Author Archives: Onsite Computing, Inc.

Developers Beware: Lazarus Group Uses Fake Coding Tests to Spread Malware

Cybersecurity researchers have uncovered a new set of malicious Python packages that target software developers under the guise of coding assessments. “The new samples were tracked to GitHub projects that have been linked to previous, targeted attacks in which developers are lured using fake job interviews,” ReversingLabs researcher Karlo Zanki said. The activity has been […]

Microsoft warns of bug reversing updates on old Windows 10, patches critical flaws

In a busy Patch Tuesday update, Microsoft addressed over 70 security vulnerabilities across various products, including Windows, Office, and Azure. However, the company also acknowledged a critical bug in a Windows 10 version could silently undo previously applied security patches, leaving systems vulnerable to attacks. “Microsoft is aware of a vulnerability in Servicing Stack that […]

12 dark web monitoring tools

What is dark web monitoring? Dark web monitoring is a service often offered by cybersecurity vendors that scans the dark web for information pertaining to an organization. These software scan and search dark web websites and forums checking for your organization’s information against compromised datasets being traded or sold. The dark web is the place […]

Microsoft Issues Patches for 79 Flaws, Including 3 Actively Exploited Windows Flaws

Microsoft on Tuesday disclosed that three new security flaws impacting the Windows platform have come under active exploitation as part of its Patch Tuesday update for September 2024. The monthly security release addresses a total of 79 vulnerabilities, of which seven are rated Critical, 71 are rated Important, and one is rated Moderate in severity. […]

Ivanti Releases Urgent Security Updates for Endpoint Manager Vulnerabilities

Ivanti has released software updates to address multiple security flaws impacting Endpoint Manager (EPM), including 10 critical vulnerabilities that could result in remote code execution. A brief description of the issues is as follows – CVE-2024-29847 (CVSS score: 10.0) – A deserialization of untrusted data vulnerability that allows a remote unauthenticated attacker to achieve code […]

Immediate threats or long-term security? Deciding where to focus is the modern CISO’s dilemma

Cybersecurity has become a high-stakes balancing act — the modern CISO is under constant pressure to protect their organization from the latest threats, including ransomware and phishing, while also developing long-term security strategies and reporting to the C-suite and board. This means juggling immediate needs, such as patching vulnerabilities and responding to cyber incidents, with long-term […]

This site uses cookies to offer you a better browsing experience. By browsing this website, you agree to our use of cookies.