Microsoft Warns of Exchange Server Zero-Day Exploited in the Wild
Microsoft Exchange Server users are urged to immediately mitigate a newly disclosed zero-day vulnerability that has been exploited in attacks. Microsoft this week patched 137…
Category: SecurityWeek
Chrome 148 Update Patches Critical Vulnerabilities
Google this week released a Chrome 148 update that resolves 79 vulnerabilities, including 14 critical-severity bugs across multiple components. The first critical issue is a…
Mythos Proves Potent in Vulnerability Discovery, Less Convincing Elsewhere
Mythos appears to be as powerful as claimed at detecting software vulnerabilities; but its capabilities in other areas is more nuanced. Anthropic’s Mythos AI model…
New Linux Kernel Vulnerability Fragnesia Allows Root Privilege Escalation
Linux distributions are informing users about a new kernel vulnerability that can be exploited by a local attacker to escalate privileges to root. Dubbed Fragnesia…
Enhancing Data Center Security Without Sacrificing Performance
Every data center cybersecurity team faces the same impossible equation: host-based agents consume CPU cycles that high-performance computing requires. For years, the industry has tried…
Chinese APTs Expand Targets, Update Backdoors in Recent Campaigns
China-linked state-sponsored hackers have been observed expanding their targets and updating malicious tools in fresh campaigns that either follow known patterns or adapt to current…
Researcher Drops YellowKey, GreenPlasma Windows Zero-Days
A disgruntled security researcher this week publicly disclosed two zero-day vulnerabilities in Windows that enable BitLocker bypass and privilege escalation. BitLocker, Windows’ built-in full-volume encryption…
Sweet Security Launches Agentic AI Red Teaming to Counter ‘Mythos Moment’
The Mythos Moment can be defined as the moment when industry fully realized that human security has no chance of matching the speed and volume…
Microsoft, Palo Alto Networks Find Many Vulnerabilities by Using AI on Their Own Code
Microsoft and Palo Alto Networks have separately reported this week that they have seen significant results after turning AI on their own code to find…
Foxconn Confirms North American Factories Hit by Cyberattack
Taiwanese electronics manufacturing giant Foxconn has confirmed that some of its North American factories have been hit by a cyberattack. “The cybersecurity team immediately activated…
Government to Scrutinize Instructure Over Canvas Disruption, Data Breach
The US House Committee on Homeland Security has asked Instructure to provide details on the recent cyberattacks that disrupted its broadly used online learning system…
Hundreds of Malicious Packages Force RubyGems to Suspend Registrations
New account registrations on RubyGems.org, the official Ruby gem hosting service, have been suspended after threat actors published hundreds of malicious packages. RubyGems maintainers announced…