cybersecurity
Although May Patch Tuesday she be but little, she is fierce: Microsoft has pushed out a modest 38 new security fixes for its monthly fix cycle , but don’t get caught napping: They include fixes for a pre-authentication remote code execution (RCE) vulnerability in Outlook, CVE-2023-29325, that requires no user
With harvested credentials some groups spun up additional resources until they exhausted the credit cards on file...
PowerShell was used in 76% of ransomware incidents in April 2023, according to new data from cybersecurity company BlackFog – a sharp reminder of the extent to which attackers are deploying legitimate tools and platforms to achieve their aims without triggering alarms from many endpoint protection platforms. PowerShell is a task
Extortion efforts continue...
DHS CIO office had given waivers... "a priority to improve compliance in future"
Two critical infrastructure providers in the energy sector were breached via a software supply chain attack that also hit business communications provider 3CX and its downstream customers, as well as trading companies. That’s according to cybersecurity firm Symantec this week, which said that its Threat Hunter Team had identified