2+ day, 15+ hour ago   (603+ words) JFrog Artifactory instances continue to get hit hard. Multiple attackers are exploiting three JFrog Artifactory bugs to gain administrative control over vulnerable instances - in some cases, just days after the vendor published a patch - and then using this illicit access…...

4+ day, 11+ hour ago   (822+ words) VMware has defended its decision to end public downloads of its Virtual Disk Development Kit (VDDK). VDDK is an SDK that a Broadcom technical document describes as “a set of libraries and utilities that enable software developers to create applications…...

4+ day, 20+ hour ago   (529+ words) Zero-day researcher Nightmare Eclipse, aka MSNightmare, published yet another Microsoft Defender proof-of-concept exploit for a zero-day dubbed ShieldCrash, which they claim will allow attackers to bypass the earlier ShieldBreak patch and read files as SYSTEM. “I might rework this later…...

5+ day, 2+ hour ago   (518+ words) Office 2021 joins the October retirement list as customers weigh pricier alternatives Microsoft will retire Project Online and remove Publisher from Microsoft 365 over the coming weeks, while support for perpetual versions of Publisher and for Office 2021 will end shortly afterward. Publisher,…...

1+ week, 3+ day ago   (1508+ words) A decade or two ago, board executives asked "why should I care about cybersecurity?" Five years ago, they were asking "Are you patching our software vulnerabilities?" Now, they're starting to ask: "Are we actually secure?" They might want a simple…...

1+ week, 4+ day ago   (914+ words) EXCLUSIVE What's old is new again as VMware will soon release an updated version of vSphere Standard, the low-end server virtualization bundle that it hasn’t significantly changed for years and has scarcely promoted since its 2023 acquisition by Broadcom. VMware’s hero…...

1+ week, 4+ day ago   (556+ words) SonicWall says attackers are actively exploiting two chained zero-days to take over Secure Mobile Access (SMA) Series 1000 boxes. Aimed at midsize and large enterprises, SMA1000 gateways secure remote access and VPN connections. Compromising one can therefore provide attackers with a valuable…...

1+ week, 6+ day ago   (540+ words) August 27 update reportedly scrambles cursor customizations as bogus antivirus alerts spread Microsoft ended the summer with two more Windows annoyances: Defender falsely warning that it is disabled, and reports that an August 27 update is wiping users' mouse cursor customizations. The…...

1+ week, 6+ day ago   (888+ words) An unknown miscreant is using "TerminalFix" to trick unsuspecting users into running PowerShell commands that infect their computers with a reverse tunnel granting attackers access to their networks. Some of the malware is even hidden inside PNG graphics the PC…...

1+ week, 6+ day ago   (647+ words) Broadcom has decided to take responsibility for the security of some important open-source software, namely the Spring Java application framework and RabbitMQ. Australian developer Rod Johnson created the precursor to Spring in 2002, then found collaborators to tread the well-worn path…...