Security News
![Cloud engineer wreaks havoc on bank network after getting fired](/static/build/img/news/cloud-engineer-wreaks-havoc-on-bank-network-after-getting-fired-small.jpg)
An ex-First Republic Bank cloud engineer was sentenced to two years in prison for causing more than $220,000 in damage to his former employer's computer network after allegedly using his company-issued laptop to watch pornography. Miklos Daniel Brody, 38, of San Francisco, pleaded guilty in April to two charges of violating the Computer Fraud and Abuse Act after obtaining information from and intentionally damaging a protected computer, and one charge of making false statements to a government agency.
![Avira antivirus causes Windows computers to freeze after boot](/static/build/img/news/avira-antivirus-causes-windows-computers-to-freeze-after-boot-small.jpg)
Since Friday, Windows users have reported problems with the operating system freezing shortly after booting, an issue linked to a faulty update for Avira's security software. A considerable number of Windows 11 and Windows 10 customers have experienced these system freezes, with most linking the issues to Avira.
![Proofpoint Exposes Sophisticated Social Engineering Attack on Recruiters That Infects Their Computers With Malware](/static/build/img/news/alt/cyberattack-statistics-1-small.jpg)
Recruiters and anyone else involved in hiring processes should be knowledgeable about this social engineering attack threat. A new report from U.S.-based cybersecurity company Proofpoint exposes a new attack campaign operated by a financially-oriented threat actor dubbed TA4557 with high financial data theft risks and possibly more risks such as intellectual property theft.
![Microsoft December 2023 Patch Tuesday fixes 34 flaws, 1 zero-day](/static/build/img/news/microsoft-december-2023-patch-tuesday-fixes-34-flaws-1-zero-day-small.jpg)
Today is Microsoft's December 2023 Patch Tuesday, which includes security updates for a total of 34 flaws and one previously disclosed, unpatched vulnerability in AMD CPUs. The total count of 34 flaws does not include 8 Microsoft Edge flaws fixed on December 7th. To learn more about the non-security updates released today, you can review our dedicated articles on the new Windows 11 KB5033375 cumulative update and Windows 10 KB5033372 cumulative update.
![Windows 11 KB5033375 update released with upgraded Copilot AI-assistant](/static/build/img/news/windows-11-kb5033375-update-released-with-upgraded-copilot-ai-assistant-small.jpg)
Microsoft has published a new update for Windows 11 versions 23H2 and 22H2 to fix security vulnerabilities and improve Copilot. Starting with the December patch, you can open Copilot in Windows across multiple displays or where you want Copilot in Windows to appear.
![Windows 10 KB5033372 update released with Copilot for everyone, 20 changes](/static/build/img/news/windows-10-kb5033372-update-released-with-copilot-for-everyone-20-changes-small.jpg)
Microsoft has released the KB5033372 cumulative update for Windows 10 21H2 and Windows 10 22H2, which includes Copilot for Windows and nineteen other changes to the operating system. KB5033372 is a mandatory Windows 10 cumulative update containing the December 2023 Patch Tuesday security updates.
![Unveiling the Cyber Threats to Healthcare: Beyond the Myths](/static/build/img/news/unveiling-the-cyber-threats-to-healthcare-beyond-the-myths-small.jpg)
Let's begin with a thought-provoking question: among a credit card number, a social security number, and an Electronic Health Record (EHR), which commands the highest price on a dark web forum? ...
![Discord in the ranks: Lone Airman behind top-secret info leak on chat platform](/static/build/img/news/discord-in-the-ranks-lone-airman-behind-top-secret-info-leak-on-chat-platform-small.jpg)
The US Air Force reached that conclusion in an August report [PDF] made public yesterday into the actions of Airman 1st Class Jack Teixeira, who was arrested in April on suspicion that he had stolen and shared classified military documents on a private Discord server that later found their way to the wider internet - and, presumably, into the hands of foreign governments. Per the USAF report, Teixeira "Was observed viewing intelligence content on TS-SCI websites" in August 2022, and while his supervisor was informed, the incident wasn't otherwise documented.
![Sophos backports RCE fix after attacks on unsupported firewalls](/static/build/img/news/sophos-backports-rce-fix-after-attacks-on-unsupported-firewalls-small.jpg)
Sophos was forced to backport a security update for CVE-2022-3236 for end-of-life firewall firmware versions after discovering hackers actively exploiting the flaw in attacks. Although the hotfix was automatically rolled out to appliances set to auto-accept security updates by the vendor, by January 2023, over 4,000 internet-exposed appliances remained vulnerable to attacks.
![Mozilla VPN Review (2023): Features, Pricing, and Security](/static/build/img/news/alt/Data-Cybersecurity-Predictions-2-small.jpg)
Mozilla VPN’s fast performance may not be enough to make up for its small server network and lack of features. Learn more about it in our full review below.