U.S. CISA adds Microsoft Windows CLFS driver flaw to its Known Exploited Vulnerabilities catalog
11
Dec
2024

U.S. CISA adds Microsoft Windows CLFS driver flaw to its Known Exploited Vulnerabilities catalog

U.S. CISA adds Microsoft Windows CLFS driver flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini December 11, 2024 U.S. Cybersecurity…

Head Mare infection chain (Cyble)
11
Dec
2024

Head Mare Targets Russian Orgs With Hidden LNK Files, Ransomware

Cyble researchers have detected a new campaign targeting Russia by the hacktivist group Head Mare that uses a disguised LNK…

Microsoft December 2024 Patch Tuesday addressed actively exploited zero-day
11
Dec
2024

Microsoft December 2024 Patch Tuesday addressed actively exploited zero-day

Microsoft December 2024 Patch Tuesday addressed actively exploited zero-day Pierluigi Paganini December 10, 2024 Microsoft December 2024 Patch Tuesday security…

Dangerous CLFS and LDAP flaws stand out on Patch Tuesday
11
Dec
2024

Dangerous CLFS and LDAP flaws stand out on Patch Tuesday

Microsoft has issued fixes for 71 new Common Vulnerabilities and Exposures (CVEs) to mark the final Patch Tuesday of 2025,…

Ron Wyden
11
Dec
2024

Wyden proposes bill to secure US telecoms after Salt Typhoon hacks

U.S. Senator Ron Wyden of Oregon announced a new bill to secure the networks of American telecommunications companies breached by…

Microsoft fixes exploited zero-day (CVE-2024-49138)
11
Dec
2024

Microsoft fixes exploited zero-day (CVE-2024-49138)

On December 2024 Patch Tuesday, Microsoft resolved 71 vulnerabilities in a variety of its products, including a zero-day (CVE-2024-49138) that’s…

Telstra fined $3m over Triple Zero outage
11
Dec
2024

Telstra fined $3m over Triple Zero outage – Telco/ISP

Telstra has been fined $3 million for a Triple Zero outage earlier this year that led to 127 calls not…

Windows 11
11
Dec
2024

Windows 11 KB5048667 & KB5048685 cumulative updates released

Microsoft has released the Windows 11 KB5048667 and KB5048685 cumulative updates for versions 24H2 and 23H2 to fix security vulnerabilities and issues. Both…

US sanctions Chinese cybersecurity company for firewall compromise, ransomware attacks
10
Dec
2024

US sanctions Chinese cybersecurity company for firewall compromise, ransomware attacks

The Department of the Treasury is sanctioning Chinese cybersecurity company Sichuan Silence, and one of its employees, Guan Tianfeng, for…

Optus lands CBA's Jesse Arundell for its new AI division
10
Dec
2024

Optus lands CBA’s Jesse Arundell for its new AI division – Software – Telco/ISP

Optus has brought former Commonwealth Bank head of emerging tech Jesse Arundell into its new artificial intelligence unit.  Holding the…

Ivanti
10
Dec
2024

Ivanti warns of maximum severity CSA auth bypass vulnerability

Today, Ivanti warned customers about a new maximum-severity authentication bypass vulnerability in its Cloud Services Appliance (CSA) solution. The security…

Australia Post's new POS beset by technical problems
10
Dec
2024

Australia Post’s new POS beset by technical problems – Cloud – Software

Australia Post’s new point-of-sale platform has been beset by multiple technical troubles, including outages and missing transactions, since its launch…