Legacy Systems, Real-World Impacts: The Reality of OT Security
I’m here today to write about one particularly thorny area of operational technology (OT) and security that I run into somewhat routinely. Given my own…
Category: SecurityWeek
Two Scattered Spider Hackers Sentenced to Jail in UK
Two members of the Scattered Spider cybercrime group have been sentenced to jail in the United Kingdom, the country’s National Crime Agency (NCA) announced on…
Old UEFI Shims Expose Systems to Secure Boot Bypass
Nearly a dozen Unified Extensible Firmware Interface (UEFI) shim bootloaders signed by Microsoft allow attackers to bypass Secure Boot protections, ESET warns. Small, trusted pieces…
Virtual Event Today: Cloud & Data Security Summit
Join us today (July 15th) for the 2026 Cloud & Data Security Summit to learn the latest strategies, tools, and best practices for strengthening your…
CISA Urges Immediate Patching of Exploited SharePoint Vulnerabilities
The US Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday urged immediate hardening of Microsoft SharePoint servers in light of recently disclosed zero-day vulnerabilities. The…
Unpatched Cursor Vulnerability Exposes Users to Code Execution
An unpatched vulnerability in Cursor on Windows can be triggered for code execution when a developer opens a repository in the application, Mindgard reports. Cursor…
Windows Bind Link Attacks Can Hide Malware From EDR Tools
Security researchers at Bitdefender have demonstrated three attack techniques in which Windows’ bind links can be used to evade endpoint detection and response (EDR) products.…
Critical Vulnerabilities Patched With Fresh Chrome 150, Firefox 152 Updates
Google and Mozilla have released fresh Chrome 150 and Firefox 152 updates that resolve critical-severity vulnerabilities. Mozilla rolled out Firefox 152.0.6 with patches for two…
Adobe Patches Critical ColdFusion Vulnerabilities
Adobe on Tuesday rolled out security updates for 12 products to address 88 vulnerabilities, including critical-severity bugs in ColdFusion, Commerce, Experience Manager, and Illustrator. Out…
Microsoft Patches Record 622 Vulnerabilities, Including Two Exploited Zero-Days
Microsoft on Tuesday announced patches for a record-breaking 622 vulnerabilities, including two bugs in Active Directory and SharePoint Server that have been exploited in the…
Synopsys Finds No Evidence of Data Breach Amid Bosch Hack Claims
Silicon-to-systems design firm Synopsys says it has found no evidence of a data breach after a cybercrime group claimed to have hacked its systems and…
Unpatched Claude for Chrome Flaw Lets Extensions Read Gmail, Calendar
AI security firm Manifold says two vulnerabilities it reported to Anthropic in May remain exploitable in the latest version of Claude for Chrome, the company’s…