Segurança· · 2 minMicrosoft's Massive Security Overhaul.
Today’s cybersecurity landscape is buzzing with critical updates and vulnerabilities. Microsoft’s Patch Tuesday is front and center, addressing two zero-day vulnerabilities. Meanwhile, emerging threats from malicious Chrome extensions and AI supply chain risks keep us on our toes.
Microsoft's Massive Security Overhaul
Microsoft just dropped a hefty patch update, fixing two zero-day vulnerabilities among 164 total CVEs. The first, a spoofing flaw in SharePoint, is already under active attack. The second, an elevation of privilege issue in Microsoft Defender, could lead to serious system breaches if exploited.
Rising Threats from Malicious Extensions
Over 108 malicious Chrome extensions have been found stealing user data, affecting around 20,000 users. These sneaky add-ons pose as legitimate tools but funnel sensitive information back to hackers. This highlights the ever-present risk of browser extensions and the need for vigilant security practices.
AI in the Crosshairs
A significant flaw in the Model Context Protocol (MCP) could pave the way for widespread AI supply chain attacks. This vulnerability in widely adopted code could allow adversaries to gain full control of user systems. As AI becomes integrated into more processes, securing these frameworks is crucial.
Fortinet's Security Fixes
Fortinet has patched 27 vulnerabilities across its products, including critical flaws in FortiSandbox. Cybersecurity teams must act quickly to implement these updates to protect against potential exploits that could allow unauthorized access. Staying ahead of these patches is essential to maintain robust defense mechanisms.
Emerging Cyber Threats
Researchers are noting a surge in brute-force attacks, especially targeting edge devices like SonicWall and Fortinet. The majority of these attacks are traced back to the Middle East, coinciding with geopolitical tensions. This emphasizes the need for heightened security measures in vulnerable sectors.
Microsoft Fixes Two Critical Zero-Day Vulnerabilities
Microsoft's April Patch Tuesday addressed a total of 164 vulnerabilities, including two zero-day flaws actively exploited in the wild. Critical attention is needed for the spoofing vulnerability in SharePoint and the elevation of privilege issue in Microsoft Defender.
108 Malicious Chrome Extensions Discovered
A report revealed that 108 malicious Chrome extensions were stealing user credentials and hijacking sessions. This incident underscores the need for better scrutiny of browser extensions to protect user data.
- Sweden Blames Pro-Russian Group for CyberattackSweden's government attributes a failed cyberattack on its energy infrastructure to a pro-Russian group, highlighting ongoing cybersecurity threats across Europe. — SecurityWeek
- Fortinet Patches Critical FlawsFortinet released patches for critical vulnerabilities, including two high-severity flaws in FortiSandbox that need immediate attention. — SecurityWeek
- CISA Flags Windows Task Host VulnerabilityCISA has flagged a Windows Task Host vulnerability as actively exploited, urging agencies to secure their systems. — BleepingComputer
- Credit Resources Vault Scam InvestigationInvestigators dive into a suspicious email promoting a credit service, revealing classic phishing tactics at play. — Malwarebytes
- Capsule Security Secures $7M in FundingCapsule Security has raised $7 million to enhance security for AI agents, addressing new vulnerabilities in this growing field. — SecurityWeek
Esta edição foi útil?
Um clique basta — isso orienta a próxima.