Cybersecurity News, Insights and Analysis | SecurityWeek
Webinar: Shield Your Data, Secure Your Future: A Multi-Layered Approach to Operational Resilience. September 25, 2024. Join SecurityWeek and Hitachi Vantara for this this webinar to gain valuable insights and actionable steps to enhance your organization’s data security and resilience. Register.
Microsoft Confirms Exploited Zero-Day in Windows Management …
Ryan Naraine. October 8, 2024. Microsoft issued an urgent warning on Tuesday about an actively exploited code execution vulnerability in a Windows component used for system configuration and monitoring. The zero-day, tagged as CVE-2024-43572, is documented as a remote code execution issue in Microsoft Management Console (MMC), an oft-targeted ...
Recent Veeam Vulnerability Exploited in Ransomware Attacks
October 11, 2024. Ransomware operators are exploiting a critical-severity vulnerability in Veeam Backup & Replication to create rogue accounts and deploy malware, Sophos warns. The issue, tracked as CVE-2024-40711 (CVSS score of 9.8), can be exploited remotely, without authentication, for arbitrary code execution, and was patched in early ...
CISO Salary Surge: Fewer Job Changes, Bigger Paychecks for …
Oct 3, 2024 · Experience is also important. “Two-thirds of CISOs with top-quartile compensation have at least eight years’ tenure, 69% have held the top security job at multiple companies and 61% have cross-industry experience,” notes the report.. “Our CISO compensation analysis found tenured CISOs (with eight to 15 years of CISO experience) who held CISO or senior security …
Microsoft, DOJ Dismantle Domains Used by Russian FSB-Linked …
October 3, 2024. Microsoft and the US Justice Department on Thursday announced the disruption of the technical infrastructure used by a Russian government-backed APT caught hacking specific targets in academia, defense, governmental organizations, NGOs and think-tanks. The coordinated action resulted in the seizure of more than 100 domains used ...
Organizations Warned of Exploited Fortinet FortiOS Vulnerability
Oct 10, 2024 · The US cybersecurity agency CISA on Wednesday warned that a Fortinet FortiOS flaw patched in February is being exploited in the wild and has added it to its Known Exploited Vulnerabilities (KEV) list along with two Ivanti Cloud Services Appliance (CSA) bugs. Tracked as CVE-2024-23113 (CVSS score of 9.8), the FortiOS defect is described as an ...
Microsoft's Take on Kernel Access and Safe Deployment Following ...
Oct 10, 2024 · On July 19, 2024, two additional IPC Template Instances were deployed.This required a comparison against the 21st value when only 20 were expected. In CrowdStrike’s words, “The attempt to access the 21st value produced an out-of-bounds memory read beyond the end of the input data array and resulted in a system crash.”
Microsoft Hires New CISO in Major Security Shakeup
December 6, 2023. Microsoft security boss Charlie Bell has quietly executed a major shakeup of the software giant’s security hierarchy, removing the CISO and Deputy CISO and handing the reins to Igor Tsyganskiy, a recent hire who previously served as CTO and President at asset management giant Bridgewater Associates.
Attack Surface Management Startup WatchTowr Raises $19 Million
October 10, 2024. WatchTowr, a Singapore-based company that provides external attack surface management through a continuous automated red teaming platform, on Thursday announced raising $19 million in a Series A funding round. The investment, which brings the total raised by the company to $29 million, was led by Peak XV (formerly Sequoia ...
Kaspersky, Pango Respond to User Backlash as Transition to …
Sep 27, 2024 · The transition kicked off on September 17, roughly two weeks after Kaspersky announced an agreement with Pango Group to take over its US user base following a ban and sanctions, and move it to UltraAV. The deal was struck as result of a long-standing relationship between the two companies, part of which involved Kaspersky licensing a Pango ...