Lessons for Better Fraud Decision-Making
Have you ever stopped to think about how you go about deciding whether to try a new restaurant that you’ve never been to? Even if you don’t realize what you are doing, when you make this decision, you are likely collecting data around a number of different criteria, analyzing those data points, and then using that analysis to make a decision. Some of the criteria you evaluate might include:
Critical Code Execution Vulnerability Patched in Splunk Enterprise
Splunk this week announced the release of out-of-band patches that address multiple vulnerabilities across Splunk Enterprise, including a critical issue that could lead to arbitrary code execution.
So Long, Internet Explorer. The Browser Retires Today
Internet Explorer is finally headed out to pasture.
As of Wednesday, Microsoft will no longer support the once-dominant browser that legions of web surfers loved to hate — and a few still claim to adore. The 27-year-old application now joins BlackBerry phones, dial-up modems and Palm Pilots in the dustbin of tech history.
Small Botnet Launches Record-Breaking 26 Million RPS DDoS Attack
Security and web performance services provider Cloudflare this week announced that it has mitigated a record-breaking distributed denial-of-service (DDoS) attack that peaked at 26 million requests-per-second (RPS).
New ‘Hertzbleed’ Remote Side-Channel Attack Affects Intel, AMD Processors
A team of academic researchers has identified a new side-channel method that can allow hackers to remotely extract sensitive information from a targeted system through a CPU timing attack.
Attackers Can Exploit Critical Citrix ADM Vulnerability to Reset Admin Passwords
Citrix on Tuesday warned of a critical vulnerability in Citrix Application Delivery Management (ADM) that could essentially allow an unauthenticated attacker to log in as administrator.
SAP Patches High-Severity NetWeaver Vulnerabilities
SAP on Tuesday announced the release of ten new and two updated security notes as part of its June 2022 Security Patch Day.
Rated “Hot News” – the highest severity rating in SAP’s book – the most important of these notes is an update to an April 2018 note containing the updates delivered for the Chrome-based browser in SAP Business Client.
Microsoft to Acquire Cyber Threat Analysis Company Miburo
Microsoft on Tuesday announced that it’s acquiring Miburo, a New York-based cyber threat analysis and research company that specializes in foreign information operations.
Miburo provides analysis, consulting and training services. The startup’s research team detects and attributes influence campaigns across over a dozen languages.
Windows Updates Patch Actively Exploited ‘Follina’ Vulnerability
Microsoft has fixed roughly 50 vulnerabilities with its June 2022 Patch Tuesday updates, including the actively exploited flaw known as Follina and CVE-2022-30190.
