Security News

Elastic supports Microsoft Azure monitoring use cases with native Microsoft Azure console integration
2021-05-28 01:45

Elastic announces new features and updates across the Elastic Observability solution in its 7.13 release to streamline workflows in Microsoft Azure, simplify data integrations, and accelerate root cause analysis. Expanded capabilities include native integration in the Microsoft Azure console, the beta release of Fleet Server, and new troubleshooting views in Elastic APM. Elastic is announcing an enhanced partnership with Microsoft, enabling users to find and deploy Elastic directly from the Azure console and natively integrate observability and security data from Azure services.

Windows Terminal can now be the default Windows 10 console
2021-05-26 22:23

Windows 10 will soon let you configure Windows Terminal as the default terminal application to launch console and PowerShell programs. When you launch a command-line console program in Windows 10, the operating system will automatically launch it in a Windows Console or PowerShell console displayed by the Windows Console Host, as shown below.

How scalper bots profit by buying and reselling Sony PS5 and Xbox consoles
2021-04-12 12:49

These bots grab some of the limited stock of the PS5 and Xbox on eBay and Amazon and then resell them at huge markups, says PerimeterX. Scalper bots, or sneaker bots, have been chewing up supplies of the Sony PS5 and Xbox consoles amid a shortage of both units, leaving indvidual buyers in a lurch. In a report published Thursday, bot fighter PerimeterX described the damage that automated bots are causing to consumers and retailers alike.

PS5 phishing scam baits gamers with promise of free console
2021-03-19 20:10

Sony's new PS5 is one topic ripe for exploitation, especially since the new console is in short supply due to a scarcity of semiconductor chips. A Friday report from security firm Kaspersky explains how a new scam promising a PS5 is playing out and offer tips on how to avoid taking the bait.

Microsoft fixes Windows 10 console bug leading to blue screens
2021-02-10 08:30

Microsoft has fixed a bug that could allow a threat actor to create specially crafted downloads that crash Windows 10 simply by opening the folder where they are downloaded. Last month, we reported on a bug in the Windows 10 console multiplexer driver, condrv.

Microsoft fixes the Windows 10 console driver crash bug
2021-02-10 08:30

Microsoft has fixed a bug that could allow a threat actor to create specially crafted downloads that crash Windows 10 simply by opening the folder where they are downloaded. Last month, we reported on a bug in the Windows 10 console multiplexer driver, condrv.

BitDam adds MSP console to its Advanced Threat Protection solution
2021-01-21 03:00

BitDam announced that it is enhancing its offering for MSPs by adding a unique MSP console to its Advanced Threat Protection solution. The new BitDam MSP console's centralized dashboard view allows MSPs to view and manage all customers at one time and on one screen.

If you haven't patched WebLogic server console flaws in the last eight days 'assume it has been compromised'
2020-10-29 22:35

On Thursday Johannes Ullrich, Dean of Research at the SANS Technology Institute, spotted a massive spike in traffic on research "Honeypot" systems as somebody tried to identify public-facing WebLogic servers that weren't patched against CVE-2020-14882. If you find a vulnerable server in your network: Assume it has been compromised.

HPE fixes maximum severity remote auth bypass bug in SSMC console
2020-10-23 18:22

Hewlett Packard Enterprise has fixed a maximum severity remote authentication bypass vulnerability affecting the company's HPE StoreServ Management Console data center storage management solution. HPE SSMC is a management and reporting console for HPE Primera and HPE 3PAR StoreServ systems data center arrays.

Flaw in WordPress Plugin Grants Access to Google Search Console
2020-05-14 11:00

A vulnerability that Google has addressed in one of its official WordPress plugins could be abused by attackers to gain access to the Google Search Console of an impacted website. During the initial connection with Google Search Console, the plugin generates a proxySetupURL through which the site admin is redirected to Google OAuth, and leverages a proxy to run the verification process.