Author: nlqip
‘Reports have shown this vulnerability to be exploited in the wild,’ the security vendor says in an advisory Wednesday. Fortinet disclosed Wednesday that a critical-severity vulnerability affecting numerous versions of FortiManager has seen exploitation in attacks. The flaw is tracked at CVE-2024-47575 and can enable remote execution of code by an unauthenticated threat actor, according…
Read More
The North Korean Lazarus hacking group exploited a Google Chrome zero-day tracked as CVE-2024-4947 through a fake decentralized finance (DeFi) game targeting individuals in the cryptocurrency space. Kaspersky discovered the attacks on May 13, 2024, and reported the Chrome zero-day flaw to Google. Google issued a fix for CVE-2024-4947 on May 25, with Chrome version 125.0.6422.60/.61. Lazarus…
Read More
New variants of a banking malware called Grandoreiro have been found to adopt new tactics in an effort to bypass anti-fraud measures, indicating that the malicious software is continuing to be actively developed despite law enforcement efforts to crack down on the operation. “Only part of this gang was arrested: the remaining operators behind Grandoreiro…
Read More
In an opinion piece published Tuesday in Fortune, four former Intel board members say the U.S. government should use the nearly $20 billion in federal funding it promised to the semiconductor giant as leverage to force the chipmaker to split itself into two companies. Four former Intel board members said the beleaguered semiconductor giant should…
Read More
In the world of cybersecurity, protecting endpoints – such as computers, laptops, and mobile devices – is a top priority for organizations of all sizes.Two common approaches to endpoint security are Endpoint Detection and Response (EDR) and traditional antivirus solutions. While both aim to protect against cyber threats, they differ significantly in their capabilities and…
Read More
Google has announced it will soon allow organizations to create their own curated “Enterprise Web Store” of company-sanctioned browser extensions for Chrome and ChromeOS, aimed at improving productivity, security, and management for businesses. The new store, planned to enter preview later this year, aims to provide businesses with a dedicated, curated environment for browser extensions…
Read More
‘As we reposition the focus of the organization [and as] we move from spending most of our time in the Fortune 1000 to a broader exposure to the business market, I do see those volumes starting to take off, and I see our distribution starting to ramp. They’re just not doing so at the rate…
Read More
Fortinet publicly disclosed today a critical FortiManager API vulnerability, tracked as CVE-2024-47575, that was exploited in zero-day attacks to steal sensitive files containing configurations, IP addresses, and credentials for managed devices. The company privately warned FortiManager customers about the flaw starting October 13th in advanced notification emails seen by BleepingComputer that contained steps to mitigate the flaw…
Read More
Key Steps for Effective Enterprise Data Protection The need for effective enterprise data protection has never been greater. Not only are companies around the world facing more threats than ever before, but the penalties for failures in this area are also significant. Potential consequences come from both regulators, who are taking a tougher line than…
Read More
Ransomware Detection: Effective Strategies and Tools In today’s environment, it may be impossible to avoid falling victim to a hacking attack altogether. The scale of criminal activity and the complex, constantly-evolving tactics used by ransomware groups means that even the best-prepared businesses cannot block every attack from infiltrating their networks. Therefore, being able to detect…
Read More