Automatically updated cybersecurity alerts, municipal technology developments, and practical resources for local governments and businesses.
Recent developments that may affect networks, public services, critical infrastructure, employees, Microsoft environments, and technology planning.
Microsoft has released emergency out-of-band Windows updates to fix Remote Desktop Services failures caused by this month's security updates, along with Hyper-V and USB audio problems on some Windows versions. [...]
Read the original article →Japan's Digital Agency has discovered a data breach that may have exposed around 246,000 record rows containing personal information of government employees. [...]
Read the original article →Multiple vulnerabilities have been discovered in MikroTik Routers, the most severe of which could allow for admin hijacking. MikroTik routers are network devices that use the RouterOS operating system to provide advanced routing, firewall, wireless, VPN, bandwidth…
Read the original article →Homebrew package manager version 7.0.0 has been released with a built-in vulnerability scanner, stronger security controls, and the full release of its native BrewUI graphical interface. [...]
Read the original article →A browser extension called Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, sends users' Twitch OAuth session tokens to a commercial bot service. [...]
Read the original article →Hackers compromised HBO Max's official Reddit account and used it to push malicious ads that launched ClickFix attacks to infect Windows and macOS devices with information-stealing malware. [...]
Read the original article →A mass-scanning campaign targeting internet-exposed Vite development servers is attempting to steal cloud credentials and configurations from AWS and Azure deployments. [...]
Read the original article →A vulnerability has been discovered in GitLab, which could allow disclosure of sensitive data. GitLab GitLab is a DevOps platform that provides source code management, CI/CD pipelines, issue tracking, and collaboration tools in a single application for software de…
Read the original article →The laws create a framework for independent verification organizations that can assess AI systems and models and establish a state registry for AI auditors.
Read the original article →John Stark takes on the role as the state’s privacy lead in addition to his role leading the state’s digital governance efforts.
Read the original article →Microsoft examines an AI-assisted business email compromise campaign that used executive impersonation and fake invoices to target finance teams with ACH payment fraud. The post Protecting organizations from AI-assisted executive impersonation and invoice fraud ap…
Read the original article →Multiple vulnerabilities have been discovered in Ivanti products, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the…
Read the original article →The joint report from NASCIO and GDIT highlights unreliable funding sources, fewer resources in smaller jurisdictions and the increased risks in connecting critical infrastructure systems to the internet as major concerns for state chief information officers.
Read the original article →See how Microsoft Defender detects and disrupts AI-themed phishing, malware, and multi-stage attacks across the attack chain. The post Detect and disrupt AI-themed attacks with Microsoft Defender appeared first on Microsoft Security Blog.
Read the original article →Microsoft introduces the Cloud Web Applications Threat Matrix, a MITRE ATT&CK-aligned framework that helps defenders understand, prioritize, and mitigate threats to cloud-hosted web apps and serverless platforms. The post Threat matrix: Mapping threats across clou…
Read the original article →The tool uses Anthropic’s Claude model and will rely on state subject matter experts to help validate responses from verified sources, rather than simply generate conversational answers like many commercial AI chatbots.
Read the original article →A vulnerability has been discovered in SAP Extended Passport (EPP) Processing that could allow for remote code execution. SAP Extended Passport (EPP) Processing is a core system data structure and tracing mechanism within SAP Kernel code used to track, log, and mo…
Read the original article →Passkey-themed social engineering is being used to compromise identities and enable broader cloud attacks. Learn how threat actors establish MFA persistence, abuse Microsoft Graph for reconnaissance, and access SharePoint, OneDrive, and email data, along with key…
Read the original article →Official advisories and established technology publications provide the source material shown above.
ChatGPT can help users search the web, explain unfamiliar technology, compare approaches, summarize public information, and develop follow-up questions.
Open ChatGPT ↗Article titles and excerpts are supplied by third-party publishers and displayed for informational purposes. Lantech Solution LLC does not control third-party content or endorse every opinion or recommendation. Verify critical details with official sources before making security, purchasing, legal, or policy decisions.