Recent Security News
-
Ukraine Claims Revenge Hack Against Moscow Internet Provider
January 9, 2024 at 04:05PM Ukraine media reported a cyberattack by the Blackjack cyber group, allegedly linked to the Security Service of Ukraine, targeting Moscow ISP M9 Telecom. Sources claim it was in retaliation for the Russia-backed breach of Kyivstar and may be a prelude to further “serious revenge.” The group also took credit for…
-
FTC bans data broker from selling Americans’ location data
January 9, 2024 at 03:37PM The U.S. FTC banned data broker Outlogic, formerly X-Mode Social, from selling Americans’ sensitive location data. The move responds to data brokers exposing individuals’ location data revealing sensitive information. Outlogic lacked protocols to remove sensitive locations and sometimes failed to respect individuals’ opt-out preferences. The ban follows an August 2022…
-
Windows 10 KB5034122 update released with fix for shut down bug
January 9, 2024 at 02:55PM Microsoft released KB5034122 cumulative update for Windows 10 21H2 and 22H2, containing January 2024 security updates. It’s mandatory, with limited fixes due to the holiday season. After manual installation or ‘Check for Updates,’ it’ll automatically start but can be scheduled for restart. New update for Win 10, addressing issues and…
-
CISA warns agencies of fourth flaw used in Triangulation spyware attacks
January 9, 2024 at 02:33PM The U.S. Cybersecurity and Infrastructure Security Agency has added six vulnerabilities impacting products from Apple, Adobe, Apache, D-Link, and Joomla to the Known Exploited Vulnerabilities catalog. These flaws are actively exploited and pose significant risks. Federal agencies have until January 29 to patch or discontinue use of the vulnerable products.…
-
Microsoft January 2024 Patch Tuesday fixes 49 flaws, 12 RCE bugs
January 9, 2024 at 02:11PM Microsoft’s January 2024 Patch Tuesday addresses 49 flaws and 12 remote code execution vulnerabilities. Notably, a Windows Kerberos Security Feature Bypass and a Hyper-V RCE were classified as critical. Microsoft also addressed an Office Remote Code Execution Vulnerability and other flaws. Other vendors released updates, including .NET, Azure, Microsoft Edge,…