Author: nlqip
In a shocking cyber revelation, Chinese hackers are suspected of targeting cellphones belonging to former President Donald Trump and his 2024 running mate, Senator JD Vance. According to informed sources, the Trump/Vance campaign was alerted that both Trump and Vance may be among several individuals whose phone numbers were allegedly compromised. As the cybersecurity community…
Read MoreMS-ISAC ADVISORY NUMBER: 2024-121 DATE(S) ISSUED: 10/27/2024 OVERVIEW: Multiple vulnerabilities have been discovered in Apple products, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated…
Read MoreMS-ISAC ADVISORY NUMBER: 2024-122 DATE(S) ISSUED: 10/29/2024 OVERVIEW: Multiple vulnerabilities have been discovered in Siemens InterMesh Subscriber Devices, the most severe of which could allow for remote code execution. InterMesh leverages mesh radio technology and hardened alarm monitoring panels to create a private, self-healing network that delivers alarm signals. Successful exploitation of the most severe…
Read More
AMD CEO Lisa Su says the $500 million upgrade in the company’s Instinct GPU 2024 sales forecast was based on the completion of ‘some important customer milestones’ such as meeting reliability requirements in data centers and optimizing the chips on certain AI workloads. AMD said it now expects to make more than $5 billion from…
Read More
Free unofficial patches are now available for a new Windows Themes zero-day vulnerability that allows attackers to steal a target’s NTLM credentials remotely. NTLM has been extensively exploited in NTLM relay attacks, where threat actors force vulnerable network devices to authenticate against servers under their control, and pass-the-hash attacks, where they exploit system vulnerabilities or deploy…
Read More
‘We are committed to equipping MSPs with the most advanced tools to protect their clients’ data,’ says SaaS Alerts CEO Jim Lippie. ‘Integrating SaaS Alerts into Kaseya 365 User means MSPs can now deliver advanced threat detection and response capabilities specifically tailored to the user and application level.’ Kaseya announced today that it bought cybersecurity…
Read More
Over 22,000 CyberPanel instances exposed online to a critical remote code execution (RCE) vulnerability were mass-targeted in a PSAUX ransomware attack that took almost all instances offline. This week, security researcher DreyAnd disclosed that CyberPanel 2.3.6 (and likely 2.3.7) suffers from three distinct security problems that can result in an exploit allowing unauthenticated remote root access…
Read More
The cybersecurity vendor says in a federal lawsuit over the July IT outage that it ‘certainly did not cause the harm that Delta claims.’ CrowdStrike has filed a lawsuit against Delta over the July IT outage that crippled the airline for days, formally accusing Delta of seeking to “shift blame” for its own failings to…
Read More
Among the highlights of the XChange Best of Breed conference were a number of lessons for the AI era from the top CEOs in the business, including a massive infrastructure upgrade opportunity, a shift by more partners into the MSSP market and the continued rise of the marketplace model. Here’s a look at the 10…
Read More
In an exclusive interview with CRN, Michael Green, general manager of Intel’s new North America partner scale group, says his top priorities are to grow the chipmaker’s business with partners and get his employees familiar with new roles as he pushes for greater efficiency within the semiconductor giant’s partner programs. After becoming Intel’s U.S. channel…
Read More