6192 matches found
The Uncertain Future of IT Automation
The majority of today’s cybersecurity breaches stem from unpatched vulnerabilities and outdated systems, which means that many cyberattacks are preventable. Unfortunately, it can be challenging for IT teams to keep up with the pace of new patches every month, especially when employee devices are...
Securing Data With a Frenzied Remote Workforce–Podcast
The baby upchucks. The dog loudly informs you that she’s detected a budding squirrel armageddon. Your department’s Zoom meeting starts in four minutes. The Bank of Fezziwig texts: If you haven’t enabled online banking, click here. What. Do. You. DO?!? It doesn’t matter that you’ve been working...
ASB-A-209611539
In onCreate of SetupLayoutActivity.java, there is a possible way to setup a work profile bypassing user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation...
PT-2022-10975
Name of the Vulnerable Software and Affected Versions Android versions Android-10 through Android-12 Description The issue is related to a tapjacking/overlay attack in the onCreate method of SetupLayoutActivity.java, allowing a work profile to be set up without user consent. This could lead to...
Alohi: Waitlist bypass for accessing SIGN.PLUS Beta
During SIGN.PLUS beta phase, it was found out that hackers could trick the API response and pretend to have been accepted into the beta program. All server operations would be blocked, but the UI client would be accessible, exposing the work-in-progress design to non-beta users. There was no...
How Microsoft can help reduce insider risk during the Great Reshuffle
These are exciting and demanding days for organizations adapting to hybrid work realities, including a wider distributed workforce and more rapid change in employee roles. Organizations are becoming more agile as they refocus on employee onboarding and empowerment, opportunities with third-party...
How Microsoft can help reduce insider risk during the Great Reshuffle
These are exciting and demanding days for organizations adapting to hybrid work realities, including a wider distributed workforce and more rapid change in employee roles. Organizations are becoming more agile as they refocus on employee onboarding and empowerment, opportunities with third-party...
PT-2022-28895
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.5 Description The issue is related to the bnx2fc interface in the Linux Kernel. It involves flushing the destroy work queue before calling the bnx2fc interface put function. The actual impact and attack...
PT-2022-28637
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.101 Description The issue is related to the SCSI qedf driver in the Linux Kernel. It involves adding stag work to all vports. The actual impact and attack plausibility have not yet been proven...
6 Cyber-Defense Steps to Take Now to Protect Your Company
The headlines feel like Groundhog Day, if each of Bill Murray’s repeated days grew increasingly threatening: Ransomware attacks rise again. Ransomware attacks up over last quarter. Ransomware attacks tower over previous year. You get the idea. And yet again, a new report from Ivanti sends a clear...
An Elaborate Employment Con in the Internet Age
The story is an old one, but the tech gives it a bunch of new twists: Gemma Brett, a 27-year-old designer from west London, had only been working at Madbird for two weeks when she spotted something strange. Curious about what her commute would be like when the pandemic was over, she searched for...
Microsoft Security delivers new multicloud capabilities
In times of great change, challenges and opportunities can be found in many directions. This is certainly true in IT and cybersecurity. Today, while navigating a pandemic, frequent supply chain shocks, and global talent shortages, organizations around the world are forced to confront sophisticate...
Time to secure hybrid work for 2022, not 2002
By Nick Biasini, with contributions from Vitor Ventura. Editor’s note: This post is the first in a new series from Talos looking at high-level topics across the cybersecurity space. Our researchers rely on years of expertise, data, and tremendous visibility; applying what we can learn from...
Financial cyberthreats in 2021
The year 2021 was eventful in terms of digital threats for organizations and individuals, and financial institutions were no exception. Throughout the past year, we have seen cybercriminals continue to actively target our users with tools and techniques that emerged due to the pandemic...
The federal Zero Trust strategy and Microsoft’s deployment guidance for all
You’d be forgiven for missing the White House announcement on federal Zero Trust strategy on January 26, 2022.1 After all, on that day alone a Supreme Court Justice announced his intention to retire, the Federal Reserve announced its plan to raise interest rates, and the State Department was busy...
The federal Zero Trust strategy and Microsoft’s deployment guidance for all
You’d be forgiven for missing the White House announcement on federal Zero Trust strategy on January 26, 2022.1 After all, on that day alone a Supreme Court Justice announced his intention to retire, the Federal Reserve announced its plan to raise interest rates, and the State Department was busy...
This CISO Isn’t Real, But His Problems Sure Are
In 2021, data breaches soared past 2020 levels. This year, it’s expected to be worse. The odds are stacked against this poor guy and you now – but a unified extended detection and response XDR and SIEM restacks them in your favor. Take a few minutes to check out this CISO’s day, and you’ll see ho...
CVE-2022-0646
A flaw use after free in the Linux kernel Management Component Transport Protocol MCTP subsystem was found in the way user triggers cancelworksync after the unregisternetdev during removing device. A local user could use this flaw to crash the system or escalate their privileges on the system. It...
PT-2022-28433
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.176 Description The issue is related to the bnx2fc interface in the Linux Kernel. It involves flushing the destroy work queue before calling the bnx2fc interface put function. The actual impact and attack...
PT-2022-28473
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.96 Description The issue is related to the bnx2fc driver in the Linux Kernel, where the destroy work queue is not properly flushed before calling bnx2fc interface put. This could potentially lead to securit...