Breaking Biometrics: How Security Experts Hacked Windows Hello on Popular Laptops
Security researchers from Blackwing Intelligence bypassed Windows Hello fingerprint authentication on Dell Inspiron, Lenovo ThinkPad, and Microsoft Surface Pro X,…
FIDO2 Theoretical Attacks
FIDO2/YubiKey is a robust defense against Phishing and MITM attacks, assuming the device used is secure. However, a compromised device…
Advanced LummaC2 Malware Update: Trigonometry-Based Anti-Sandbox Detection Evasion Technique Unveiled
Discover the latest LummaC2 Malware update, employing a groundbreaking trigonometry-based anti-sandbox technique for evading detection. Uncover insights on this advanced…
Malware Alert: WinSCP Users Targeted by Malicious Google Ads Campaign
Cybercriminals are exploiting Google Ads to deploy malware to users downloading WinSCP. This complex attack, identified by Securonix as SEO#LURKER,…
Critical FortiSIEM Vulnerability Alert: Fortinet Announces CVE-2023-36553 Command Injection Flaw
Fortinet alerts about a critical command injection bug in FortiSIEM (CVE-2023-36553) affecting versions 4.7-5.4. Urging upgrades to newer versions, this…
Google Launches New Titan Security Keys for Enhanced Passwordless Security
Google's latest Titan Security Keys, supporting emerging passwordless technology, are now available. Featuring USB-C and USB-A models with NFC, these…
CISA Directs Urgent Patching for Exploited Juniper Networking Device Vulnerabilities
CISA orders immediate patching of five vulnerabilities in Juniper networking devices, citing active exploitation threats. These vulnerabilities, linked to remote…
Microsoft Issues Temporary Fix for Windows Server 2022 VM Boot Failures on VMware ESXi
Microsoft acknowledges a critical issue causing blue screen errors and boot failures in Windows Server 2022 VMs on VMware ESXi…
New Malvertising Campaign Targets Windows Users with Fake News Portal and Malicious Installers
Alert: A new malvertising campaign mimics a Windows news portal to distribute malware via fake CPU-Z installers. The scheme, involving…
CISA Issues Urgent Alert on CVE-2023-29552: High-Severity SLP DoS Vulnerability Actively Exploited
Urgent CISA alert: CVE-2023-29552, a high-severity SLP DoS vulnerability, is now under active exploitation. This critical flaw allows attackers to…