PoC Exploit Released for Windows Task Scheduler Zero-day Flaw, Exploited in Wild

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A proof-of-concept (PoC) exploit has been released for a critical zero-day vulnerability in the Windows Task Scheduler, identified as CVE-2024-49039. This privilege escalation flaw, which has been actively exploited in the wild, poses a significant threat to Windows users worldwide. …

Microsoft Ignite 2024 live : Highlights From Threat Intelligence to AI Governance

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

AI transformation starts with security. This theme echoed throughout Microsoft Ignite 2024, with security discussions drawing large crowds and securing top spots in the conference’s most-attended sessions. Hundreds of security and IT professionals gathered early for the Microsoft Ignite Security …

Sweet Security Introduces Evolutionary Leap in Cloud Detection and Response, Releasing First Unified Detection & Response Platform

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

With Sweet, customers can now unify detection and response for applications, workloads, and cloud infrastructure  Sweet Security today announced the release of its unified Cloud Native Detection and Response platform, designed to transform the way organizations protect their cloud environments …

Hackers Exploited Windows Event Logging Tool To Steal Data Secretly

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Wevtutil.exe, a Windows event log utility, can be used maliciously in Living Off the Land (LOLBAS) to export logs for exfiltration, query specific event data, or clear logs. Attackers increasingly use Living Off the Land Binaries and Scripts (LOLBAS) tactics. …

Hackers Used Weaponized Resume To Infect User & Moved To Server Environments – Incident Report

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated cyber attack was detected in March 2024, revealing a complex intrusion that began with a weaponized resume and culminated in the compromise of multiple servers. This incident highlights the evolving tactics of threat actors and the importance of …

Microsoft Unveils Windows Resiliency Initiative To Prevent Phishing Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has announced its Windows Resiliency Initiative, a comprehensive strategy aimed at fortifying Windows against emerging threats, with a particular focus on preventing phishing attacks. This initiative, unveiled at Ignite 2024, represents a significant step forward in Microsoft’s ongoing commitment …

Cyber Monday Deals: Learn 100+ Premium Cybersecurity Courses With Ethical Hackers Academy

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

This Cyber Monday Deals 2024, Ethical Hackers Academy is offering an exclusive deal on its Diamond Membership, a gateway to mastering the world of cybersecurity. Whether you’re an aspiring ethical hacker or a seasoned professional, this once-in-a-year offer ensures you …

HPE IceWall Products Vulnerability Let Attackers Cause Unauthorized Data Modification

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A high-severity security vulnerability has been recently disclosed by Hewlett Packard Enterprise (HPE) in its IceWall products that could potentially allow remote attackers to cause unauthorized data modification. The vulnerability, identified as CVE-2024-11856, affects multiple versions of HPE IceWall modules …

Microsoft 365 Copilot Reloaded With Enhanced AI Capabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a significant move to bolster productivity and efficiency, Microsoft has unveiled a suite of new features and enhancements for Microsoft 365 Copilot in its November 2024 update. These updates span across admin capabilities, end-user features, and analytics tools, promising …

IBM Security Verify Vulnerabilities Let Attackers Execute Arbitrary Commands

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

IBM disclosed multiple critical vulnerabilities affecting its Security Verify Access Appliance, potentially exposing users to severe security risks. The vulnerabilities are identified as:- CVE-2024-49803 CVE-2024-49804 CVE-2024-49805 CVE-2024-49806 All these vulnerabilities impact the versions 10.0.0 through 10.0.8 IF1 of the appliance. …