5 CVEs in Microsoft's October Update to Patch Immediately

Threat actors are actively exploiting two of the vulnerabilities, while three others are publicly known and ripe for attack.

Follow Dark Reading:

October 09, 2024

LATEST SECURITY NEWS & COMMENTARY 5 CVEs in Microsoft's October Update to Patch Immediately Threat actors are actively exploiting two of the vulnerabilities, while three others are publicly known and ripe for attack. American Water Suffers Network Disruptions After Cyberattack The largest publicly traded water utility in the US was forced to disconnect some of its online systems, and its website and telecommunications system remained unavailable as of Tuesday morning, Oct. 8. Ex-Uber CISO Requests a New, 'Fair' Trial Attorneys for Joseph Sullivan argue the jury didn't hear essential facts of the case during the original trial and that his conviction must be overturned. How Major Companies Are Honoring Cybersecurity Awareness Month The annual event reinforces best practices while finding new ways to build a culture where employees understand how their daily decisions affect company security. Find out how AWS, IBM, Intuit, SentinelOne, and Gallo are spreading the word. Your IT Systems Are Being Attacked. Are You Prepared? Company leadership needs to ensure technology teams are managing continuous monitoring, automated testing, and alignment with business needs across their enterprise. Healthcare's Grim Cyber Prognosis Requires Security Booster As healthcare organizations struggle against operational issues, two-thirds of the industry suffered ransomware attacks in the past year, and an increasing number are caving to extortion and paying up. MORE NEWS / MORE COMMENTARY HOT TOPICS CISO Paychecks: Worth the Growing Security Headaches? CISOs' cash compensation tops $400,000 now, but the high pay comes with struggles, rapidly changing responsibilities, and tight budgets. Cybersecurity Is Serious — but It Doesn't Have to Be Boring Thoughtfully applied, humor breaks through security fatigue, increases engagement, and fosters a culture of security awareness. GorillaBot Goes Ape With 300K Cyberattacks Worldwide Among those affected by all this monkeying around with DDoS in September were some 4,000 organizations in the US. What the White House Should Do Next for Cyber Regulation Creating a new office of cyber-regulation strategy is the government's best opportunity to improve security and to protect Americans in an increasingly dangerous world. MORE PRODUCTS & RELEASES Kevin Mandia Joins Expel's Board of Directors Bishop Fox Announces Cosmos Integration With ServiceNow Retail & Hospitality ISAC Announces Pam Lindemoen As New CSO and VP Darktrace Announces Formal Completion of its Acquisition by Thoma Bravo MORE PRODUCTS & RELEASES EDITORS' CHOICE Single HTTP Request Can Exploit 6M WordPress Sites The popular LiteSpeed Cache plug-in is vulnerable to unauthenticated privilege escalation via a dangerous XSS flaw. LATEST FROM THE EDGE The Perils of Ignoring Cybersecurity Basics The massive outage involving a faulty Falcon update is an excellent illustration of what happens when organizations neglect security fundamentals. LATEST FROM DR TECHNOLOGY Despite Prevalence of Online Threats, Users Aren't Changing Behavior Consumers are victims of online scams and have their data stolen, but they are lagging on adopting security tools to protect themselves. LATEST FROM DR GLOBAL Mideast, Turkey Cyber Threats Spike, Prompting Defense Changes The vast majority of organizations in the region saw more attacks in the past year, but most don't feel prepared for future incidents. WEBINARS Social Engineering: New Tricks, New Threats, New Defenses 10 Emerging Vulnerabilities Every Enterprise Should Know View More Dark Reading Webinars >> WHITE PAPERS The State of Asset Security: Uncovering Alarming Gaps & Unexpected Exposures The Anatomy of a Ransomware Attack The ROI of RevealX Against Ransomware RevealX Catches Ransomware Within Days of Deployment at WCH A CISO's Guide to Geopolitics and CyberSecurity 5 Essential Insights into Generative AI for Security Leaders SecOps Checklist View More White Papers >> FEATURED REPORTS Managing Third-Party Risk Through Situational Awareness 2024 InformationWeek US IT Salary Report View More Dark Reading Reports >>

Dark Reading Daily -- Published By Dark Reading Informa Tech Holdings LLC | Registered in the United States with number 7418737 | 605 Third Ave., 22nd Floor, New York, New York 10158, USA To opt-out of any future Dark Reading Daily Newsletter emails, please respond here. Thoughts about this newsletter? Give us feedback. Keep This Newsletter Out Of Your SPAM Folder Don't let future editions go missing. Take a moment to add the newsletter's address to your anti-spam white list: If you're not sure how to do that, ask your administrator or ISP. Or check your anti-spam utility's documentation. We take your privacy very seriously. Please review our Privacy Statement.

© 2024 | Informa Tech | Privacy Statement | Terms & Conditions | Contact Us