Cybersecurity News, Insights and Analysis | SecurityWeek
3 days ago · SecurityWeek provides cybersecurity news and information to global enterprises, with expert insights & analysis for IT security professionals
China’s Salt Typhoon Hacked AT&T, Verizon: Report
Oct 7, 2024 · The China-linked threat group known as Salt Typhoon has hacked into the networks of several major broadband providers in the United States, potentially compromising wiretap systems, according to The Wall Street Journal.
Latest News - SecurityWeek
Dec 31, 2024 · Proof-of-concept (PoC) code was published for CVE-2024-49113, a denial-of-service (DoS) vulnerability in Windows LDAP.
Microsoft Ships Urgent Patch for Exploited Windows CLFS Zero-Day
Dec 10, 2024 · The Windows LDAP bug, tagged as CVE-2024-49112, is so serious that Microsoft is recommending disconnecting Domain Controllers from the internet as a temporary mitigation. “An unauthenticated attacker who successfully exploited this vulnerability could gain code execution through a specially crafted set of LDAP calls to execute arbitrary code within the context of the LDAP service,” the ...
ESET Flags Prototype UEFI Bootkit Targeting Linux
Nov 27, 2024 · Malware hunters at ESET on Wednesday documented the discovery of a prototype UEFI bootkit targeting specific Ubuntu Linux configurations, signaling a shift as hackers expand bootkit attacks beyond the Windows operating system.
Deloitte Says No Threat to Sensitive Data After Hacker Claims …
Sep 24, 2024 · A notorious hacker has announced the theft of data from an improperly protected server allegedly belonging to Deloitte. The hacker known as IntelBroker announced late last week on the BreachForums cybercrime forum the availability of “internal communications” obtained from Deloitte, specifically an internet-exposed Apache Solr …
Palo Alto Patches Critical Firewall Takeover Vulnerabilities
Oct 9, 2024 · Palo Alto Networks on Wednesday pushed out patches for several serious flaws in its Expedition customer migration tool and warned that attackers can launch trivial exploits to take over firewall administrator accounts.
Microsoft's Take on Kernel Access and Safe Deployment Following ...
Oct 10, 2024 · On July 19, 2024, two additional IPC Template Instances were deployed.This required a comparison against the 21st value when only 20 were expected. In CrowdStrike’s words, “The attempt to access the 21st value produced an out-of-bounds memory read beyond the end of the input data array and resulted in a system crash.”
Identity of Notorious Hacker USDoD Revealed - SecurityWeek
Aug 27, 2024 · The privately distributed CrowdStrike report, according to TecMundo, suggested that the hacker would likely deny being Luan B.G., but the individual controlling the social media and other online accounts tied to the hacker has actually confirmed that the ‘doxing’ is accurate.
Malware & Threats Archives - SecurityWeek
Close to $500 million in cryptocurrency from over 332,000 addresses was stolen in 2024 using wallet drainer malware.