-
Microsoft Blocks VBA Macros by Default, Temporarily Shuts Down MSIX Protocol
Microsoft is shutting a couple of security holes, including one that has been a favored target of attackers for years and another that the enterprise software giant recently learned could…
-
Thousands of Data Center Management Apps Exposed to Internet
Tens of thousands of applications that are critical to the operations of data centers around the globe are exposed to the internet, with many secured with default factory passwords, posing…
-
Zoom Security Issues Are a Wakeup Call for Enterprises
Video conferencing vendor Zoom has seen its fortunes soar amid the remote work boom of the last two years, and other cloud collaboration platforms like Microsoft Teams and Cisco Webex…
-
Microsoft Fights Off Another Record DDoS Attack as Incidents Soar
Microsoft in November fended off a massive distributed denial-of-service (DDoS) attack in its Azure cloud that officials said was the largest ever recorded, the latest in a wave of record…
-
White House Boosts Zero Trust with New Cybersecurity Strategy
The Biden Administration is pushing federal agencies to adopt a zero-trust security architecture to protect themselves and their data from “increasingly sophisticated and persistent threat campaigns,” according to a new…
-
Easily Exploitable Linux Flaw Exposes All Distributions: Qualys
An easily exploited flaw in a program found in every major Linux distribution is the latest serious security issue that has arisen in the open-source space in recent weeks. Researchers…
-
CISA, Microsoft Warn of Wiper Malware Amid Russia-Ukraine Tensions
The U.S. government agency overseeing cybersecurity is urging the country’s businesses and other organizations to take the necessary steps to protect their networks from any spillover that might occur from…
-
Attacks Escalating Against Linux-Based IoT Devices
Incidents of malware targeting Linux-based Internet of Things (IoT) devices jumped by more than a third in 2021, with three malware families the primary drivers behind the increase. According to…
-
Iran-Based APT35 Group Exploits Log4J Flaw
Security researchers are continuing to see state-supported hacking groups developing tools to leverage the high-profile Log4j vulnerability that exploded onto the scene last month even as the White House and…
-
U.S. Security Agencies Warn About Russian Threat Gangs Amid Ukraine Tensions
U.S. federal security agencies are putting companies on alert to potential threats from Russian state-sponsored cybercriminal groups, warning in particular about dangers to critical infrastructure and urging organizations to learn…
