AMD Issues Updates for Silicon-Level ‘SinkClose’ Processor Flaw

The vulnerability has been around for nearly 20 years and gives sophisticated attackers a way to bury virtually undetectable bootkits on devices with EPYC and Ryzen microprocessors.

darkreading – ​Read More

Disposing of an old Windows laptop? Here’s the safest way to erase your personal data (for free!)

Before you sell, give away, or otherwise dispose of an old laptop, make sure your personal files are thoroughly deleted and unrecoverable. Everything you need is available as part of Windows.

Latest stories for ZDNET in Security – ​Read More

Ukraine CERT: Mass Phishing Campaign Poses as Nation’s Security Service

More than 100 Ukrainian government devices have been affected by the threat that is being tracked as UAC-0198.

darkreading – ​Read More

CLFS Bug Crashes Even Updated Windows 10, 11 Systems

A quick and easy exploit for crashing Windows computers has no fix yet nor really any way to mitigate its effects.

darkreading – ​Read More

Apple’s ToolSandbox reveals stark reality: Open-source AI still lags behind proprietary models

Apple’s ToolSandbox benchmark reveals a significant performance gap between proprietary and open-source AI models, challenging recent claims and exposing weaknesses in real-world task execution.Read More

Security News | VentureBeat – ​Read More

Justice Department Disrupts North Korean ‘Laptop Farm’ Operation

Law enforcement authorities in the U.S. have arrested a Tennessee man accused of running a “laptop farm” that helped North Korean IT workers secure remote jobs at American companies.

The post Justice Department Disrupts North Korean ‘Laptop Farm’ Operation appeared first on SecurityWeek.

SecurityWeek – ​Read More

Secureworks Fills Australian Mid-Market Demand for Simplified Cyber Security Solutions

The CEO of a burgeoning cybersecurity firm spoke to TechRepublic about XDR, ransomware, the Crowdstrike outage and what organisations can do to prepare for cyberattacks.

Security | TechRepublic – ​Read More

Microsoft Warns of OpenVPN Vulnerabilities, Potential for Exploit Chains

The vulnerabilities, patched in OpenVPN 2.6.10, expose users on the Windows platform to remote code execution attacks.

The post Microsoft Warns of OpenVPN Vulnerabilities, Potential for Exploit Chains appeared first on SecurityWeek.

SecurityWeek – ​Read More

Russia Blocks Signal Messaging App as Authorities Tighten Control Over Information

Signal uses end-to-end encryption, making it difficult for the Russian government to intercept communications.

The post Russia Blocks Signal Messaging App as Authorities Tighten Control Over Information appeared first on SecurityWeek.

SecurityWeek – ​Read More

Several Vulnerabilities Found in Google’s Quick Share Data Transfer Utility

SafeBreach identified 10 vulnerabilities in Google Quick Share and devised a remote code execution chain targeting the file sharing utility for Windows.

The post Several Vulnerabilities Found in Google’s Quick Share Data Transfer Utility appeared first on SecurityWeek.

SecurityWeek – ​Read More