Security News

Easily exploited flaw in Microsoft Malware Protection Engine allows total system compromise
2018-04-05 18:15

A critical and extremely easily exploitable vulnerability in the Microsoft Malware Protection Engine (MMPE) has been patched through an out-of-band security update pushed out by Microsoft on...

Flaws in ManageEngine apps opens enterprise systems to compromise
2018-03-22 14:49

Researchers have discovered multiple severe vulnerabilities in ManageEngine’s line of tools for internal IT support teams, which are used by over half of Fortune 500 companies. About the...

Preventing Business Email Compromise Requires a Human Touch
2018-03-19 12:24

Human-powered Intelligence Plays a Critical Role in Defending Against Socially Engineered Attacks The FBI’s Internet Crime Complaint Center (IC3) declared Business Email Compromise (BEC) the “3.1...

Flaw in Grammarly’s extensions opened user accounts to compromise
2018-02-06 16:44

A vulnerability in the Grammarly Chrome and Firefox extensions allowed websites to read users’ authentication tokes and use to them to log in to the users’ Grammarly accounts and access all the...

Flaw in Office 365 with Azure AD Connect could result in domain compromise
2017-12-13 13:25

The Preempt research team has uncovered a vulnerability with Microsoft Office 365 when integrated with an on-premises Active Directory Domain Services (AD DS) using Azure AD Connect software that...

Critical flaws open Foscam C1 IP cameras to compromise
2017-11-14 17:03

Cisco Talos researcher Claudio Bozzato has unearthed a dozen of critical vulnerabilities affecting the Foscam C1 series of indoor HD cameras. The Foscam C1 is one of the most commonly deployed IP...

The mobile workforce: Productive, but susceptible to data compromise
2017-11-02 16:00

An enterprise’s biggest problem when it comes to data compromise isn’t just technologies that are vulnerable, it’s how their employees use technology. Digital transformation, the mobile workforce,...

How a Medical Device Vulnerability Can Compromise Privacy
2017-10-27 19:03

Medical device cybersecurity scrutiny usually focuses on potential patient safety issues. But vulnerabilities identified in a cardiac pacemaker programming device illustrate the risks also posed...

Week in review: CCleaner compromise, Optionsbleed, and Linux devices sending out spam
2017-09-25 00:28

Here’s an overview of some of last week’s most interesting news and articles: Hackers behind CCleaner compromise were after Intel, Microsoft, Cisco There is a new twist in the CCleaner hack saga:...