Month: October 2024
Microsoft has released the KB5044284 and KB5044285 Windows 11 cumulative updates for versions 24H2 and 22H2/23H2 to fix security vulnerabilities and resolve 27 bugs and performance issues. Both are mandatory cumulative updates containing the October 2024 Patch Tuesday security updates for vulnerabilities discovered in previous months. Windows 11 users can install them by going to…
Read More
Oct 08, 2024Ravie LakshmananZero-Day / Vulnerability Ivanti has warned that three new security vulnerabilities impacting its Cloud Service Appliance (CSA) have come under active exploitation in the wild. The zero-day flaws are being weaponized in conjunction with another flaw in CSA that the company patched last month, the Utah-based software services provider said. Successful exploitation…
Read More
From personalized attacks and malware evasion to audio deepfakes, here’s what you need to know on five of the GenAI-powered threats that security experts are watching right now. GenAI Threats To Know While it’s not always possible to pinpoint exactly where generative AI has played a role in a cyberattack, organizations can assume it’s now…
Read More
An APT hacking group known as GoldenJackal has successfully breached air-gapped government systems in Europe using two custom toolsets to steal sensitive data, like emails, encryption keys, images, archives, and documents. According to an ESET report, this happened at least two times, one against the embassy of a South Asian country in Belarus in September…
Read More
Image: MidjourneyAmerican IT software company Ivanti has released security updates to fix three new Cloud Services Appliance (CSA) zero-days tagged as actively exploited in attacks. As Ivanti revealed on Tuesday, attackers are chaining the three security flaws with another CSA zero-day patched in September. Successful exploitation of these vulnerabilities can let remote attackers run SQL…
Read More
‘Infrastructure is our biggest problem here right now, for customers, for people personally,’ says Ed Tatsch, owner and president of North Carolina MSP ETS Networks. More than 10 days after Hurricane Helene made landfall in Florida and then hit the Southeast, Ed Tatsch, owner and president of Arden, N.C.-based family-run MSP ETS Networks, could call…
Read MoreCISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-45519 Synacor Zimbra Collaboration Command Execution Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known…
Read MoreAs hurricanes and other natural disasters occur, CISA urges individuals to remain on alert for potential malicious cyber activity. Fraudulent emails and social media messages—often containing malicious links or attachments—are common after major natural disasters. Exercise caution in handling emails with hurricane-related subject lines, attachments, or hyperlinks. In addition, be wary of social media pleas,…
Read More
Solutions providers say a focus on sustainability is helping close deals with customers who are concerned with everything from a company’s carbon footprint to getting a handle on soaring power and cooling costs in the data center. Erik Stromquist, chairman and CEO of Portland, Ore.-based custom system builder CTL, says that building out a sustainability…
Read More
‘[Parablu] really broadens our product offerings. Now we can back up the M365 suite. Parablu also brings to us a very solid development organization. They’re based in India, and the executives from the company have 40-plus years of experience in the storage market itself,’ says CrashPlan CEO John Becker. Data protection technology developer CrashPlan Tuesday…
Read More