Do Son ESET found vendor-signed UEFI applications vulnerable to a Secure Boot bypass. Attackers can run pre-boot code. Update firmware and the UEFI DBX now.
ESET
A new report from ESET reveals PromptLock, a ransomware strain that uses AI to dynamically generate malicious scripts, making it uniquely difficult for security software to detect.
ESET uncovers BladedFeline, an Iran-aligned APT group, targeting KRG, Iraq, and Uzbekistan in a sophisticated cyberespionage campaign.
The flaw, designated CVE-2024-2003 (CVSS 7.3) and discovered by the Zero Day Initiative, could have allowed attackers to escalate privileges
An attacker could exploit CVE-2023-3160 by creating a specially crafted symbolic link that would allow them to gain elevated privileges
The flaw, identified as CVE-2023-2847, is a local privilege escalation bug with a CVSS v3.1 score of 7.8, underlining its high-risk potential