Month: June 2024
Progress disclosed the authentication bypass vulnerability Tuesday and ‘very shortly after’ began seeing attempted exploits, according to Shadowserver researchers. Progress disclosed a critical new vulnerability in MOVEit Transfer Tuesday and “very shortly after” began seeing attempted exploits by hackers, according to researchers at Shadowserver. The disclosure comes just over a year after widespread attacks targeted…
Read More
‘I was impressed by Auvik’s ability to innovate while creating a product that is easy to implement, as well as their proven track record of delivering exceptional customer value and placing the customer first,’ says Mark Ralls, Auvik’s new president. Auvik Wednesday said it appointed a new president and a new chief sales officers to…
Read More
Jun 26, 2024NewsroomVulnerability / Data Protection A newly disclosed critical security flaw impacting Progress Software MOVEit Transfer is already seeing exploitation attempts in the wild shortly after details of the bug were publicly disclosed. The vulnerability, tracked as CVE-2024-5806 (CVSS score: 9.1), concerns an authentication bypass that impacts the following versions – From 2023.0.0 before…
Read More
The maker of software used by thousands of car dealerships says June 30 is likely to be the soonest it will be able to recover from last week’s cyberattacks. CDK Global said Tuesday that it expects to need at least through the weekend to recover in the wake of a pair of cyberattacks, with June…
Read More
The June 2024 optional update for Windows 11 is now available. The latest update, KB5039302, is for Windows 11 version 22H2 and newer and brings several new features and fixes. Since this is an optional update, it doesn’t introduce major new features but focuses on improving quality and fixing bugs. This update advances Windows 11…
Read More
Cyera, Glean and xAI are among the recently founded AI companies capturing major investor attention. A data security platform powered by artificial intelligence, a provider of AI agents and assistants founded on company data, and Elon Musk’s mysterious AI company are among the most well-funded startups so far in 2024. Cyera, Glean and xAI are…
Read More
Threat actors are already trying to exploit a critical authentication bypass flaw in Progress MOVEit Transfer, less than a day after the vendor disclosed it. MOVEit Transfer is a managed file transfer (MFT) solution used in enterprise environments to securely transfer files between business partners and customers using the SFTP, SCP, and HTTP protocols. The…
Read MoreToday, CISA, in partnership with the Federal Bureau of Investigation, Australian Signals Directorate’s Australian Cyber Security Centre, and Canadian Cyber Security Center, released Exploring Memory Safety in Critical Open Source Projects. This guidance was crafted to provide organizations with findings on the scale of memory safety risk in selected open source software (OSS). This joint…
Read More
The June 2024 optional update for Windows 10 is now available. Today’s update brings KB5039299 for Windows 10 version 22H2 with up to ten bug fixes or changes. This update bumps Windows 10 22H2 to Build 19045.4598. Since this is an optional release, it doesn’t add new features but has several quality improvements. For example, Microsoft has patched an…
Read More
A novel Android attack vector from a piece of malware tracked as Snowblind is abusing a security feature to bypass existing anti-tampering protections in apps that handle sensitive user data. Snowblind’s goal is to repackage a target app to make them unable to detect abuse of accessibility services that allow it to obtain user input…
Read More