Recent Security News

  • About the security content of macOS Sonoma 14.2.1 – Apple Support

    December 19, 2023 at 01:42PM Summary: Apple released an update on December 19, 2023, addressing a session rendering issue (CVE-2023-42940) that could cause users sharing their screen to inadvertently share incorrect content. The update is available for macOS Sonoma, specifically targeting the affected product, WindowServer. Based on the meeting notes provided, the key points are…

    Read More

  • #StopRansomware: ALPHV Blackcat

    December 19, 2023 at 01:22PM The FBI and CISA released a joint Cybersecurity Advisory (CSA) to share known IOCs and TTPs linked to the ALPHV Blackcat ransomware. The advisory warns organizations of evolving tactics used by the threat actors, including advanced social engineering and remote access software deployment. It also provides mitigations and incident response…

    Read More

  • Microsoft: Multiple Perforce Server Flaws Allow for Network Takeover

    December 19, 2023 at 01:20PM Microsoft identified four critical vulnerabilities in the Perforce source-code management platform, allowing attackers to access a highly privileged Windows OS account, enabling remote code execution and supply chain attacks. The flaws can lead to various malicious activities, including denial-of-service attacks. Perforce has issued a patch (version 2023.1/2513900) to address these…

    Read More

  • Why I Chose Google Bard to Help Write Security Policies

    December 19, 2023 at 01:05PM Large language models (LLMs) such as ChatGPT have found various uses in enterprise security, from log analysis to rewriting documentation. Google Bard is being tested for simplifying and rewriting security policies. It offers unique features such as authoritative language and multiple draft options, making it a valuable tool for creating…

    Read More

  • How the FBI seized BlackCat (ALPHV) ransomware’s servers

    December 19, 2023 at 12:33PM The US Department of Justice seized the ALPHV/BlackCat ransomware operation’s websites and created a decryptor to assist around 500 affected companies in recovering their data for free. By utilizing a confidential human source, the FBI accessed the ransomware gang’s affiliate panel to obtain private decryption keys. This operation is the…

    Read More