Collaborate Disseminate
AMD and Intel patch dozens of vulnerabilities on February 2024 Patch Tuesday, including multiple high-severity bugs.
The post Chipmaker Patch Tuesday: AMD and Intel Patch Over 100 Vulnerabilities appeared first on SecurityWeek.
Continue reading Chipmaker Patch Tuesday: AMD and Intel Patch Over 100 Vulnerabilities
Palo Alto Networks completed the acquisition of Talon Cyber Security, an Israeli startup selling a secure browser technology to enterprise customers.
The post Palo Alto Networks Completes Acquisition of Talon appeared first on SecurityWeek.
Continue reading Palo Alto Networks Completes Acquisition of Talon
ESET has patched CVE-2023-5594, a high-severity vulnerability that can cause a browser to trust websites that should not be trusted.
The post ESET Patches High-Severity Vulnerability in Secure Traffic Scanning Feature appeared first on SecurityWeek.
Continue reading ESET Patches High-Severity Vulnerability in Secure Traffic Scanning Feature
SafeBreach researchers have discovered eight new process injection techniques that can be used to covertly execute malicious code on Windows systems. Dubbed “Pool Party” because they (ab)use Windows thread pools, these process injection tec… Continue reading “Pool Party” process injection techniques evade EDRs
Pool Party is a new set of eight Windows process injection techniques that evade endpoint detection and response solutions.
The post New ‘Pool Party’ Process Injection Techniques Undetected by EDR Solutions appeared first on SecurityWeek.
Continue reading New ‘Pool Party’ Process Injection Techniques Undetected by EDR Solutions
Security features that major CPU vendors plan on integrating into their future products can increase the surface for certain types of attacks.
The post Future Intel, AMD and Arm CPUs Vulnerable to New ‘SLAM’ Attack: Researchers appeared fir… Continue reading Future Intel, AMD and Arm CPUs Vulnerable to New ‘SLAM’ Attack: Researchers
LogoFAIL is an UEFI image parser attack allowing hackers to compromise consumer and enterprise devices using malicious logo images.
The post Enterprise, Consumer Devices Exposed to Attacks via Malicious UEFI Logo Images appeared first on SecurityWeek.
Continue reading Enterprise, Consumer Devices Exposed to Attacks via Malicious UEFI Logo Images
Apple’s security response team warns that flaws CVE-2023-42916 and CVE-2023-42917 were already exploited against versions of iOS before iOS 16.7.1.
The post Apple Patches WebKit Flaws Exploited on Older iPhones appeared first on SecurityWeek.
Continue reading Apple Patches WebKit Flaws Exploited on Older iPhones
Three critical vulnerabilities in ownCloud could lead to sensitive information disclosure and authentication and validation bypass.
The post Critical ownCloud Flaws Lead to Sensitive Information Disclosure, Authentication Bypass appeared first on Secur… Continue reading Critical ownCloud Flaws Lead to Sensitive Information Disclosure, Authentication Bypass
Researchers have tested the fingerprint sensors used for Windows Hello on three popular laptops and managed to bypass them.
The post Windows Hello Fingerprint Authentication Bypassed on Popular Laptops appeared first on SecurityWeek.
Continue reading Windows Hello Fingerprint Authentication Bypassed on Popular Laptops