5 Major Takeaways From Microsoft's July Patch Tuesday
Microsoft's July 2023 Patch Tuesday update is the largest one so far this year, weighing in at a whopping 129 bug fixes, with four of them addressing actively exploited zero-days, and nine...
Fresh MOVEit Bug Under Attack Mere Hours After Disclosure
Jun 25, 2024 · It affects versions from 2023.0.0 before 2023.0.11, from 2023.1.0 before 2023.1.6, and from 2024.0.0 before 2024.0.2 of MOVEit Transfer.
'ResumeLooters' Attackers Steal Millions of Career Records
Feb 6, 2024 · All told, the group — believed to be operating since the beginning of 2023 — stole several databases containing 2,079,027 unique emails and other records in attacks that occurred between …
Attackers Abuse PaperCut RCE Flaws to Take Over Enterprise Print …
Apr 25, 2023 · CVE-2023-27350 exists within the SetupCompleted class and results from improper access control, according to its listing on the Zero Day Initiative website.
Russian Cyberattackers Launch Multiphase PsyOps Campaign
Feb 22, 2024 · The operation — dubbed Operation Texonto — came in two distinct waves, the first in October-November 2023 and the second in November-December 2023, researchers from ESET …
Verizon Employee Data Exposed in Insider Threat Incident
Feb 6, 2024 · About 63,000 Verizon employees have been affected by a breach that occurred in September 2023 but which wasn't discovered for three months.
Microsoft Fixes Failed Patch for Exploited Outlook Vulnerability
May 10, 2023 · CVE-2023-29324 is a remotely exploitable, zero-click vulnerability that renders the patch for the original Outlook vulnerability useless, researchers at Akamai say.
Orgs Have a Long Way to Go in Securing Remote Workforce
Mar 13, 2023 · The insecurity of home networks, employees using company laptops for personal use, and compromised family devices infecting an employee's work device are considered to be the top …
Microsoft 'Logging Tax' Hinders Incident Response, Experts Warn
Jul 17, 2023 · Becky Bracken, Senior Editor, Dark Reading July 17, 2023 3 Min Read Source: dennizn via Alamy Stock Photo
Critical Cisco SMB Router Flaw Allows Authentication Bypass, PoC …
Jan 12, 2023 · The first bug is a critical-rated authentication bypass issue (CVE-2023-20025) that exists in the Web management interface of the devices and carries a rating of 9 out of 10 on the CVSS ...