Tag: security
AMD changes its mind, says it will patch more Ryzen chips against security flaw
AMD has had a change of heart when it comes to patching the Sinkclose vulnerability on Ryzen 3000 desktop chips. As per the latest update to its SMM Lock Bypass Security Bulletin, the famed silicon will receive an update after all – but other older chips, unfortunately, are still being…
Read More
Toyota confirms data breach after info leaked on cybercrime forum
Toyota has confirmed it suffered a major data breach after hackers posted stolen data on an underground forum – although plenty of details are still missing. Earlier this week, a threat actor going by the name ZeroSevenGroup posted a new thread on a dark web forum, claiming to have stolen…
Read More
Microsoft apps on MacOS apparently have some serious security flaws
A number of Microsoft productivity apps, built for the macOS operating system, are vulnerable in a way that allows hackers to steal sensitive data, record everything the user is doing on the device, record audio and video, and further escalate privileges. This is according to a new report from cybersecurity…
Read More
Microsoft patches Windows security flaw exploited by North Korean hackers — but is it too late?
As part of its latest Patch Tuesday cumulative update, Microsoft fixed a privilege escalation bug in the Windows Ancillary Function Driver (AFD.sys) for WinSock. This bug is tracked as CVE-2024-38193, and carries a severity score of 7.8. Abusing this flaw apparently grants attackers admin privileges on the vulnerable endpoint, with…
Read More
This expert thinks he has found some major security flaws with the MacOS app store
Mac App Store users are at risk of fraud, as scammers find a way to trick the platform into accepting fake apps, an expert has warned. The fake apps, pretending to replace some of the world’s most popular productivity solutions, are offered for sale on the repository, according to a…
Read More
Azure and Google domains hacked to spread disinformation
Cybercriminals have found a new and creative way to push unwanted advertising, malware, and spam, onto netizens, employing Google, Azure, OVH, and other similar services, along with abusing legitimate features designed to improve the user experience. Researchers from BleepingComputer reported the campaign begins with countless websites hosted on cloud services…
Read More