Today is Microsoft’s January 2025 Patch Tuesday, which includes security updates for 159 flaws, including eight zero-day vulnerabilities, with three actively exploited in attacks. […]
UK Considers Banning Ransomware Payment by Public Sector and CNI
Since no technical means have been found to curtail criminal extortion through prevention or attack, the new proposal is to eliminate its profitability.
The post UK Considers Banning Ransomware Payment by Public Sector and CNI appeared first on SecurityWeek.
Windows 11 KB5050009 & KB5050021 cumulative updates released
Microsoft has released the Windows 11 KB5050009 and KB5050021 cumulative updates for versions 24H2 and 23H2 to fix security vulnerabilities and issues. […]
WEF Report Reveals Growing Cyber Resilience Divide Between Public and Private Sectors
WEF’s Global Cybersecurity Outlook 2025 report highlights key challenges like the skills gap, third-party risks, and resilience disparities between businesses and private sectors.
The post WEF Report Reveals Growing Cyber Resilience Divide Between Public and Private Sectors appeared first on SecurityWeek.
Google OAuth flaw lets attackers gain access to abandoned accounts
A weakness in Google’s OAuth “Sign in with Google” feature could enable attackers that register domains of defunct startups to access sensitive data of former employee accounts linked to various software-as-a-service (SaaS) platforms. […]
BforeAI Raises $10 Million for Predictive Attack Intelligence
BforeAI has raised $10 million in Series B funding, which brings the total raised by the security firm to more than $30 million.
The post BforeAI Raises $10 Million for Predictive Attack Intelligence appeared first on SecurityWeek.
How to Eliminate “Shadow AI” in Software Development
With a security-first culture fully in play, developers will view the protected deployment of AI as a marketable skill, and respond accordingly.
The post How to Eliminate “Shadow AI” in Software Development appeared first on SecurityWeek.
Microsoft Uncovers macOS Vulnerability CVE-2024-44243 Allowing Rootkit Installation
Microsoft has shed light on a now-patched security flaw impacting Apple macOS that, if successfully exploited, could have allowed an attacker running as “root” to bypass the operating system’s System Integrity Protection (SIP) and install malicious kernel drivers by loading third-party kernel extensions.
The vulnerability in question is CVE-2024-44243 (CVSS score: 5.5), a medium-severity bug
The vulnerability in question is CVE-2024-44243 (CVSS score: 5.5), a medium-severity bug
Snyk Says ‘Malicious’ NPM Packages Part of Research Project
Apparently malicious NPM packages linked to Snyk raised some concerns, but the security firm clarified that it’s part of a research project.
The post Snyk Says ‘Malicious’ NPM Packages Part of Research Project appeared first on SecurityWeek.
Orchid Security Banks Hefty $36M Seed Round
New York identity management startup raises $36 million in an unusually large seed round co-led by Team8 and Intel Capital.
The post Orchid Security Banks Hefty $36M Seed Round appeared first on SecurityWeek.