Security Affairs
Samba released updates to address multiple vulnerabilities that can be exploited to take control of impacted systems. Samba released updates to address multiple vulnerabilities, tracked as CVE-2022-38023, CVE-2022-37966, CVE-2022-37967, and CVE-2022-45141, that can be exploited to take control of impacted systems. On December 15, 2022, Samba announced the 4.17.4, 4.16.8 and 4.15.13 security releases to address […]
The Hacker News
Samba has released updates to fix several vulnerabilities that could potentially allow hackers to gain control of affected systems.
Naked Security
Enjoy our Serious Security deep dive into this real-world example of why cryptographic agility is important!
Bleeping Computer
Microsoft announced that the new Windows 11 build rolling out to Insiders in the Canary channel comes with increased protection against phishing attacks and support for SHA-3 cryptographic hash functions.
Cyber Security News
Rekoobe is a backdoor malware that targets vulnerable Linux servers known to be used by the Chinese APT31.
Bleeping Computer
Password-protected ZIP archives are common means of compressing and sharing sets of files—from sensitive documents to malware samples to even malware (phishing "invoices" in emails). But, did you know it is possible for an encrypted ZIP file to have two correct passwords, with both producing the same outcome on extraction?
SecurityWeek
Microsoft has released an out-of-band update after learning that the security patch for CVE-2022-37966 started causing Kerberos authentication issues.
Security Affairs
Microsoft released an out-of-band update to fix problems tied to a recent Windows security patch that caused Kerberos authentication issues. Microsoft released an out-of-band update to address issues caused by a recent Windows security patch that causes Kerberos authentication problems. Microsoft Patch Tuesday security updates for November 2022 addressed a privilege escalation vulnerability, tracked as CVE-2022-37966, […]
Latest Hacking News
This week marked the Redmond giant Microsoft’s monthly security updates for its products. With Patch Tuesday November, Microsoft addressed fewer vulnerabilities – over 60 only, including five zero-day flaws. Five Zero-Days Patched With Latest Microsoft Updates Microsoft
SecurityWeek
Redmond’s security response team flags two vulnerabilities -- CVE-2023-36033 and CVE-2023-36036 -- already being exploited in the wild.
DarkReading
Long-awaited security fixes for ProxyNotShell and Mark of the Web bypasses are part of a glut of actively exploited zero-day vulnerabilities and other critical flaws that admins need to prioritize in the coming hours.
Bleeping Computer
New malware dubbed Cyclops Blink has been linked to the Russian-backed Sandworm hacking group in a joint security advisory published today by US and UK cybersecurity and law enforcement agencies.
Bleeping Computer
Tuta Mail has announced TutaCrypt, a new post-quantum encryption protocol to secure communications from powerful and anticipated decryption attacks.
ThreatPost
Researchers have discovered that a Kazakhstan government entity deployed sophisticated Italian spyware within its borders.
Security Affairs
CyberNews experts discovered that ENC Security, a Netherlands software company, had been leaking critical business data since May 2021. Original post at https://cybernews.com/security/encsecurity-leaked-sensitive-data/ When you buy a Sony, Lexar, or Sandisk USB key or any other storage device, it comes with an encryption solution to keep your data safe. The software is developed by a […]
Bleeping Computer
QNAP customers are once again urged to secure their Network Attached Storage (NAS) devices to defend against Agelocker ransomware attacks targeting their data.
Cyber Security News
Microsoft has released their security patches for Nov 2023. Nearly 58 flaws, 5 zero-day vulnerabilities have been patched by Microsoft.
Bleeping Computer
The Aberebot banking trojan appears to have returned, as its author is actively promoting a new version of the tool on dark web markets and forums.
The Hacker News
Microsoft's latest round of monthly security updates has been released with fixes for 68 vulnerabilities spanning its software portfolio.
Bleeping Computer
A new ransomware operation is hacking Zimbra servers to steal emails and encrypt files. However, instead of demanding a ransom payment, the threat actors claim to require a donation to charity to provide an encryptor and prevent data leaking.
Bleeping Computer
Today is Microsoft's November 2023 Patch Tuesday, which includes security updates for a total of 58 flaws and five zero-day vulnerabilities.
Ars Technica
The Russian government's Sandworm group uses previously unseen Cyclops Blink.
DarkReading
Another two bugs in this month's set of fixes for 63 CVEs were publicly disclosed previously but have not been exploited yet.
Ars Technica
SHARPEXT has slurped up thousands of emails in the past year and keeps getting better.
.webp)
Cyber Security News
Metasploit Framework 6.4 is a testament to this ongoing battle, bringing a host of new features and improvements of cybersecurity.
Naked Security
Wondering how you’d handle a data breach report if the worst happened to you? Here’s a useful example.
Naked Security
Even in Apple’s and Google’s “walled gardens”, there are plenty of 2FA apps that are either dangerously incompetent, or unrepentantly malicious. (Or perhaps both.)
Naked Security
An email you haven’t even looked at yet could be used to trick Outlook into helping crooks to logon as you.
The Hacker News
Discover the untold security secrets of 5G! Find out how encryption, privacy protection, and more are transforming mobile connectivity.
Naked Security
Cryptographic agility: the ability and the willingness to change quickly when needed.
Computerworld
The December Patch Tuesday update from Microsoft fixes 59 flaws, including two zero-day vulnerabilities in Windows that need to be addressed right away.
The DFIR Report
In June, we saw another threat actor utilize IcedID to download Cobalt Strike (CS), which was used to pivot to other systems in the environment. Similar to the Sodinokibi case, anti-virus (AV) slowed down the attackers. AV frustrated them to the point where they temporarily left the environment.
Bleeping Computer
Today is Microsoft's November 2022 Patch Tuesday, and with it comes fixes for six actively exploited Windows vulnerabilities and a total of 68 flaws.
Naked Security
Lots of big issues this week: breaches, encryption, supply chains and patching problems. Listen now! (Full transcript inside.)