Windows Hello Fingerprint Authentication Bypassed.

Security researchers was able to bypass Windows Hello fingerprint authentication on Dell Inspiron, Lenovo ThinkPad and Microsoft Surface Pro X laptops, by exploiting security flaws they found in the embedded fingerprint sensors.

Having a fingerprint sensor is convenient, but how secure is it really? Well, the security researchers at Blackwing Intelligence knows it isn't very secure at all.

MS Outlook Copies User E-emails From Other Accounts To Microsoft Cloud.

Together with Windows11 update 23H2 comes more and more surprises for its users.

Microsoft brought this new Outlook app as an alternative to Mail and Calendar apps “at no extra cost to you”, yeah, but they skipped the part about stealing your e-mail conversations.

It syncs the users data, including credentials and emails, to Microsoft Cloud by default.

Windows11 - 34 Drivers Vulnerable To Complete Device Takeover.

Security researchers at VMware Carbon Black, found 34 Windows Driver Model (WDM) and Windows Driver Frameworks (WDF) drivers, to be fully exploited by non-privileged threat actors to gain full control of the devices and execute arbitrary code on the underlying systems.

TetrisPhantom Steals Data From Secure USB Drives.

In early 2023, security researchers discovered an ongoing attack targeting government entities in the APAC region by compromising a specific type of a secure USB drive, which provides hardware encryption.

TetrisPhantom is the given name for the APT group focusing on espionage.

These types of secure USB drives are mostly used by government organisations to securely store and transfer data physically between computer systems.

Microsoft Security AI Copilot Released For Some Customers.

Microsoft announced that their own ChatGPT version called Security Copilot AI assistant is now available and makes it faster for security teams to detect and counter threats using their global threat intelligence expertise.

The AI assistant answers to security questions from defenders, learning and adapting from interactions to tailor its recommendations to each enterprise environment.

ToddyCat Advanced APT Actor Uses VLC Player Malware For Windows.

The threat group began its activities in December 2020 and has been responsible for multiple sets of attacks against high-profile entities in both Europe and Asia.

Like most other cyber criminals their main focus is on Windows users.

Deluge - Bittorrent Software.