CISA has ordered U.S. federal agencies to secure their systems against a recently patched Windows MSHTML spoofing zero-day bug exploited by the Void Banshee APT hacking group. […]
Exploit code released for critical Ivanti RCE flaw, patch now
A proof-of-concept (PoC) exploit for CVE-2024-29847, a critical remote code execution (RCE) vulnerability in Ivanti Endpoint Manager, is now publicly released, making it crucial to update devices. […]
Apple Patches Major Security Flaws with iOS 18 Refresh
Apple warns that attackers can use Siri to access sensitive user data, control nearby devices, or view recent photos without authentication.
The post Apple Patches Major Security Flaws with iOS 18 Refresh appeared first on SecurityWeek.
Microsoft rolls out Office LTSC 2024 for Windows and Mac
Microsoft has announced that Office LTSC (Long Term Servicing Channel) 2024, a volume-licensed and perpetual version of Office for Windows and macOS users, is now available for commercial and government customers. […]
SecurityWeek to Host 2024 Attack Surface Management Summit on Wednesday
SecurityWeek will host its 2024 Attack Surface Management Summit as a fully immersive virtual event on Wednesday, September 18th.
The post SecurityWeek to Host 2024 Attack Surface Management Summit on Wednesday appeared first on SecurityWeek.
US cracks down on spyware vendor Intellexa with more sanctions
Today, the U.S. Department of the Treasury has sanctioned five executives and one entity linked to the Intellexa Consortium for developing and distributing Predator commercial spyware. […]
Chrome switching to NIST-approved ML-KEM quantum encryption
Google announced updates in the post-quantum cryptographic key encapsulation mechanism used in the Chrome browser, specifically, the swap of Kyber used in hybrid key exchanges with Module Lattice Key Encapsulation Mechanism (ML-KEM). […]
US Sanctions Intellexa Executives as Surveillance Spyware Crackdown Expands
Sanctions target five individuals linked to Intellexa Consortium as the US government expands its crackdown on commercial spyware merchants.
The post US Sanctions Intellexa Executives as Surveillance Spyware Crackdown Expands appeared first on SecurityWeek.
EasyDMARC Lands $20M for Email Security Authentication Tech
EasyDMARC lands venture capital funding after finding traction in the email security and authentication business.
The post EasyDMARC Lands $20M for Email Security Authentication Tech appeared first on SecurityWeek.
D-Link fixes critical RCE, hardcoded password flaws in WiFi 6 routers
D-Link has fixed critical vulnerabilities in three popular wireless router models that allow remote attackers to execute arbitrary code or access the devices using hardcoded credentials. […]