October Patch Tuesday beats January ’25 record
Microsoft throws a farewell party for Win10, Office 2016, and Office 2019… a very big party
Similar Posts
Scenes from a “No Kings” Protest, 10-18-25
Bys sThe following are just a few of the pictures I took today at a “No Kings” protest held in Nassau County, New York. It was a peaceful protest. There was a larger-than-expected turnout, with minimal and respectful police presence. As I anticipated in my post explaining why I was going, there were a lot of……
Someone Created First AI-Powered Ransomware Using OpenAI’s gpt-oss:20b Model
Bys sCybersecurity company ESET has disclosed that it discovered an artificial intelligence (AI)-powered ransomware variant codenamed PromptLock. Written in Golang, the newly identified strain uses the gpt-oss:20b model from OpenAI locally via the Ollama API to generate malicious Lua scripts in real-time. The open-weight language model was released by OpenAI earlier this month. “PromptLock
CISA Adds Acclaim USAHERDS Vulnerability to KEV Catalog Amid Active Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a now-patched high-severity security flaw impacting Acclaim Systems USAHERDS to the Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation in the wild. The vulnerability in question is CVE-2021-44207 (CVSS score: 8.1), a case of hard-coded, static credentials in Acclaim USAHERDS that
Year in Review 2024: The major headlines and moments from Sophos this year
Bys sFrom cyber attacks across the geopolitical landscapes, to product updates that help small businesses, Sophos was there in 2024.
South Asian Ministries Hit by SideWinder APT Using Old Office Flaws and Custom Malware
Bys sHigh-level government institutions in Sri Lanka, Bangladesh, and Pakistan have emerged as the target of a new campaign orchestrated by a threat actor known as SideWinder. “The attackers used spear phishing emails paired with geofenced payloads to ensure that only victims in specific countries received the malicious content,” Acronis researchers Santiago Pontiroli, Jozsef Gegeny, and…
Attorney General James Sues National General and Allstate Insurance for Failing to Protect New Yorkers’ Personal Information
Bys sNEW YORK – New York Attorney General Letitia James today filed a lawsuit against several insurance companies doing business as National General and Allstate Insurance Company (Allstate) for failing to protect New Yorkers’ personal information from cyberattacks. In 2020 and 2021, National General suffered a pair of back-to-back data breaches that exposed the driver’s license numbers of…