Microsoft releases PowerShell script to update bootable media with "Windows UEFI CA 2023" certificate, addressing BlackLotus UEFI bootkit vulnerability that bypasses Secure Boot and disables security features. The update, currently optional but becoming mandatory by 2026, helps protect sys...
The FCC proposes a $4.49M fine against VoIP provider Telnyx for allegedly enabling fraudulent robocalls impersonating a fake FCC Fraud Prevention Team. The scam, involving 1,797 calls from "MarioCop" accounts, attempted to extort money through gift cards. Telnyx denies violating Know Your ...
Spanish police arrested a hacker in Alicante who conducted 40 major cyberattacks against global organizations including NATO, US Army, and various government institutions. The suspect, operating under multiple aliases, accessed and sold sensitive data on dark web forums. Despite using anon...
CISA adds four critical vulnerabilities to its Known Exploited Vulnerabilities catalog, including flaws in Apache OFBiz, Microsoft .NET Framework, and Paessler PRTG Network Monitor. Federal agencies must patch by February 2025 to address these actively exploited security risks that could l...
AMD patches critical security flaw (CVE-2024-56161) affecting Zen 1-4 processors, which could allow attackers with local admin access to execute malicious microcode and compromise SEV-SNP security features. The vulnerability impacts multiple EPYC processor generations, requiring immediate ...
