Microsoft Improving Windows Authentication, Disabling NTLM
Microsoft is pushing for more secure Windows authentication with new features for Kerberos that would eventually eliminate the use of the NTLM protocol. A challenge-response…
Category: SecurityWeek
Equifax Gets $13.5 Million Fine Over 2017 Data Breach
The British watchdog Financial Conduct Authority (FCA) on Friday announced that it has fined Equifax Ltd, the UK arm of credit reporting firm Equifax Inc,…
EPA Withdraws Water Sector Cybersecurity Rules Due to Lawsuits
The US Environmental Protection Agency (EPA) has withdrawn cybersecurity rules for public water systems due to lawsuits filed by states and non-profit water associations. The…
Spyware Caught Masquerading as Israeli Rocket Alert Applications
In the wake of the Israel-Gaza conflict, threat actors have been observed targeting Israeli rocket alerting applications to spread fear and mobile spyware, Cloudflare reports.…
CISA Now Flagging Vulnerabilities, Misconfigurations Exploited by Ransomware
The US cybersecurity agency CISA is stepping up its efforts to prevent ransomware by making it easier for organizations to learn about vulnerabilities and misconfigurations…
In Other News: Ex-Uber Security Chief Appeal, New Offerings From Tech Giants, Crypto Bounty
SecurityWeek is publishing a weekly cybersecurity roundup that provides a concise compilation of noteworthy stories that might have slipped under the radar. We provide a…
Juniper Networks Patches Over 30 Vulnerabilities in Junos OS
Networking equipment manufacturer Juniper Networks on Thursday announced patches for more than 30 vulnerabilities in Junos OS and Junos OS Evolved, including nine high-severity flaws.…
Microsoft Offers Up to $15,000 in New AI Bug Bounty Program
Microsoft on Thursday announced the launch of a new bug bounty program focused on artificial intelligence. The program, which initially focuses on AI-powered Bing, offers…
Dozens of Squid Proxy Vulnerabilities Remain Unpatched 2 Years After Disclosure
Dozens of vulnerabilities affecting the Squid caching and forwarding web proxy remain unpatched two years after a researcher responsibly disclosed them to developers. Squid is…
SEC Investigating Progress Software Over MOVEit Hack
The US Securities and Exchange Commission is launching its own investigation into the vulnerability in Progress Software’s MOVEit transfer tool that exposed data from more…
Backdoor Malware Found on WordPress Website Disguised as Legitimate Plugin
A threat actor has deployed a WordPress backdoor that can hide its presence by posing as a legitimate plugin, WordPress security firm Defiant reports. Identified…
Apple Releases iOS 16 Update to Patch Exploited Vulnerability
Apple has released iOS and iPadOS updates to patch a kernel vulnerability that has been exploited in attacks. The flaw, tracked as CVE-2023-42824, has been…