Category: Kamban

VMware has released another security update for CVE-2024-38812, a critical VMware vCenter Server remote code execution vulnerability that was not correctly fixed in the first patch from September 2024. The flaw is rated critical (CVSS v3.1 score: 9.8) and stems from a heap overflow weakness in vCenter’s DCE/RPC protocol implementation, impacting the vCenter Server and…

In today’s digital age, protecting sensitive data and maintaining robust security practices are top priorities for businesses of all sizes. One key aspect of this is SOC compliance, a set of standards that helps organizations demonstrate their commitment to security and build trust with clients and partners.   What is SOC Compliance? SOC, which stands…

Threat actors have been exploiting a vulnerability in the Roundcube Webmail client to target government organizations in the Commonwealth of Independent States (CIS) region, the successor of the former Soviet Union. An attack was discovered by Russian cybersecurity company Positive Technologies in September, but the researchers determined that the threat actor activity had started in…

Cyber-resilience has become more crucial than ever, as demonstrated by the recent CrowdStrike incident that led to widespread IT outages. This event, deemed “the largest IT outage in history,” disrupted critical services like air traffic control and government departments, showing how even a small percentage of offline devices can cause global chaos. Microsoft estimated that…

Microsoft is warning of Windows crashing with the blue screen of death on some ASUS laptop models when trying to upgrade to the latest version of the operating system, Windows 11 version 24H2. Microsoft acknowledged the problem in a bulletin late last week, noting that it impacts ASUS X415KA and X515KA laptop models. The technology giant explained that…

Microsoft is warning of Windows crashing with the blue screen of death on some ASUS laptop models when trying to upgrade to the latest version of the operating system, Windows 11 version 24H2. Microsoft acknowledged the problem in a bulletin late last week, noting that it impacts ASUS X415KA and X515KA laptop models. The technology giant explained that…

The Bumblebee malware loader has been spotted in new attacks recently, more than four months after Europol disrupted it during ‘Operation Endgame’ in May. Believed to be the creation of TrickBot developers, the malware emerged in 2022 as a replacement for the BazarLoader backdoor to provide ransomware threat actors access to victim networks. Bumblebee typically achieves…

In the ever-changing world of cyber threats, organizations need robust tools to protect their digital assets. One such tool that has gained significant attention in recent years is EDR. But what is EDR in cyber security, and why is it becoming an indispensable part of modern security strategies?   What is EDR in Cyber Security?…