April 2023 – Page 14 – PossibleThreat Articles

Tax-time smishing campaign targets Indian account holders

April 12, 2023 0 Comments featured, finance and banking, india, smishing, threat research

Credit to Author: Jagadeesh Chandraiah| Date: Wed, 12 Apr 2023 20:44:10 +0000

The end of the fiscal year is already hectic enough, but would-be scammers just don’t care whom they affect

Inside the 2022 Email Cyber Threat Landscape

April 12, 2023 0 Comments trend micro research : articles, news, reports, trend micro research : cloud, trend micro research : cyber threats, trend micro research : mobile, trend micro research : research, trend micro research : web

Credit to Author: Jon Clay| Date: Wed, 12 Apr 2023 00:00:00 +0000

Key trends and predictions you should know about

ComputerWorld Independent

Yet more digital spies targeting iPhones exposed by security researchers

April 12, 2023 0 Comments Android, Apple, iPhone, Mobile, Security, small and medium business

Just weeks after President Biden signed an executive order designed to prevent the US government from purchasing commercial spyware used to subvert democracies, researchers have identified yet another shameful zero-click, zero-day exploit that targeted iPhone users. This spy-for-hire ‘solution’ was sold by an Israeli firm called QuaDream.

Making everyone less safe

QuaDream’s attacks have been exposed by security researchers at Microsoft and Citizen Lab. QuaDream is a more secretive entity than NSO Group but shares much of the same pedigree, including being founded by ex-NSO Group employees and having connections to Israeli intelligence. Its attacks were first exposed last year, but the researchers have since found more about how these digital mercenaries worked.

To read this article in full, please click here

Security Sophos

Microsoft fixes a zero-day – and two curious bugs that take the Secure out of Secure Boot

April 12, 2023 0 Comments bootkit, Exploit, Microsoft, Patch Tuesday, secure boot, vulnerability, zero day

Credit to Author: Paul Ducklin| Date: Wed, 12 Apr 2023 12:57:23 +0000

Is Secure Boot without the Secure just “Boot”?

Microsoft Security

LinkedIn and Microsoft Entra introduce a new way to verify your workplace

April 12, 2023 0 Comments cybersecurity, Identity and access management, identity and access management series

Credit to Author: Christine Barrett| Date: Wed, 12 Apr 2023 13:00:00 +0000

LinkedIn members can use a Microsoft Entra Verified ID credential issued from their organization to verify their workplace on their public profile and add instant credibility, increasing trust and confidence in interactions.

The post LinkedIn and Microsoft Entra introduce a new way to verify your workplace appeared first on Microsoft Security Blog.

Independent Krebs Security

Microsoft (& Apple) Patch Tuesday, April 2023 Edition

April 11, 2023 0 Comments bharat jogi, cve-2022-37969, cve-2023-28219, cve-2023-28220, cve-2023-28252, dbappsecurity, dustin childs, ios 15.5.7, ios/ipados 16.4.1, macos 12.6.5 and 11.7.6., mandiant, nokoyawa ransomware, Qualys, security tools, The Coming Storm, Time to Patch, trend micro zero day initiative, windows common log system file system

Credit to Author: BrianKrebs| Date: Wed, 12 Apr 2023 00:06:51 +0000

Microsoft today released software updates to plug 100 security holes in its Windows operating systems and other software, including a zero-day vulnerability that is already being used in active attacks. Not to be outdone, Apple has released a set of important updates addressing two zero-day vulnerabilities that are being used to attack iPhones, iPads and Macs.

MalwareBytes Security

Apple releases emergency updates for two known-to-be-exploited vulnerabilities

April 11, 2023 0 Comments Apple, cve-2023-28205, cve-2023-28206, Exploits and vulnerabilities, ios 16.4.1, iosurfaceaccelerator, ipados 16.4.1, macos 13.3.1, news, out-of-bounds write, use-after-free

Categories: Apple

Categories: Exploits and vulnerabilities

Categories: News

Tags: iOS 16.4.1

Tags: iPadOS 16.4.1

Tags: macOS 13.3.1

Tags: CVE-2023-28206

Tags: CVE-2023-28205

Tags: use-after-free

Tags: out-of-bounds write

Tags: IOSurfaceAccelerator

Apple has released iOS 16.4.1, iPadOS 16.4.1, and macOS 13.3.1 for the iPhone, iPad, and Mac, respectively, and our advice is to install them as soon as possible.