Author: nlqip
Today, CISA and FBI are releasing their newest Secure by Design Alert in the series, Eliminating OS Command Injection Vulnerabilities, in response to recent well-publicized threat actor campaigns that exploited OS command injection defects in network edge devices (CVE-2024-20399, CVE-2024-3400, CVE-2024-21887) to target and compromise users. These vulnerabilities allowed unauthenticated malicious actors to remotely execute code on network…
Read More
A large-scale fraud campaign with over 700 domain names is likely targeting Russian-speaking users looking to purchase tickets for the Summer Olympics in Paris. The operation offers fake tickets to the Olympic Games and appears to take advantage of other major sports and music events. Researchers analyzing the campaign are calling it Ticket Heist and…
Read More
‘[Broadcom’s] been an incredibly successful company. They have a strategy and approach that they take. But I can tell you, it’s not sitting well with the majority of the customers—a very large majority. Customers are looking for alternatives,’ says WWT CEO Jim Kavanaugh. Jim Kavanaugh, CEO of the $20 billion tech powerhouse World Wide Technology,…
Read More
Japan’s Computer Emergency Response Team Coordination Center (JPCERT/CC) is warning that Japanese organizations are being targeted in attacks by the North Korean ‘Kimsuky’ threat actors. The US government has attributed Kimsuky as a North Korean advanced persistent threat (APT) group that conducts attacks against targets worldwide to gather intelligence on topics of interest to the…
Read More
As part of its efforts to challenge Nvidia, the chip designer says its $665 million acquisition of European AI lab and open-source large language model developer Silo AI will help enterprises develop and deploy AI solutions faster and more effectively. AMD has reached a deal to acquire Silo AI, which it called the largest private…
Read More
The Russia-based cybercrime group dubbed “Fin7,” known for phishing and malware attacks that have cost victim organizations an estimated $3 billion in losses since 2013, was declared dead last year by U.S. authorities. But experts say Fin7 has roared back to life in 2024 — setting up thousands of websites mimicking a range of media…
Read More
Microsoft fixed a Windows zero-day vulnerability that has been actively exploited in attacks for eighteen months to launch malicious scripts while bypassing built-in security features. The flaw, tracked as CVE-2024-38112, is a high-severity MHTML spoofing issue fixed during the July 2024 Patch Tuesday security updates. Haifei Li of Check Point Research discovered the vulnerability and disclosed…
Read More
Microsoft has fixed a known issue causing restart loops and taskbar problems on Windows 11 systems after installing the June KB5039302 preview update. “This issue was resolved in updates released July 9, 2024 (KB5040442) and later,” the company said in an update added to the Windows release health page on Tuesday. “We recommend you install…
Read More
‘With my experience in the past selling into the VAR and MSP channels, we think there’s a big opportunity to focus on that and to work with MSP partners to bring these AI phone agents to market,’ says Vida CEO Lyle Pratt. Carrier-grade AI voice agent developer Vida unveiled the launch of a new platform…
Read MoreRADIUS Vulnerability New attack against the RADIUS authentication protocol: The Blast-RADIUS attack allows a man-in-the-middle attacker between the RADIUS client and server to forge a valid protocol accept message in response to a failed authentication request. This forgery could give the attacker access to network devices and services without the attacker guessing or brute forcing…
Read More