Szolgáltatóknak

The MSIX package file format has been in the light for a few weeks. The GHOSTPULSE[1] malware has been identified to bypass many security controls delivered through an MSIX package. Like many operating systems, Windows can install applications by executing an executable (often called "setup.exe"), but packages are also available. Think about the well-known “.deb” for Debian/Ubuntu or “.rpm” for RedHat/CentOS. In the Windows eco-system, packages have the “.msi” extension. They have been used to deliver malware for a while (see my old diary from 2018![2]).

CISOs need to understand that smart employees will find ways to use AI to get work done – so it’s better to manage AI as opposed to squashing the staff’s creativity.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Targeted attacks against two dozen related companies is just the latest evidence that hackers want a piece of energy.

Another two bugs in this month's set of fixes for 63 CVEs were publicly disclosed previously but have not been exploited yet.

The two cybersecurity firms joining Crunchbase’s list of companies valued at $1 billion were Prove Identity and Keyfactor.

Leading incident response companies take FBI to task for dragging on its investigation as security pros cite lack of manpower and hesitance of victims to come forward.