Microsoft Patches 2 Zero-Day Vulnerabilities

The 49 CVE's in Microsoft's May security update is the lowest volume in nearly two years.

https://www.darkreading.com/vulnerabilit...rabilities

Keeper Security Announces Minority Growth Equity Investment From Summit Partners

Investment marks the second significant funding round from a leading technology growth equity firm.

https://www.darkreading.com/remote-workf...t-partners

Prove Your Worth: How to Measure Cybersecurity ROI and Impress Your Board




https://www.hackerone.com/ceo/prove-your...your-board

New Linux kernel NetFilter flaw gives attackers root privileges


A new Linux NetFilter kernel flaw has been discovered, allowing unprivileged local users to escalate their privileges to root level, allowing complete control over a system. [...]


https://www.bleepingcomputer.com/news/se...rivileges/

Microsoft May 2023 Patch Tuesday fixes 3 zero-days, 38 flaws


Today is Microsoft's May 2023 Patch Tuesday, and security updates fix three zero-day vulnerabilities and a total of 38 flaws. [...]


https://www.bleepingcomputer.com/news/mi...-38-flaws/

Windows 10 KB5026361 and KB5026362 updates released


Microsoft has released the Windows 10 KB5026361 and KB5026362 cumulative updates for versions 22H2, version 21H2, version 21H1, and 1809 to fix problems and add new features to the operating system. [...]


https://www.bleepingcomputer.com/news/mi...-released/

Windows 11 KB5026372 cumulative update released with 20 changes


Microsoft has released the Windows 11 22H2 KB5026372 cumulative update to fix security vulnerabilities and introduce 20 changes, improvements, and bug fixe [...]


https://www.bleepingcomputer.com/news/mi...0-changes/

Microsoft issues optional fix for Secure Boot zero-day used by malware


Microsoft has released security updates to address a Secure Boot zero-day vulnerability exploited by BlackLotus UEFI malware to infect fully patched Windows systems. [...]


https://www.bleepingcomputer.com/news/mi...y-malware/

Food distribution giant Sysco warns of data breach after cyberattack


Sysco, a leading global food distribution company, has confirmed that its network was breached earlier this year by attackers who stole sensitive information, including business, customer, and employee data. [...]


https://www.bleepingcomputer.com/news/se...berattack/

Critical Ruckus RCE flaw exploited by new DDoS botnet malware


A new malware botnet named 'AndoryuBot' is targeting a critical-severity flaw in the Ruckus Wireless Admin panel to infect unpatched Wi-Fi access points for use in DDoS attacks. [...]


https://www.bleepingcomputer.com/news/se...t-malware/