Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave

Security researchers ran their own code inside a protected part of Windows that is meant to stay sealed off even when the rest of the computer is taken over.

The protected area is a VBS enclave, an isolated slice of memory the operating system uses to… Continue reading Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave→

Posted in Uncategorized

Patching and preventing issues: What are the lessons you can learn?

In this Help Net Security interview, Kunal Modasiya, Senior VP & GM at Qualys, talks about why patching is still hard to get right. He explains how business pressure, revenue-critical systems, and patches that break things keep fixes from going ou… Continue reading Patching and preventing issues: What are the lessons you can learn?→

Most companies count AI agents as insiders, and CISOs worry about their own liability

Software that works on an employee’s behalf is now turning up in incident reports. At 95% of the companies in a Trellix survey of 600 CISOs, an AI agent or other autonomous system was linked to an insider incident in the past 12 months. The agent logs … Continue reading Most companies count AI agents as insiders, and CISOs worry about their own liability→