Security News
![Windows 10 KB5034203 preview update adds EU DMA compliance](/static/build/img/news/windows-10-kb5034203-preview-update-adds-eu-dma-compliance-small.jpg)
Microsoft has released the January 2024 preview update for Windows 10, version 22H2, which adds Digital Markets Act compliance in the European Economic Area to allow European users to uninstall all apps in Windows by March 6. The KB5034203 is a monthly non-security optional cumulative update that enables Windows administrators to try out fixes and improvements that will come with the February 2024 Patch Tuesday release.
![CISA boss swatted: 'While my own experience was certainly harrowing, it was unfortunately not unique'](/static/build/img/news/cisa-boss-swatted-while-my-own-experience-was-certainly-harrowing-it-was-unfortunately-not-unique-small.jpg)
CISA Director Jen Easterly has confirmed she was the subject of a swatting attempt on December 30 after a bogus report of a shooting at her home. One of the most troubling trends we have seen in recent years has been the harassment of public officials across the political spectrum, including extreme incidents involving swatting and direct personal threats.
![Jason’s Deli says customer data exposed in credential stuffing attack](/static/build/img/news/jasons-deli-says-customer-data-exposed-in-credential-stuffing-attack-small.jpg)
Jason's Deli is warning of a data breach in notifications sent to customers of its online platform stating that their personal data was exposed in credential stuffing attacks.In a data breach notification sent to customers, Jason's Deli says hackers obtained credentials of member accounts at Jason's Deli from other sources and, on December 21, 2023, used them in a credential stuffing attack against the restaurant's website.
![Accused PII seller faces jail for running underground fraud op](/static/build/img/news/accused-pii-seller-faces-jail-for-running-underground-fraud-op-small.jpg)
A Baltimore man faces a potential maximum 20-year prison sentence after being charged for his alleged role in running an online service that sold personal data which was later used for financial fraud. The filing claims customers would approach Charleron with a name and home address, plus a payment in the region of $25 sent either via cryptocurrency or other digital means, and in return they would receive the PII necessary to take out credit cards in a victim's name.
![Top Cybersecurity Predictions for 2024 (Free Download)](/static/build/img/news/alt/antivirus-stats-small.jpg)
While artificial intelligence discourse and chatbots dominated 2023, the cybersecurity space still pulled our attention now and then with cyberattacks, reminding us that technology advancements without cybersecurity can be counterintuitive, an approach akin to setting the cart before the horse. With this in mind, TechRepublic Premium spoke with a wide range of experts to find out their views on where the cybersecurity sector is headed.
![Information Security Incident Reporting Policy](/static/build/img/news/alt/antivirus-stats-small.jpg)
This policy from TechRepublic Premium provides guidelines for the reporting of information security incidents by company employees. The goal is to facilitate the security response and remediation process to ensure the least amount of potential damage to systems, networks, customers and business reputation.
![Fortra warns of new critical GoAnywhere MFT auth bypass, patch now](/static/build/img/news/fortra-warns-of-new-critical-goanywhere-mft-auth-bypass-patch-now-small.jpg)
Fortra is warning of a new authentication bypass vulnerability impacting GoAnywhere MFT versions before 7.4.1 that allows an attacker to create a new admin user. GoAnywhere MFT is used by organizations worldwide to secure transfer files with customers and business partners.
![VexTrio: The Uber of Cybercrime - Brokering Malware for 60+ Affiliates](/static/build/img/news/vextrio-the-uber-of-cybercrime-brokering-malware-for-60-affiliates-small.jpg)
The threat actors behind ClearFake, SocGholish, and dozens of other actors have established partnerships with another entity known as VexTrio as part of a massive "criminal affiliate program," new...
![Apple debuts new feature to frustrate iPhone thieves](/static/build/img/news/apple-debuts-new-feature-to-frustrate-iphone-thieves-small.jpg)
Besides fixing an actively exploited zero-day vulnerability, the latest update for the iOS 17 branch offers a new feature to help you protect your accounts and sensitive information in case your iPhone gets stolen. If enabled, the Stolen Device Protection feature makes it difficult for iPhone thieves to switch certain features on or off and perform certain actions if your iPhone is not at a familiar location such as your home or work place.
![Malicious NPM Packages Exfiltrate Hundreds of Developer SSH Keys via GitHub](/static/build/img/news/malicious-npm-packages-exfiltrate-hundreds-of-developer-ssh-keys-via-github-small.jpg)
Two malicious packages discovered on the npm package registry have been found to leverage GitHub to store Base64-encrypted SSH keys stolen from developer systems on which they were installed. The...