Microsoft December Patch Tuesday 2024 Fixes 70 CVEs
Microsoft’s December Patch Tuesday update, the last one of 2024, addresses a massive number of vulnerabilities, including 71 newly identified flaws across various products. As…
Author: Cybernoz
China-linked relies on Visual Studio Code Remote Tunnels to spy on Europen entities
Operation Digital Eye: China-linked relies on Visual Studio Code Remote Tunnels to spy on Europen entities Pierluigi Paganini December 11, 2024 An alleged China-linked APT…
A Cloud Reality Check for Federal Agencies
The move to cloud is not slowing down – spending by Federal civilian agencies on cloud computing could reach $8.3 billion in Fiscal Year (FY) 2025. But…
Global Ongoing Phishing Campaign Targets Employees Across 12 Industries
SUMMARY A sophisticated phishing campaign is targeting employees of 30+ companies across 12 industries worldwide. Over 200 malicious links have been distributed, designed to steal…
Microsoft enforces defenses preventing NTLM relay attacks
Since making Kerberos the default Windows authentication protocol in 2000, Microsoft has been working on eventually retiring NTLM, its less secure and obsolete counterpart. Until…
CISA Releases Seven New Advisories for Industrial Control Systems
The Cybersecurity and Infrastructure Security Agency (CISA) has released seven new advisories highlighting critical vulnerabilities in widely used Industrial Control Systems (ICS). These vulnerabilities, if…
Windows RDP Service Flaw let Hackers Execute Remote Code
A critical security vulnerability (CVE-2024-49115) in Windows Remote Desktop Services (RDS) has been disclosed, potentially allowing hackers to execute arbitrary remote code via the network.…
Google demos next-gen error correction with Willow quantum tech
Researchers from Google have demonstrated a new generation of quantum computer, called Willow, which is able to run its random circuit sampling (RCS) benchmark significantly…
TCC iOS Subsystem Vulnerability Exposes iCloud Data To Attackers
A significant security flaw in Apple’s iOS operating system has been uncovered, allowing malicious applications to access sensitive user data stored in iCloud without any…
BadRAM: $10 hack unlocks AMD encrypted memory
Cybersecurity researchers have identified a vulnerability (CVE-2024-21944, aka BadRAM) affecting ADM processors that can be triggered by rogue memory modules to unlock the chips’ encrypted…
Chinese national charged for hacking thousands of Sophos firewalls
Chinese national charged for hacking thousands of Sophos firewalls Pierluigi Paganini December 11, 2024 The U.S. has charged a Chinese national for hacking thousands of…
Chinese Hacker Charged for Hacking 81,000+ Firewalls Worldwide
The cybersecurity firm Sichuan Silence and one of its employees, Guan Tianfeng, have been sanctioned by the Department of the Treasury’s Office of Foreign Assets…