A recent court filing has shed light on an intriguing case involving an alleged member of the notorious Scattered Spider hacking group, who was tracked down with the help of their own Windows device ID. The FBI’s use of this seemingly innocuous piece of information raises questions about the role of digital footprints in cybercrime … Read more
Tarah Wheeler, a cybersecurity leader with an unconventional background, has taken the industry by storm. As Chief Information Security Officer (CISO) at TPO Group, Wheeler’s journey into cybersecurity was far from intentional – it was more like being “hit over the head” with a baseball bat and dragged into the arena. Wheeler’s passion lies in … Read more
In a significant shift, Microsoft is set to make Windows settings backup and restore an essential feature by default for organizations using its Enterprise systems. Starting with Windows 11 version 26H2, the long-awaited tool will be automatically enabled on eligible devices, saving IT administrators time and effort in managing user data. The Windows settings backup … Read more
A devastating Linux kernel vulnerability has been discovered, allowing attackers to escape virtual machines and execute code on the host with root privileges. Dubbed Januscape, this critical flaw affects both Intel and AMD processor architectures, posing a significant risk to multi-tenant public cloud environments. Januscape stems from a 16-year-old weakness in the shadow MMU emulation … Read more
A sophisticated cyberattack campaign, allegedly linked to China-aligned hackers, has been targeting universities worldwide, exploiting vulnerabilities in the popular email client software Roundcube. The attackers have compromised numerous institutions’ networks, compromising sensitive data and disrupting academic activities. At the heart of this campaign lies a clever exploitation of Roundcube’s security flaws by AI-powered vulnerability scanners. … Read more
As the software supply chain continues to evolve, an emerging threat is quietly making its presence known: AI-generated code vulnerabilities. In what’s being hailed as a game-changer by some and a nightmare by others, AI models are not only discovering new security flaws but also inadvertently introducing them into software codebases. This phenomenon raises crucial … Read more
Chinese Espionage Group Uses Roundcube Exploit Chain to Infiltrate Universities A suspected Chinese espionage group has been using a sophisticated exploit chain to break into the networks of U.S. and Canadian universities, stealing sensitive data and establishing persistent access through webshells and backdoors. The attacks, which began in May, targeted physics and engineering departments, focusing … Read more
Cloud Rebuild and Point-in-Time Restore: Microsoft’s New Recovery Features Aim to Save Devices from Disaster In a bid to make Windows 11 more resilient in the face of catastrophic failure, Microsoft has begun testing two new recovery features that can remotely restore a device to a healthy state. Cloud Rebuild, introduced at the Ignite developer … Read more
A Critical Security Flaw Exposes Remote Access Software to Attackers In a stark reminder of the ongoing cat-and-mouse game between security vendors and hackers, BeyondTrust has issued a warning to customers about two critical vulnerabilities in its remote access software. The flaws, which affect the company’s Remote Support (RS) and Privileged Remote Access (PRA) platforms, … Read more
A Critical Authentication Bypass Flaw Has Been Patched in Remote Support and Privileged Remote Access (PRA) Solutions from BeyondTrust BeyondTrust, a leading provider of privileged access management solutions, has released patches to fix critical authentication bypass vulnerabilities discovered in its remote support and Privileged Remote Access (PRA) offerings. The flaws, which have been described as … Read more