Cybersecurity protects your systems. Cybersecurity risk management protects your business.®

The Information Highway

The Information Highway

Read the latest technology news, your comprehensive source for the latest breakthroughs, trends, and innovations shaping the world of technology.

Microsoft October 2023 Patch Tuesday fixes 3 zero-days, 104 flaws

patch-tuesday-larg_20231014-184740_1

Today is Microsoft's October 2023 Patch Tuesday, with security updates for 104 flaws, including three actively exploited zero-day vulnerabilities. 

Continue reading
  4685 Hits

Genetics firm 23andMe says user data stolen in credential stuffing attack

dna

23andMe has confirmed that it is aware of user data from its platform circulating on hacker forums and attributes the leak to a credential-stuffing attack. 

Continue reading
  2834 Hits

Microsoft officially removes Cortana for Windows 11 Insiders

Cortana

Microsoft finally removed the Cortana standalone app from Windows 11 in the latest preview build for Insiders in the Canary Channel. 

Continue reading
  3281 Hits

China-linked cyberspies backdoor semiconductor firms with Cobalt Strike

motherboard-cpu-bios

Hackers engaging in cyber espionage have targeted Chinese-speaking semiconductor companies with TSMC-themed lures that infect them with Cobalt Strike beacons. 

Continue reading
  2923 Hits

NSA and CISA reveal top 10 cybersecurity misconfigurations

Hacker

The National Security Agency (NSA) and the Cybersecurity and Infrastructure Security Agency (CISA) revealed today the top ten most common cybersecurity misconfigurations discovered by their red and blue teams in the networks of large organizations. 

Continue reading
  2877 Hits

Microsoft releases new, faster Teams app for Windows and Mac PCs

A new Microsoft Teams application, faster and completely redesigned, is generally available for all Windows and macOS users starting today. 

Continue reading
  3064 Hits

Lyca Mobile investigates customer data leak after cyberattack

lyca-white

Lyca Mobile has released a statement about an unexpected disruption on its network caused by a cyberattack that may have also compromised customer data. 

Continue reading
  3346 Hits

Apple emergency update fixes new zero-day used to hack iPhones

Apple

Apple released new emergency security updates on Wednesday to patch two new zero-day vulnerabilities known to be exploited in attacks. 

Continue reading
  2842 Hits

Microsoft: Hackers target Azure cloud VMs via breached SQL servers

MSSQL

Hackers have been observed trying to breach cloud environments through Microsoft SQL Servers vulnerable to SQL injection. 

Continue reading
  3099 Hits

Emergency alert on US phones and TVs today — Don’t worry, it’s just a test

FEMA_headpic

The U.S. Federal Emergency Management Agency (FEMA) and the Federal Communications Commission (FCC) will run an emergency alert test today to check Emergency Alert System (EAS) and Wireless Emergency Alerts (WEA) capabilities nationwide. 

Continue reading
  2843 Hits

Sony confirms data breach impacting thousands in the U.S.

SONY

Sony Interactive Entertainment (Sony) has notified current and former employees and their family members about a cybersecurity breach that exposed personal information. 

Continue reading
  2739 Hits

New Microsoft Azure AD CTS feature can be abused for lateral movement

microsoft-azure-headpic

Microsoft's new Azure Active Directory Cross-Tenant Synchronization (CTS) feature, introduced in June 2023, has created a new potential attack surface that might allow threat actors to more easily spread laterally to other Azure tenants. 

Continue reading
  3353 Hits

Microsoft fixes Outlook prompts to reopen closed windows

Outlook

Microsoft has resolved a known issue that caused Outlook Desktop to unexpectedly prompt users to reopen previously closed windows. 

Continue reading
  6499 Hits

Exploit released for Microsoft SharePoint Server auth bypass flaw

SharePoint

Proof-of-concept exploit code has surfaced on GitHub for a critical authentication bypass vulnerability in Microsoft SharePoint Server, allowing privilege escalation. 

Continue reading
  3034 Hits

Microsoft breach led to theft of 60,000 US State Dept emails

Hacker_world_map

Chinese hackers stole tens of thousands of emails from U.S. State Department accounts after breaching Microsoft's cloud-based Exchange email platform in May. 

Continue reading
  3227 Hits

Bing Chat responses infiltrated by ads pushing malware

bing-chat-header-blue

Malicious advertisements are now being injected into Microsoft's AI-powered Bing Chat responses, promoting fake download sites that distribute malware. 

Continue reading
  3176 Hits

Cisco Catalyst SD-WAN Manager flaw allows remote server access

Cisco__headpic

Cisco is warning of five new Catalyst SD-WAN Manager products vulnerabilities with the most critical allowing unauthenticated remote access to the server. 

Continue reading
  2819 Hits

Google fixes fifth actively exploited Chrome zero-day of 2023

Google_Chrome

Google has patched the fifth Chrome zero-day vulnerability exploited in attacks since the start of the year in emergency security updates released today. 

Continue reading
  2775 Hits

Microsoft now rolling out AI-powered Paint Cocreator to Insiders

Paint

Microsoft's new AI image generation Paint tool powered by OpenAI's DALL-E text-to-image model is now rolling out to Windows Insiders in Dev and Canary channels. 

Continue reading
  3870 Hits

Windows 11 23H2 now rolling out to Release Preview Insiders

Windows_11

Microsoft has started rolling out the next major version of its operating system, Windows 11 23H2, to Insiders enrolled in the Release Preview Channel for enterprise testing before the general release later this year.

Continue reading
  3020 Hits

Top Breaches Cost ($) of 2024

HEALTHCARE
FINANCIAL
INDUSTRIAL
TECHNOLOGY
ENERGY
Source: IBM Cost of a Data Breach Report 2024