kowatek

June 15, 2023Ravi Lakshmanan Microsoft on Wednesday opened the lid on a “novel and distinct Russian threat actor,” which it said had ties to the General Staff Intelligence Unit (GRU) and said it had a “relatively low success rate.” The…

The attackers behind the LockBit ransomware as a service (RaaS) scheme have extorted $91 million in hundreds of attacks against numerous US organizations since 2020. This is according to a joint bulletin issued by the U.S. Cybersecurity and Infrastructure Security…

System administrators breathed a sigh of relief yesterday when Microsoft issued a relatively light round of patch updates, no zero-day vulnerabilities, and only six critical CVEs on the list. However, there was still some work to be done. Among his…

According to Proofpoint, threat actors will continue to evolve their tactics to bypass user defenses in 2022, with multi-factor authentication (MFA) bypass kits accounting for millions of phishing messages. While off-the-shelf toolkits have contributed to the prevalence of phishing against…

Shocking revelations about the US government data siphoning, the historic security breach at Windsor Castle, and the MOVEit hack leave people confused. All of this and much more is discussed in the latest edition of the Smashing Security podcast by…

Tools sold separately by iFixit It’s been a long time coming, but soon you’ll be able to repair your Microsoft Surface with official parts. Warranty services are very comprehensive, but repairs can be very expensive once they expire. Off-the-shelf parts…

A combination of factors such as an expanding attack surface, increasing cybersecurity and data regulation, and an ongoing skills shortage are putting unsustainable pressure on the mental health of cyber leaders and professionals. “The environment is particularly tough. I’m really…

June 14, 2023Ravi LakshmananPatch Tuesday / Vulnerability Microsoft has released fixes for the Windows operating system and other software components to fix major security flaws as part of its June 2023 Patch Tuesday updates. Of the 73 flaws, the severity…

At this point, it almost has to be patched, right? CD Projekt Red released Cyberpunk 2077 as a rush construction much earlier than planned, but at the time of release it was more of a bug than a game. Things…

Cybersecurity experts at Orca Security have identified two critical cross-site scripting (XSS) vulnerabilities in Microsoft Azure services. The flaw exploited a weakness in the postMessage iframe that could expose Azure users to a potential security breach. This vulnerability was found…