Microsoft Expands Security to AWS in Multicloud Push
Microsoft today kicked off its Ignite 2021 conference with cloud security announcements that underscore its focus on enterprise cloud protection, particularly for multicloud environments.
The company is extending its native...
Attackers Flaunt Remote Access Credentials, Threaten Supply Chain
Network access brokers, the cybercriminals who trade in credentials needed to compromise corporate computers, have advertised and sold credentials for a variety of global shipping and logistics companies in...
Apple macOS Flaw Allows Kernel-Level Compromise
‘Shrootless’ allows bypass of System Integrity Protection IT security measures to install a malicious rootkit that goes undetected and performs arbitrary device operations.
Apple has patched a vulnerability in macOS...
Ransomware Gangs Target Corporate Financial Activities
The FBI is warning about a fresh extortion tactic: threatening to tank share prices for publicly held companies.
Ransomware gangs are zeroing in on publicly held companies with the threat...
Phishing and Spam Lures Feature Sports, Aim to Steal Credentials
Attackers continue to use phishing and spam as a primary way to steal credentials from unwary users, with e-mails carrying links to more than 5.6 million phishing sites and...
Google Chrome is Abused to Deliver Malware as ‘Legit’ Win 10 App
Malware delivered via a compromised website on Chrome browsers can bypass User Account Controls to infect systems and steal sensitive data, such as credentials and cryptocurrency.
Crooks behind a newly...
Android Patches Actively Exploited Zero-Day Kernel Bug
Google’s Android November 2021 security updates plug 18 flaws in the framework and system components and 18 more in the kernel and vendor components.
Among Google’s November Android security updates is...
