Microsoft Patch Tuesday Fixes 11 Critical Vulnerabilities, One Zero-Day

Microsoft’s first Patch Tuesday of 2023 addresses 98 vulnerabilities, more than twice as many as last month – including one zero-day flaw that’s being actively exploited, as well as 11 critical flaws. The zero-day, CVE-2023-21674, is a Windows Advanced Local Procedure Call (ALPC) elevation of privilege vulnerability with a CVSS score of 8.8. The flaw, […]

The post Microsoft Patch Tuesday Fixes 11 Critical Vulnerabilities, One Zero-Day appeared first on eSecurityPlanet.

January 11, 2023
Read More >>

Researchers’ Quantum Threat Debunked, RSA Safe for Now

In a paper published late last month, 24 Chinese researchers suggested that RSA-2048 encryption could be broken using a quantum computer with 372 physical quantum bits. Cryptographer Bruce Schneier drew attention to the paper [PDF] last week in a blog post, noting that IBM recently announced a 433-qubit quantum computer, far exceeding the researchers’ stated […]

The post Researchers’ Quantum Threat Debunked, RSA Safe for Now appeared first on eSecurityPlanet.

January 10, 2023
Read More >>

5 Tips to Keep Your Network Secure

In today’s digital world, it pays to be aware of what kind of information you share online. Threats from cybercriminals are constantly evolving and can come from various sources. To protect your private data and the reputation and security of you…

January 10, 2023
Read More >>

Rackspace Breach Linked to New OWASSRF Vulnerability

Rackspace has acknowledged that it was hit by the Play ransomware a month ago in an attack that compromised customers’ Microsoft Exchange accounts. The attackers apparently leveraged a zero-day vulnerability called OWASSRF that was recently analyzed by CrowdStrike. In an interview with the San Antonio Express-News, Rackspace chief product officer John Prewitt said the company […]

The post Rackspace Breach Linked to New OWASSRF Vulnerability appeared first on eSecurityPlanet.

January 6, 2023
Read More >>

Security Outlook 2023: Cyber Warfare Expands Threats

After a year that saw massive ransomware attacks and open cyber warfare, the biggest question in cybersecurity for 2023 will likely be how much of those attack techniques get commoditized and weaponized. “In 2022, governments fought wars online, businesses were affected by multiple ransomware gangs, and regular users’ data was constantly on hackers’ radars,” said […]

The post Security Outlook 2023: Cyber Warfare Expands Threats appeared first on eSecurityPlanet.

January 5, 2023
Read More >>