Tag Archive

A critical vulnerability has been addressed by Trellix in its Enterprise Security Manager (ESM) that could potentially expose the internal Snowservice API to unauthorized access. The flaw, discovered in ESM version 11.6.10, has raised concerns among cybersecurity experts due to …

Researchers from South Korea have discovered that the notorious North Korean hacking group, known as Kimsuky, has adapted its phishing tactics to use malwareless phishing attack tactics, which evade major EDR detection. The group, which has been active for several …

A critical security vulnerability in Windows Server 2012 and Server 2012 R2 has been uncovered, allowing attackers to bypass essential security checks enforced by the Mark of the Web (MotW) feature. This zero-day flaw, which has remained undetected for over …

Cybersecurity researchers have identified a concerning link between the advanced phishing toolkit known as ‘Rockstar 2FA’ and a surge in adversary-in-the-middle (AiTM) phishing attacks. Highly advanced methods are used in these campaigns to trick people into going to fake landing …

Microsoft has announced plans to deprecate the “Bring Your Own License” (BYOL) feature in Microsoft Defender for Cloud as part of a move towards a centralized vulnerability management experience. This significant change aims to enhance enterprise exposure management and streamline …

In a recent study, cybersecurity researchers have unveiled a new side-channel attack that threatens the privacy of users interacting with large language models (LLMs). The attack, dubbed “InputSnatch,” exploits timing differences in cache-sharing mechanisms commonly used to optimize LLM inference. …

A significant development for the tech community is the identification of 2 critical vulnerabilities in several versions of a widely-used GPU Driver Development Kit (DDK) that affect systems using Unified Memory Architecture (UMA). On November 29, 2024, researchers disclosed the …

Hackers have managed to steal millions of dollars from Electronic Benefit Transfer (EBT) accounts, leaving Supplemental Nutrition Assistance Program (SNAP) recipients struggling to make ends meet. The Alabama Department of Human Resources (DHR) has reported a surge in fraudulent activities …