A high-severity Kubernetes vulnerability tracked as CVE-2023-5528 can be exploited to execute arbitrary code on Windows endpoints. The post Kubernetes Vulnerability Allows Remote Code Execution on Windows Endpoints appeared first on SecurityWeek. Original linkOriginal author: Ionut Arghire

OnAugust8,2023,Microsoftfinallyreleasedakernelpatchforaclassofvulnerabilitiesaffecting MicrosoftWindowssince2015.Thevulnerabilitiesleadtoelevationofprivilege(EoP),whichallowsanaccountwithuserrightstogainSYSTEMprivilegesonavulnerablehost.Therootcauseofthisattacksurface,accordingtoa2015blog,istheabilityofanormaluseraccounttoreplacetheoriginalC:\drive...

The HHS is investigating whether protected health information was compromised in the Change Healthcare data breach. The post Government Launches Probe Into Change Healthcare Data Breach appeared first on SecurityWeek. Original link(Originally posted by Ionut Arghire)

Nissan is notifying roughly 100,000 individuals of a data breach resulting from a ransomware attack conducted by the Akira cybercrime group. The post Nissan Data Breach Affects 100,000 Individuals appeared first on SecurityWeek. Original link(Originally posted by Eduard Kovacs)

Mikhail Vasiliev was sentenced to prison in Canada and faces additional charges in the US for his role in the LockBit ransomware operation. The post LockBit Ransomware Affiliate Sentenced to Prison in Canada appeared first on SecurityWeek. Original linkOriginal author: Ionut Arghire

Lawmakers in the European Parliament voted overwhelmingly in favor of the Artificial Intelligence Act, five years after regulations were first proposed. The post Europe’s World-First AI Rules Get Final Approval From Lawmakers. Here’s What Happens Next appeared first on SecurityWeek. Original linkOriginal author: Associated Press

Intel and AMD publish 10 new security advisories this Patch Tuesday to inform customers about vulnerabilities impacting their products.  The post Chipmaker Patch Tuesday: Intel, AMD Address New Microarchitectural Vulnerabilities appeared first on SecurityWeek. Original linkOriginal author: Eduard Kovacs

Healthcare has long been a primary target for ransomware attacks. This is not changing and is not likely to change. The post Healthcare’s Ransomware Epidemic: Why Cyberattacks Hit the Medical Sector With Alarming Frequency appeared first on SecurityWeek. Original link(Originally posted by Kevin Townsend)

The White House again wants to boost cybersecurity spending, proposing a $3 billion budget for CISA and billions more for other initiatives. The post White House Budget Proposal Seeks Cybersecurity Funding Boost  appeared first on SecurityWeek. Original link(Originally posted by Eduard Kovacs)

Three types of vulnerabilities related to ChatGPT plugins could have led to data exposure and account takeovers.  The post ChatGPT Plugin Vulnerabilities Exposed Data, Accounts appeared first on SecurityWeek. Original link(Originally posted by Eduard Kovacs)