships Major iOS, macOS Security Updates

apple, Endpoint Security, iOS, macOS, Malware & Threats, Mobile & Wireless, Vulnerabilities, WebKit / SecurityTicks

Apple Ships Major iOS, macOS Security Updates 25/10/2023 at 23:01 By Ryan Naraine Apple patches dozens of serious security flaws in its macOS and iOS platforms, warning that hackers could launch code execution exploits. The post Apple Ships Major iOS, macOS Security Updates appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Apple Ships Major iOS, macOS Security Updates Read More »

Lost and Stolen Devices: A Gateway to Data Breaches and Leaks

Data Protection, Encryption, Endpoint, Endpoint Security / SecurityTicks

Lost and Stolen Devices: A Gateway to Data Breaches and Leaks 18/10/2023 at 15:49 By Torsten George By implementing strong security practices,, organizations can significantly reduce the risks associated with lost and stolen computers and safeguard their sensitive information. The post Lost and Stolen Devices: A Gateway to Data Breaches and Leaks appeared first on

React to this headline:

Lost and Stolen Devices: A Gateway to Data Breaches and Leaks Read More »

Microsoft Defender can automatically contain compromised user accounts

automation, BEC scams, Don't miss, Endpoint Security, enterprise, Hot stuff, Microsoft, Microsoft Defender, MITM, News, privileged accounts, Ransomware, XDR / SecurityTicks

Microsoft Defender can automatically contain compromised user accounts 12/10/2023 at 15:32 By Helga Labus The “contain user” feature select Microsoft Defender for Endpoint customers have been trying out since November 2022 is now available to a wider pool of organizations, Microsoft has announced. The feature aims to help organizations disrupt human-operated attacks like ransomware, business

React to this headline:

Microsoft Defender can automatically contain compromised user accounts Read More »

Endpoint malware attacks decline as campaigns spread wider

attacks, cybersecurity, Encryption, Endpoint Security, extortion, Malware, News, Ransomware, report, SSL/TLS, threats, WatchGuard / SecurityTicks

Endpoint malware attacks decline as campaigns spread wider 11/10/2023 at 06:31 By Help Net Security In Q2 2023, 95% of malware now arrives over encrypted connections, endpoint malware volumes are decreasing despite campaigns growing more widespread, ransomware detections are declining amid a rise in double-extortion attacks, and older software vulnerabilities persist as popular targets for

React to this headline:

Endpoint malware attacks decline as campaigns spread wider Read More »

BlackBerry to Split Cybersecurity, IoT Business Units

BlackBerry, Cylance, Endpoint Security, ICS/OT, IoT Security / SecurityTicks

BlackBerry to Split Cybersecurity, IoT Business Units 05/10/2023 at 19:02 By Ryan Naraine BlackBerry plans to split its cybersecurity and IOT (Internet of Things) businesses and pursue an IPO for the IOT unit early next year. The post BlackBerry to Split Cybersecurity, IoT Business Units appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

BlackBerry to Split Cybersecurity, IoT Business Units Read More »

New Supermicro BMC Vulnerabilities Could Expose Many Servers to Remote Attacks

Endpoint Security, Vulnerabilities / SecurityTicks

New Supermicro BMC Vulnerabilities Could Expose Many Servers to Remote Attacks 04/10/2023 at 18:16 By Ionut Arghire Supermicro has released BMC IPMI firmware updates to address multiple vulnerabilities impacting select motherboard models. The post New Supermicro BMC Vulnerabilities Could Expose Many Servers to Remote Attacks appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

New Supermicro BMC Vulnerabilities Could Expose Many Servers to Remote Attacks Read More »

New GPU Side-Channel Attack Allows Malicious Websites to Steal Data

Endpoint Security, GPU, side-channel attack / SecurityTicks

New GPU Side-Channel Attack Allows Malicious Websites to Steal Data 27/09/2023 at 12:32 By Eduard Kovacs GPUs from AMD, Apple, Arm, Intel, Nvidia and Qualcomm are vulnerable to a new type of side-channel attack named GPU.zip. The post New GPU Side-Channel Attack Allows Malicious Websites to Steal Data appeared first on SecurityWeek. This article is

React to this headline:

New GPU Side-Channel Attack Allows Malicious Websites to Steal Data Read More »

Microsoft Adding New Security Features to Windows 11

Endpoint Security, Microsoft, Windows / SecurityTicks

Microsoft Adding New Security Features to Windows 11 26/09/2023 at 20:46 By Eduard Kovacs Microsoft announced that the latest Windows 11 update (23H2) will bring more support for passkeys and several new security features. The post Microsoft Adding New Security Features to Windows 11 appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Microsoft Adding New Security Features to Windows 11 Read More »

Critical Trend Micro vulnerability exploited in the wild (CVE-2023-41179)

Don't miss, Endpoint Security, enterprise, Hot stuff, News, patch, security update, Trend Micro, vulnerability / SecurityTicks

