article thumbnail

Microsoft Patch Tuesday, November 2023 Edition

Krebs on Security

The zero-day threats targeting Microsoft this month include CVE-2023-36025 , a weakness that allows malicious content to bypass the Windows SmartScreen Security feature. Microsoft says it is relatively straightforward for attackers to exploit CVE-2023-36036 as a way to elevate their privileges on a compromised PC.

Phishing 236
article thumbnail

ISACA Security Survey 2023: Technical Skills Gaps, Budgeting

Data Breach Today

The biggest skills gaps are soft skills (55%), cloud computing (47%), security controls (35%), coding skills (30%) and software development (30%), according ISACA's State of Cybersecurity 2023 survey of more than 2,000 security leaders globally.

Security 284
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Patch Tuesday, October 2023 Edition

Krebs on Security

The patch fixes CVE-2023-42724 , which attackers have been using in targeted attacks to elevate their access on a local device. Apple said it also patched CVE-2023-5217 , which is not listed as a zero-day bug. ” Microsoft also patched zero-day bugs in Skype for Business ( CVE-2023-41763 ) and Wordpad ( CVE-2023-36563 ).

Libraries 210
article thumbnail

Tenable to Buy Startup Ermetic for $265M to Safeguard Clouds

Data Breach Today

2nd-Largest Pure-Play Cyber M&A Transaction of 2023 Unites Identity, Cloud Security Tenable will purchase a cloud security startup founded by the longtime leader of Secdo to help security teams make efficient and accurate remediation decisions.

Cloud 283
article thumbnail

Forrester Report: 3 Top New Threats in 2023

Data Breach Today

Forrester's Brian Wrozek on Poison AI Data, Cloud Complexity, Nation-State Threats The potential for cybercriminals to reverse-engineer generative AI tools, the rise of geopolitical threats and increased cloud complexity are among the top new threats facing security teams in 2023, according to Forrester's Top Cybersecurity Threats In 2023 report.

Cloud 184
article thumbnail

Thales Wins Big in 2023

Thales Cloud Protection & Licensing

Thales Wins Big in 2023 madhav Thu, 11/02/2023 - 05:09 Here at Thales, we are incredibly proud of what we do. 2023 has been a particularly good year for us; keep reading for a run-through of our most recent successes. 2023 has been a particularly good year for us; keep reading for a run-through of our most recent successes.

Cloud 143
article thumbnail

Microsoft Patch Tuesday, March 2023 Edition

Krebs on Security

The Outlook vulnerability ( CVE-2023-23397 ) affects all versions of Microsoft Outlook from 2013 to the newest. While CVE-2023-23397 is labeled as an “Elevation of Privilege” vulnerability, that label doesn’t accurately reflect its severity, said Kevin Breen , director of cyber threat research at Immersive Labs. .”

Passwords 224