Israeli Government Agencies Visit NSO Group Offices
Authorities opened an investigation into the secretive Israeli security firm. Continue reading Israeli Government Agencies Visit NSO Group Offices
Author Archives: Elizabeth Montalbano
Reboot of PunkSpider Tool at DEF CON Stirs Debate
Researchers plan to introduce a revamp of PunkSpider, which helps identify flaws in websites so companies can make their back-end systems more secure, at DEF CON. Continue reading Reboot of PunkSpider Tool at DEF CON Stirs Debate
Apple Patches Actively Exploited Zero-Day in iOS, MacOS
Company urges iPhone, iPad and Mac users to install updates to fix a critical memory corruption flaw that can allow for attackers to take over a system. Continue reading Apple Patches Actively Exploited Zero-Day in iOS, MacOS
Microsoft: New Unpatched Bug in Windows Print Spooler
Another vulnerability separate from PrintNightmare allows for local elevation of privilege and system takeover. Continue reading Microsoft: New Unpatched Bug in Windows Print Spooler
Safari Zero-Day Used in Malicious LinkedIn Campaign
Researchers shed light on how attackers exploited Apple web browser vulnerabilities to target government officials in Western Europe. Continue reading Safari Zero-Day Used in Malicious LinkedIn Campaign
Windows Hello Bypass Fools Biometrics Safeguards in PCs
A Windows security bug would allow an attacker to fool a USB camera used in the biometric facial-recognition aspect of the system. Continue reading Windows Hello Bypass Fools Biometrics Safeguards in PCs
SolarWinds Issues Hotfix for Zero-Day Flaw Under Active Attack
Microsoft alerted the company to a security vulnerability in its Serv-U Managed File Transfer and Secure FTP products that a cyberattacker is using to target a “limited” amount of customers. Continue reading SolarWinds Issues Hotfix for Zero-Day Flaw Under Active Attack
Lazarus Targets Job-Seeking Engineers with Malicious Documents
Notorious North Korean APT impersonates Airbus, General Motors and Rheinmetall to lure potential victims into downloading malware. Continue reading Lazarus Targets Job-Seeking Engineers with Malicious Documents
Microsoft Releases Emergency Patch for PrintNightmare Bugs
The fix doesn’t cover the entire problem nor all affected systems however, so the company also is offering workarounds and plans to release further remedies at a later date. Continue reading Microsoft Releases Emergency Patch for PrintNightmare Bugs
CISA Offers New Mitigation for PrintNightmare Bug
CERT urges administrators to disable the Windows Print spooler service in Domain Controllers and systems that don’t print, while Microsoft attempts to clarify RCE flaw with a new CVE assignment. Continue reading CISA Offers New Mitigation for PrintNightmare Bug