Critical Trend Micro vulnerability exploited in the wild (CVE-2023-41179) 21/09/2023 at 11:46 By Zeljka Zorz Trend Micro has fixed a critical zero-day vulnerability (CVE-2023-41179) in several of its endpoint security products for enterprises that has been spotted being exploited in the wild. About CVE-2023-41179 The nature of the flaw hasn’t been revealed, but we know

React to this headline:

Critical Trend Micro vulnerability exploited in the wild (CVE-2023-41179) Read More »

Intel Launches New Attestation Service as Part of Trust Authority Portfolio

cloud security, Endpoint Security / SecurityTicks

Intel Launches New Attestation Service as Part of Trust Authority Portfolio 20/09/2023 at 21:31 By Eduard Kovacs Intel announces general availability of attestation service that is part of Trust Authority, a new portfolio of security software and services. The post Intel Launches New Attestation Service as Part of Trust Authority Portfolio appeared first on SecurityWeek.

React to this headline:

Intel Launches New Attestation Service as Part of Trust Authority Portfolio Read More »

Trend Micro Patches Exploited Zero-Day Vulnerability in Endpoint Security Products

Endpoint Security, exploited, Trend Micro, Vulnerabilities, Zero-Day / SecurityTicks

Trend Micro Patches Exploited Zero-Day Vulnerability in Endpoint Security Products 19/09/2023 at 15:47 By Eduard Kovacs Trend Micro has patched CVE-2023-41179, an Apex One zero-day code execution vulnerability that has been exploited in attacks. The post Trend Micro Patches Exploited Zero-Day Vulnerability in Endpoint Security Products appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Trend Micro Patches Exploited Zero-Day Vulnerability in Endpoint Security Products Read More »

Google Extends Chromebook Lifespan, Promises 10 Years of Automatic Updates

Endpoint Security, Management & Strategy, Vulnerabilities / SecurityTicks

Google Extends Chromebook Lifespan, Promises 10 Years of Automatic Updates 18/09/2023 at 18:09 By Ionut Arghire Google Chromebooks released from 2021 and onwards will receive automatic updates, including security patches, for 10 years. The post Google Extends Chromebook Lifespan, Promises 10 Years of Automatic Updates appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Google Extends Chromebook Lifespan, Promises 10 Years of Automatic Updates Read More »

Emsisoft Tells Users to Update Products, Reboot Systems Due to Certificate Mishap

certificate, Emsisoft, Endpoint Security / SecurityTicks

Emsisoft Tells Users to Update Products, Reboot Systems Due to Certificate Mishap 08/09/2023 at 15:02 By Ionut Arghire Emsisoft urges its users to update anti-malware and other security products after signing them with an improperly issued digital certificate. The post Emsisoft Tells Users to Update Products, Reboot Systems Due to Certificate Mishap appeared first on

React to this headline:

Emsisoft Tells Users to Update Products, Reboot Systems Due to Certificate Mishap Read More »

Companies Respond to ‘Downfall’ Intel CPU Vulnerability

Endpoint Security, Vulnerabilities / SecurityTicks

Companies Respond to ‘Downfall’ Intel CPU Vulnerability 18/08/2023 at 15:49 By Eduard Kovacs Several major companies have published advisories in response to the Downfall vulnerability affecting Intel CPUs. The post Companies Respond to ‘Downfall’ Intel CPU Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to

React to this headline:

Companies Respond to ‘Downfall’ Intel CPU Vulnerability Read More »

Iagona ScrutisWeb Vulnerabilities Could Expose ATMs to Remote Hacking

ATM, Endpoint Security, Featured, Vulnerabilities, vulnerability / SecurityTicks

Iagona ScrutisWeb Vulnerabilities Could Expose ATMs to Remote Hacking 14/08/2023 at 13:46 By Eduard Kovacs Several vulnerabilities discovered in Iagona ScrutisWeb ATM fleet monitoring software could be exploited to remotely hack ATMs. The post Iagona ScrutisWeb Vulnerabilities Could Expose ATMs to Remote Hacking appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Iagona ScrutisWeb Vulnerabilities Could Expose ATMs to Remote Hacking Read More »

Automated Security Control Assessment: When Self-Awareness Matters

ASCA, Endpoint Security / SecurityTicks

Automated Security Control Assessment: When Self-Awareness Matters 09/08/2023 at 15:17 By Torsten George Automated Security Control Assessment enhances security posture by verifying proper, consistent configurations of security controls, rather than merely confirming their existence. The post Automated Security Control Assessment: When Self-Awareness Matters appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Automated Security Control Assessment: When Self-Awareness Matters Read More »

Intel Addresses 80 Firmware, Software Vulnerabilities

Endpoint Security, Intel, patch, Patch Tuesday, Vulnerabilities / SecurityTicks

Intel Addresses 80 Firmware, Software Vulnerabilities 09/08/2023 at 15:17 By Eduard Kovacs Intel has addressed 80 vulnerabilities affecting its products, including 18 high-severity privilege escalation and DoS flaws. The post Intel Addresses 80 Firmware, Software Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to this

React to this headline:

Intel Addresses 80 Firmware, Software Vulnerabilities Read More »