Cybersecurity News, Insights and Analysis | SecurityWeek
SecurityWeek provides cybersecurity news and information to global enterprises, with expert insights & analysis for IT security professionals
China’s Salt Typhoon Hacked AT&T, Verizon: Report
Oct 7, 2024 · The China-linked threat group known as Salt Typhoon has hacked into the networks of several major broadband providers in the United States, potentially compromising wiretap systems, according to The Wall Street Journal.
Latest News - SecurityWeek
Dec 31, 2024 · Proof-of-concept (PoC) code was published for CVE-2024-49113, a denial-of-service (DoS) vulnerability in Windows LDAP.
News - SecurityWeek
3 days ago · Daily Briefing Newsletter. Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights.
Malware & Threats Archives - SecurityWeek
News and information on emerging malware and threats for enterprise cybersecurity teams
Microsoft's Take on Kernel Access and Safe Deployment Following ...
Oct 10, 2024 · On July 19, 2024, two additional IPC Template Instances were deployed.This required a comparison against the 21st value when only 20 were expected. In CrowdStrike’s words, “The attempt to access the 21st value produced an out-of-bounds memory read beyond the end of the input data array and resulted in a system crash.”
Palo Alto Patches Critical Firewall Takeover Vulnerabilities
Oct 9, 2024 · Palo Alto Networks on Wednesday pushed out patches for several serious flaws in its Expedition customer migration tool and warned that attackers can launch trivial exploits to take over firewall administrator accounts.
ChatGPT Jailbreak: Researchers Bypass AI Safeguards Using …
Oct 29, 2024 · “The ChatGPT-4o guardrail bypass demonstrates the need for more sophisticated security measures in AI models, particularly around encoding. While language models like ChatGPT-4o are highly advanced, they still lack the capability to evaluate the safety of every step when instructions are cleverly obfuscated or encoded,” Figueroa said.. At the time of writing, SecurityWeek was not able to ...
Millions of Kia Cars Were Vulnerable to Remote Hacking
Sep 27, 2024 · “From the victim’s side, there was no notification that their vehicle had been accessed nor their access permissions modified. An attacker could resolve someone’s license plate, enter their VIN through the API, then track them passively and send active commands like unlock, start, or honk,” Curry explains.
Healthcare Organizations Warned of Trinity Ransomware Attacks
Oct 8, 2024 · “The ransom note is often placed on the desktop or within directories containing the encrypted files. This note contains instructions provided by the threat actor, their onion site URL, and the email address for communication,” HHS says.