Microsoft December 2024 Patch Tuesday fixes 1 exploited zero-day, 71 flaws
Today is Microsoft's December 2024 Patch Tuesday, which includes security updates for 71 flaws, including one actively exploited zero-day vulnerability. [...]
OpenWrt Sysupgrade flaw let hackers push malicious firmware images
A flaw in OpenWrt's Attended Sysupgrade feature used to build custom, on-demand firmware images could have allowed for the distribution of malicious…
QR codes bypass browser isolation for malicious C2 communication
Mandiant has identified a novel method to bypass contemporary browser isolation technology and achieve command-and-control C2 operations. [...]
BYTE BY BYTE
In an era where digital transformation is reshaping healthcare, dental practices find themselves caught in a perfect storm of cybersecurity…
Would you let Bill Gates hack your DNA?
Bill Gates and the World Economic Forum are promoting CRISPR as a game-changing tool in science, but behind the excitement…
Ultralytics AI model hijacked to infect thousands with cryptominer
The popular Ultralytics YOLO11 AI model was compromised in a supply chain attack to deploy cryptominers on devices running versions…
Blue Yonder SaaS giant breached by Termite ransomware gang
The Termite ransomware gang has officially claimed responsibility for the November breach of software as a service (SaaS) provider Blue…
Preparing for EU AI Act from a Security Perspective
The world’s first artificial intelligence law, the EU AI Act, finally came into effect on 1 Aug 2024, 4 years…
Open Source Security Priorities Get a Reshuffle
The "Census of Free and Open Source Software" report, which identifies the most critical software projects, sees more cloud infrastructure…
Scott Walker calls nixing of landmark WI law that led to mass protests in 2011 a ‘brazen political action’
Former Wisconsin Gov. Scott Walker, now at the nonprofit Young America's Foundation, sounded off after a Dane County, Wisconsin, judge…