Microsoft Patch Tuesday follows SharePoint attacks, Exchange server warnings
Despite serious alarm raised by officials, organizations have not applied the patch for Microsoft Exchange servers en masse.
Advertisement
Research
Guess what else GPT-5 is bad at? Security
OpenAI and Microsoft have said that GPT-5 is one of their safest and secure models out of the box yet. An AI red-teamer called its performance “terrible.”
SonicWall pins firewall attack spree on year-old vulnerability
The vendor ruled out a zero-day vulnerability as the root cause, disputing initial assessments from third-party researchers. Fewer than 40 organizations have been impacted since mid-July.
Researchers determine old vulnerabilities pose real-world threat to sensitive data in public clouds
The presentation Monday revises the old Spectre vulnerability in a new scenario, demonstrating there’s not enough focus on the danger.
DARPA’s AI Cyber Challenge reveals winning models for automated vulnerability discovery and patching
The initiative seeks to patch vulnerabilities in open-source code before they are exploited by would-be attackers. Now comes the hard part — putting the systems to the…
Advertisement
Microsoft: An organization without a response plan will be hit harder by a security incident
Security leaders shared advice gleaned from customer engagements, and reinforced the importance of planning and following fundamentals for defense.
Research reveals possible privacy gaps in Apple Intelligence’s data handling
LAS VEGAS — One of the big worries during the generative AI boom is where exactly data is traveling when users enter queries or commands into the…
CISA, Microsoft warn organizations of high-severity Microsoft Exchange vulnerability
The public disclosure and advisories came late Wednesday during Black Hat, but Microsoft said the timing was coordinated.
SonicWall firewalls hit by active mass exploitation of suspected zero-day
About 20 organizations have been impacted and the pace of attacks is rising. Threat researchers and SonicWall are scrambling to determine the root cause.
Details emerge on BlackSuit ransomware takedown
The Russian cybercrime group attacked more than 180 organizations before members abandoned the brand and dispersed to new ransomware groups earlier this year.
Advertisement