Security – Page 141 – Computer Security Articles

Credit to Author: Microsoft Security Threat Intelligence| Date: Tue, 18 Apr 2023 15:00:00 +0000

Today, Microsoft is reporting on a distinct subset of Mint Sandstorm (formerly known as PHOSPHORUS), an Iranian threat actor that specializes in hacking into and stealing sensitive information from high-value targets. This subset is technically and operationally mature, capable of developing bespoke tooling and quickly weaponizing recently disclosed vulnerabilities.

The post Nation-state threat actor Mint Sandstorm refines tradecraft to attack high-value targets appeared first on Microsoft Security Blog.

Security Wired

April 17, 2023 admin

Apple’s Macs Have Long Escaped Ransomware. That May Be Changing

Credit to Author: Lily Hay Newman| Date: Mon, 17 Apr 2023 17:51:11 +0000

The discovery of malicious encryptors for Apple computers could herald new risks for macOS users if the malware continues to evolve.

Security Wired

April 17, 2023 admin

LockBit Ransomware Samples for Apple Macs Hint at New Risks for macOS Users

Credit to Author: Lily Hay Newman| Date: Mon, 17 Apr 2023 17:51:11 +0000

The discovery of malicious encryptors for Apple computers could herald new risks for macOS users if the malware continues to evolve.

Security Wired

April 17, 2023 admin

ICE Records Reveal How Agents Abuse Access to Secret Data

Credit to Author: Dhruv Mehrotra| Date: Mon, 17 Apr 2023 11:00:00 +0000

Documents obtained by WIRED detail hundreds of investigations by the US agency into alleged database misuse that includes harassment, stalking, and more.

Security Wired

April 15, 2023 admin

Security Roundup: Leak of Top-Secret US Intel Risks a New Wave of Mass Surveillance

Credit to Author: Dhruv Mehrotra, Andrew Couts| Date: Sat, 15 Apr 2023 13:00:00 +0000

Plus: Hackers claim to have stolen 10 TB from Western Digital, a new spyware has emerged, and WhatsApp gets a fresh security feature.

ComputerWorld Independent

April 14, 2023 admin

Patch now to address a Windows zero-day

Microsoft has addressed 97 existing vulnerabilities this April Patch Tuesday, with a further eight previously released patches updated and re-released. There have been reports of a vulnerability (CVE-2023-28252) exploited in the wild, making it a “Patch Now” release.

This update cycle affects Windows desktops, Microsoft Office, and Adobe Reader. No updates for Microsoft Exchange this month. The team at Application Readiness has provided a helpful infographic that outlines the risks associated with each of the updates for this April update cycle.

To read this article in full, please click here

Security Wired

April 13, 2023 admin

The Hacking of ChatGPT Is Just Getting Started

Credit to Author: Matt Burgess| Date: Thu, 13 Apr 2023 16:07:46 +0000

Security researchers are jailbreaking large language models to get around safety rules. Things could get much worse.