Tag: security
Your Microsoft Office documents might be hiding some serious security worries
Despite Microsoft’s best efforts, Office documents are still one of the most common ways to exploit software flaws and deploy malware on vulnerable endpoints, experts have claimed. A report from Cofense says Microsoft Office’s omnipresence in the workforce has made it become one of the most popular attack vectors. Threat…
Read More
Security researcher says Azure Tags are security threat — but Microsoft disagrees
Azure Service Tags is vulnerable to a flaw that could let threat actors steal people’s sensitive data, some researchers have claimed – however Microsoft begs to differ. Azure Service Tags is a feature in Microsoft Azure that helps simplify network security management by allowing users to define network access controls…
Read More
US government warns on critical Linux security flaw, urges users to patch immediately
The US Cybersecurity and Infrastructure Security Agency (CISA) has added a new flaw to its Known Exploited Vulnerabilities (KEV) catalog, signaling in-the-wild abuse, and giving federal agencies a patching deadline. The vulnerability is described as a “use-after-free” flaw, found in Linux kernels from 5.14.21 up to 6.6.14. Popular Linux distros…
Read More
Hugging Face reveals “unauthorized access” to AI model hosting platform
Hugging Face has disclosed a data breach affecting its Spaces platform, a place where developers can create, share, and host different Artificial Intelligence (AI) models, and resources. In an announcement posted on the community’s website, the company said it detected unauthorized access to its Spaces platform, “specifically related to Spaces…
Read More
Okta warns users to be aware of damaging cyberattacks targeting customers
Identity and access management giant Okta has warned customers of an ongoing credential stuffing attack against one of its tools and suggested users either disable it, or apply a set of mitigations to remain secure. An announcement from the company noted how hackers have been abusing the cross-origin authentication feature…
Read More
YouTube must stop helping Russia censor free speech, experts say
YouTube must protect free speech in Russia and “take clear and decisive action” against authorities blocking orders. This is the message that over 20 local and international civil society organizations shared via an open letter on Monday, May 28, 2024 (see tweet below). This comes amid a worrying spike in…
Read More