Researchers demonstrate remote GPU cache side-channel attack from within browsers against AMD and NVIDIA graphics cards.
The post New Attack Shows Risks of Browsers Giving Websites Access to GPU appeared first on SecurityWeek.
IMF Emails Hacked
The International Monetary Fund (IMF) detects a cybersecurity incident that involved nearly a dozen email accounts getting hacked.
The post IMF Emails Hacked appeared first on SecurityWeek.
Threat Detection Report: Cloud Attacks Soar, Mac Threats and Malvertising Escalate
Red Canary’s 2024 Threat Detection Report is based on analysis of almost 60,000 threats across 216 petabytes of telemetry from over 1,000 customers’ endpoints.
The post Threat Detection Report: Cloud Attacks Soar, Mac Threats and Malvertising Escalate appeared first on SecurityWeek.
Cyber Madness Bracket Challenge – Register to Play
SecurityWeek’s Cyber Madness Bracket Challenge is a contest designed to bring the community together in a fun, competitive way through one of America’s top sporting events.
The post Cyber Madness Bracket Challenge – Register to Play appeared first on SecurityWeek.
Major CPU, Software Vendors Impacted by New GhostRace Attack
CPU makers Intel, AMD, Arm and IBM, as well as software vendors, are impacted by a new speculative race condition (SRC) attack named GhostRace.
The post Major CPU, Software Vendors Impacted by New GhostRace Attack appeared first on SecurityWeek.
Exploited Building Access System Vulnerability Patched 5 Years After Disclosure
Vulnerabilities affecting a Nice Linear physical access product, including an exploited flaw, patched five years after their disclosure.
The post Exploited Building Access System Vulnerability Patched 5 Years After Disclosure appeared first on SecurityWeek.
Critical TeamCity Vulnerability Exploitation Started Immediately After Disclosure
Critical TeamCity authentication bypass vulnerability CVE-2024-27198 exploited in the wild after details were disclosed.
The post Critical TeamCity Vulnerability Exploitation Started Immediately After Disclosure appeared first on SecurityWeek.
CrowdStrike to Acquire Flow Security
CrowdStrike says the acquisition of Flow Security will expand its cloud security capabilities with Data Security Posture Management.
The post CrowdStrike to Acquire Flow Security appeared first on SecurityWeek.
Zeek Security Tool Vulnerabilities Allow ICS Network Hacking
Vulnerabilities in a plugin for the Zeek network security monitoring tool can be exploited in attacks aimed at ICS environments.
The post Zeek Security Tool Vulnerabilities Allow ICS Network Hacking appeared first on SecurityWeek.
Remote Stuxnet-Style Attack Possible With Web-Based PLC Malware: Researchers
Researchers demonstrate that remote Stuxnet-style attacks are possible against many modern PLCs using web-based malware.
The post Remote Stuxnet-Style Attack Possible With Web-Based PLC Malware: Researchers appeared first on SecurityWeek.
