Security – Page 150 – Computer Security Articles

Microsoft has resolved 80 new CVEs this month in addition to four earlier CVEs, bringing the number of security issues addressed in this month’s Patch Tuesday release to 84.

Unfortunately, we have two zero-day flaws in Outlook (CVE-2023-23397) and Windows (CVE-2023-24880) that require a “Patch Now” release requirement for both Windows and Microsoft Office updates. As it was last month, there were no further updates for Microsoft Exchange Server or Adobe Reader. This month the team at Application Readiness has provided a helpful infographic that outlines the risks associated with each of the updates for this cycle.

To read this article in full, please click here

March 16, 2023 admin

This Is the New Leader of Russia’s Infamous Sandworm Hacking Unit

Credit to Author: Andy Greenberg| Date: Wed, 15 Mar 2023 20:35:52 +0000

Evgenii Serebriakov now runs the most aggressive hacking team of Russia’s GRU military spy agency. To Western intelligence, he’s a familiar face.

Security Wired

March 15, 2023 admin

AI-Generated Voice Deepfakes Aren’t Scary Good—Yet

Credit to Author: Lily Hay Newman| Date: Wed, 15 Mar 2023 12:00:00 +0000

The threat of scammers using voice deepfakes in their cons is real, but researchers say old-school voice-impersonation attacks are still the more pressing concern.

Security Wired

March 15, 2023 admin

A Spy Wants to Connect With You on LinkedIn

Credit to Author: Jennifer Conrad, Matt Burgess| Date: Wed, 15 Mar 2023 11:00:00 +0000

Russia, North Korea, Iran, and China have been caught using fake profiles to gather information. But the platform’s tools to weed them out only go so far.

Security Wired

March 15, 2023 admin

The World’s Real ‘Cybercrime’ Problem

Credit to Author: Andrew Couts, Dhruv Mehrotra| Date: Wed, 15 Mar 2023 11:00:00 +0000

From US state laws to the international stage, definitions of “cybercrime” remain vague, broad, and increasingly entrenched in our legal systems.

ComputerWorld Independent

March 15, 2023 admin

Feds to Microsoft: Clean up your security act — or else

The US government, worried about the continuing growth of cybercrime, ransomware, and countries including Russia, Iran, and North Korea hacking into government and private networks, is in the middle of drastically changing its cybersecurity strategy. No longer will it rely largely on prodding businesses and tech companies to voluntarily take basic security measures such as patching vulnerable systems to keep them updated.

Instead, it now wants to establish baseline security requirements for businesses and tech companies and to fine those that don’t comply.

It’s not just companies that use the systems who might eventually need to abide by the regulations. Companies that make and sell them, such as Microsoft, Apple, and others could be held accountable as well. Early indications are that the feds already have Microsoft in their crosshairs — they’ve warned the company that, at the moment, it doesn’t appear to be up to the task.

To read this article in full, please click here

Security Wired

March 13, 2023 admin

Ransomware Attacks Have Entered a ‘Heinous’ New Phase

Credit to Author: Lily Hay Newman| Date: Mon, 13 Mar 2023 11:00:00 +0000

With victims refusing to pay, cybercriminal gangs are now releasing stolen photos of cancer patients and sensitive student records.