Security

Attackers Continue to Leverage Signed Microsoft Drivers

In December of last year, Microsoft worked with SentinelOne, Mandiant, and Sophos to respond to an issue in which drivers certified by Microsoft’s Windows Hardware Developer Program were being used to validate malware. Unfortunately, the problem hasn’t gone away. In a recent Mastodon post, security expert Kevin Beaumont observed, “Microsoft are still digitally signing malware […]

The post Attackers Continue to Leverage Signed Microsoft Drivers appeared first on eSecurityPlanet.

April 22, 2023
0 comment
Read More >>

Cisco fixed critical flaws in the Industrial Network Director and Modeling Labs solutions

Cisco released security updates to address critical security flaws in its Industrial Network Director and Modeling Labs solutions. Cisco released security updates to address critical security vulnerabilities in the Industrial Network Director and Modeling Labs solutions. An attacker can exploit these vulnerabilities to inject arbitrary operating system commands or access sensitive data. One of the […]

The post Cisco fixed critical flaws in the Industrial Network Director and Modeling Labs solutions appeared first on Security Affairs.

April 21, 2023
0 comment
Read More >>

Closing the cybersecurity gap in Europe

This blog looks at the latest EU cyber initiatives that focus on cybersecurity through people – a fundamental element to effective cybersecurity. Cisco stands ready to contribute its expertise in cyber skills and cyber defense to build a stronger Europe.

April 21, 2023
0 comment
Read More >>

VMware fixed a critical flaw in vRealize that allows executing arbitrary code as root

VMware fixed two severe flaws, tracked as CVE-2023-20864 and CVE-2023-20865, impacting the VMware Aria Operations for Logs product. The virtualization giant VMware released security updates to address two critical vulnerabilities, tracked as CVE-2023-20864 and CVE-2023-20865, impacting the VMware Aria Operations for Logs product (formerly vRealize Log Insight). The vulnerability CVE-2023-20864 (CVSSv3 base score of 9.8) […]

The post VMware fixed a critical flaw in vRealize that allows executing arbitrary code as root appeared first on Security Affairs.

April 21, 2023
0 comment
Read More >>