Cybersecurity News, Insights and Analysis | SecurityWeek
SecurityWeek provides cybersecurity news and information to global enterprises, with expert insights & analysis for IT security professionals
China’s Salt Typhoon Hacked AT&T, Verizon: Report
Oct 7, 2024 · The China-linked threat group known as Salt Typhoon has hacked into the networks of several major broadband providers in the United States, potentially compromising wiretap systems, according to The Wall Street Journal.
Latest News - SecurityWeek
Dec 26, 2024 · Cybersecurity News, Insights & Analysis
Malware & Threats Archives - SecurityWeek
News and information on emerging malware and threats for enterprise cybersecurity teams
Microsoft's Take on Kernel Access and Safe Deployment Following ...
Oct 10, 2024 · On July 19, 2024, two additional IPC Template Instances were deployed.This required a comparison against the 21st value when only 20 were expected. In CrowdStrike’s words, “The attempt to access the 21st value produced an out-of-bounds memory read beyond the end of the input data array and resulted in a system crash.”
Healthcare Organizations Warned of Trinity Ransomware Attacks
Oct 8, 2024 · “The ransom note is often placed on the desktop or within directories containing the encrypted files. This note contains instructions provided by the threat actor, their onion site URL, and the email address for communication,” HHS says.
US, Allies Release Guidance on Securing OT Environments
Oct 2, 2024 · New guidance from government agencies in the US and allied countries provides organizations with details on how to design, implement, and manage safe and secure operational technology (OT) environments.
Vulnerabilities Archives - SecurityWeek
Daily Briefing Newsletter. Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights.
High-Severity Vulnerabilities Patched in Zoom, Chrome
Nov 13, 2024 · On Tuesday, Google announced the promotion of Chrome 131 to the stable channel with patches for 12 vulnerabilities, including eight reported by external researchers.. The most severe of the externally reported flaws is a high-severity inappropriate implementation bug in Blink, tracked as CVE-2024-11110, which was reported last month.
Five Eyes Agencies Release Guidance on Detecting Active …
Sep 27, 2024 · The most common AD compromise techniques, the document shows, include Kerberoasting, AS-REP roasting, password spraying, MachineAccountQuota compromise, unconstrained delegation exploitation, GPP passwords compromise, certificate services compromise, Golden Certificate, DCSync, dumping ntds.dit, Golden Ticket, Silver Ticket, Golden SAML, Microsoft Entra Connect compromise, one-way domain trust ...