A new UEFI Secure Boot bypass vulnerability tracked as CVE-2024-7344 that affects a Microsoft-signed application could be exploited to deploy bootkits even if Secure Boot protection is active. […]
MFA Failures – The Worst is Yet to Come
This article delves into the rising tide of MFA failures, the alarming role of generative AI in amplifying these attacks, the growing user discontent weakening our defenses, and the glaring vulnerabilities being frequently exploited. The storm is building, and the worst is yet to come. […]
Millions of Internet Hosts Vulnerable to Attacks Due to Tunneling Protocol Flaws
New research shows that over 4 million systems on the internet, including VPN servers and home routers, are vulnerable to attacks due to tunneling protocol flaws.
The post Millions of Internet Hosts Vulnerable to Attacks Due to Tunneling Protocol Flaws appeared first on SecurityWeek.
Wultra Raises €3 Million for Post-Quantum Authentication
Authentication solutions provider Wultra has raised €3 million (~$3.1 million) for its post-quantum technology.
The post Wultra Raises €3 Million for Post-Quantum Authentication appeared first on SecurityWeek.
380,000 Impacted by Data Breach at Cannabis Retailer Stiiizy
Cannabis retailer Stiiizy says hackers stole the personal information of 380,000 consumers from one of its vendors.
The post 380,000 Impacted by Data Breach at Cannabis Retailer Stiiizy appeared first on SecurityWeek.
Ready to Simplify Trust Management? Join Free Webinar to See DigiCert ONE in Action
The digital world is exploding. IoT devices are multiplying like rabbits, certificates are piling up faster than you can count, and compliance requirements are tightening by the day. Keeping up with it all can feel like trying to juggle chainsaws while riding a unicycle.
Traditional trust management? Forget it. It’s simply not built for today’s fast-paced, hybrid environments. You need a
Traditional trust management? Forget it. It’s simply not built for today’s fast-paced, hybrid environments. You need a
North Korean Hackers Targeting Freelance Software Developers
North Korea-linked Lazarus Group is targeting freelance software developers to compromise the supply chain.
The post North Korean Hackers Targeting Freelance Software Developers appeared first on SecurityWeek.
CISA Calls For Action to Close the Software Understanding Gap
Cyber Insights 2025: Identities
Both human and machine identities occupy a unique position: they are simultaneously the foundation of cybersecurity and its weakest link.
The post Cyber Insights 2025: Identities appeared first on SecurityWeek.
Biden Executive Order Aims to Shore Up US Cyber Defenses
President Joe Biden issued an executive order aimed at strengthening the nation’s cybersecurity and making it easier to go after foreign adversaries or hacking groups.
The post Biden Executive Order Aims to Shore Up US Cyber Defenses appeared first on SecurityWeek.