cybersecurity (296)

Summary of CrowdStrike Falcon Sensor Incident Report

This article summarizes the root cause analysis (RCA) report on the incident involving CrowdStrike Falcon sensor's Channel File 291. The report provides in-depth information on the findings, technical details, mitigations, and the root cause of the issue that led to a significant system crash. What...
07 August ·
12
· 23 · Kelly

Linux and Open Source News: Highlights and Controversies

Welcome back to the Linux and open-source news show. This week, we delve into several hot topics, including Firefox's controversial new feature, Microsoft and CrowdStrike's amusing antics, the insecurity of secure boot on numerous devices, and AI's unethical content scraping from YouTube and pirated...
27 July ·
2
· 16 · Jacob Enderson

The Evolution of Online Security: Pass Keys vs Passwords

In the ever-evolving landscape of online security, passwords have long been the primary means of authentication. However, even with the assistance of password managers, they come with their fair share...
01 February ·
6
· 120 · Jacob Enderson

Security and Safety in the Online Space: 4 Simple Protection Hacks

Digital innovations and how we interact with them are constantly changing, with our lives quickly becoming more and more interconnected and reliant on digital tools and experiences. Gen Z, the first...
22 January ·
1
· 106 · Alex

5 Ways AI Influences Cybersecurity Practices

Cybersecurity is an ever-growing problem as the world becomes increasingly digital. And as our technology becomes more sophisticated, so do cyber attacks. AI technology is continually advancing and h...
14 August 2023 ·
0
· 70 · Alex

Enhanced Security: Google Introduces Weekly Chrome Updates for Better Protection

Google is taking stronger action against security vulnerabilities and will soon roll out updates for Chrome every week. If you want to stay protected, you will have to restart the browser much more of...
09 August 2023 ·
0
· 39 · Kelly

Patchday: Critical malware vulnerabilities pose threat to Android 11, 12 and 13

Google and other Android device manufacturers have released their monthly collective security updates. Attackers can attack Android in many ways and paralyze devices via DoS attack or even execute mal...
09 August 2023 ·
0
· 49 · Kelly

Inside the Mega Glitch: Unlocking Hidden Windows Functions with a Secret Microsoft Tool

This probably wasn't planned this way: During a so-called bug bash for Windows 11, Microsoft employees accidentally shared a link to the StagingTool, a program that is used internally at Microsoft to...
03 August 2023 ·
4
· 84 · Kelly

Faster Fixes: Ubuntu's Plan to Reduce Linux Kernel Package Vulnerabilities

Kleber Souza, an engineer at Canonical who maintains Linux kernel packages for Ubuntu, has announced a new kernel update cycle. The new cycle, which is codenamed "4/2", involves generating additional...
03 August 2023 ·
4
· 70 · Jacob Enderson

Security updates: Attackers can compromise Aruba switches

Certain switch models from Aruba are vulnerable. The developers have closed a security hole. Network admins should update their Aruba switches to the latest version for security reasons. If this is no...
03 August 2023 ·
3
· 50 · Kelly

Gigabyte Motherboards have a firmware backdoor

Researchers from Eclypsium have discovered anomalous behavior on systems with motherboards from the Taiwanese company Gigabyte Technology. The UEFI firmware used in these motherboards, without informing the user during system boot, performed substitution and execution of an executable file for the W...
01 June 2023 ·
0
· 64 · Kelly

Web Security Best Practices for Safeguarding Your Website from Cyber Threats

In today's digital landscape, where websites serve as the storefronts and communication hubs for businesses, ensuring robust web security is paramount. Cyber threats are constantly evolving, making it...
30 May 2023 ·
2
· 50 · Steve Martin

Linux IPv6 "Route of Death" 0day Vulnerability in the Kernel

Details of an unpatched (0-day) vulnerability (CVE-2023-2156) in the Linux kernel have been disclosed. This vulnerability allows an attacker to crash the system by sending specially crafted IPv6 packe...
17 May 2023 ·
2
· 85 · 1 · Jacob Enderson

Critical Security Vulnerability in Google Chrome

Google has released an update for the Chrome web browser during the night, which addresses at least one critical security vulnerability. This vulnerability allows attackers to smuggle in and execute m...
17 May 2023 ·
1
· 56 · Alex

Linux Kernel Vulnerabilities Grant Local Attackers Root Privileges

Two components of the Linux kernel contain security vulnerabilities that grant local attackers root shell access. A first exploit has been made public. Two components of the Linux kernel are affected...
10 May 2023 ·
2
· 144 · 1 · Den W.

Leakage of Intel private keys used for firmware validation of MSI

During an attack on the information systems of MSI, hackers were able to extract over 500 GB of the company's internal data, including source code for firmware and related tools for their assembly. The attackers demanded $4 million for non-disclosure, but MSI refused and some data was published publ...
07 May 2023 ·
1
· 100 · 1 · Kelly

Warning about new malware: Attackers can access entire Windows systems

Security experts are warning about malware that allows attackers to gain remote access to Windows PCs. We show you how to protect yourself. The security experts from "Bleeping Computer" are warning Wi...
04 May 2023 ·
1
· 86 · Den W.

Hackers Target iPhones with New Malicious Software

Smartphones like the iPhone produced by Apple are only sometimes safe in locked conditions. If a device has an app called Signal, there's a possibility of the phone getting hacked in the near future....
19 January 2023 ·
1
· 121 · Alex

5 Free Online Network Security Courses You Should Follow in 2023

There are numerous online courses for network security, most of which are paid courses, but there are also some open source or government funded free quality courses open to the public. For novices, c...
22 December 2022 ·
1
· 101 · Dayton C. Wilton

Christmas update for Windows: Microsoft fixes 6 critical vulnerabilities

Microsoft traditionally ends the last Patch Tuesday of the year with fewer patches for Windows, Office & Co. This is also the case this year, although the number of closed security holes has rarely be...
14 December 2022 ·
1
· 107 · Jacob Enderson