CyberNews Cybersecurity’s Great Unevenness: Why Patching Just Isn’t Enough Anymore Imagine having to deal with a never-ending flood of new vulnerabilities, each one potentially threatening your organization’s security. That’s the reality for cybersecurity teams today, thanks to the explosive growth in newly disclosed flaws and the lightning-fast pace at which attackers can turn them into working … Read more
A sophisticated phishing campaign is targeting LastPass and Bitwarden users with fake security alerts designed to trick them into divulging sensitive information. The attackers are using email notifications that appear to be from the password management services, but actually lead to malicious websites that prompt victims to download files or enter their credentials. LastPass has … Read more
A High-Severity Vulnerability Forces ShareFile to Shut Down Storage Zone Controllers, Urges Customers to Patch Immediately Progress Software has confirmed that a high-severity zero-day vulnerability is behind the sudden shutdown of ShareFile Storage Zone Controllers last week. The company acted out of caution after receiving information from a credible source about a potential threat and … Read more
Windows 11 Receives Mandatory Security Updates, Alongside Long-Awaited Features and Fixes Microsoft has rolled out two critical cumulative updates for Windows 11, KB5101650 and KB5099414, which address a staggering 571 security vulnerabilities discovered over the past few months. These patches are mandatory, as they include the latest July Patch Tuesday fixes. If you’re running Windows … Read more
In a significant move to bolster account security and reduce reliance on vulnerable authentication methods, Microsoft has announced that passkeys will become the default authentication method for its Entra ID enterprise identity service starting September this year. This change is expected to impact millions of users worldwide who currently rely on phone-based SMS and voice … Read more
A Perfect Storm of Vulnerabilities and AI-Driven Attacks Leaves Defenders Reeling The cybersecurity landscape has undergone a seismic shift in recent years, with vulnerability management facing an unprecedented challenge. The traditional timeline of weeks or months between a flaw becoming public and attackers developing working exploits has been reduced to mere hours. Two key factors … Read more
LastPass and Bitwarden users are being targeted by a sophisticated phishing campaign that uses fake security alerts to trick victims into handing over sensitive information. The malicious emails, which have been sent to both LastPass and Bitwarden users, appear to be legitimate corporate communications from the password management companies. The emails claim to notify recipients … Read more
Progress Software has confirmed that a critical security vulnerability was behind the sudden shutdown of its ShareFile Storage Zone Controllers last week. The company, which provides cloud-based file-sharing services to businesses, took drastic action after receiving warnings from a credible source about a potential external threat. The investigation revealed a zero-day flaw in the software, … Read more
Windows 11 Users Receive Mandatory Security Patches and New Features in Latest Updates Microsoft has rolled out two crucial updates, KB5101650 and KB5099414, to address security vulnerabilities, bugs, and introduce new features for Windows 11 users. These cumulative updates are mandatory, as they include the July 2026 Patch Tuesday patches for 571 previously discovered vulnerabilities. … Read more
Microsoft’s July Patch Tuesday brings record-breaking 570 fixes, including three zero-day vulnerabilities that have been exploited in attacks. This month’s update is one of the largest ever released by Microsoft, with 59 critical vulnerabilities addressed. The patch covers a wide range of software, including Windows, Office, and other products, fixing issues such as remote code … Read more