Jeff Goldman

Los Angeles

Freelance Journalist at Freelance

Contributor at eSecurity Planet

Featured in: Favicon

esecurityplanet.com Favicon

thenewstack.io Favicon

semiengineering.com

Articles

Microsoft's December 2023 Patch Tuesday Includes Four Critical Flaws

Dec 14, 2023 | esecurityplanet.com | Jeff Goldman

Microsoft has announced a relatively light Patch Tuesday to end the year. The company’s announcement covers a total of 34 flaws, four of them critical. Still, Immersive Labs senior threat director Kev Breen told eSecurity Planet by email that the low number of vulnerabilities shouldn’t suggest any lack of urgency or importance.
October 2023 Patch Tuesday Includes Three Zero-Days Flaws

Oct 11, 2023 | esecurityplanet.com | Jeff Goldman

Microsoft’s Patch Tuesday for October 2023 covers a total of 103 CVEs, including three zero-day vulnerabilities affecting WordPad, Skype and the HTTP/2 “Rapid Reset” DDoS vulnerability.
Word, Streaming Zero-Days Fixed

Sep 13, 2023 | esecurityplanet.com | Jeff Goldman

Microsoft’s Patch Tuesday for September 2023 includes 59 vulnerabilities, five of them rated critical and two currently being exploited in the wild. The two vulnerabilities currently being exploited are CVE-2023-36761, an information disclosure flaw in Microsoft Word with a CVSS score of 6.2; and CVE-2023-36802, an elevation of privilege flaw in Microsoft Streaming Service with a CVSS score of 7.8 that could provide an attacker with system privileges.
Patch Tuesday Targets 74 Flaws, Including Microsoft Teams, Office

Aug 9, 2023 | esecurityplanet.com | Jeff Goldman

eSecurityPlanet content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More. Microsoft’s Patch Tuesday for August 2023 addresses 74 vulnerabilities, six of them critical. The company also issued two advisories, one of them addressing a Microsoft Office flaw that was disclosed but unpatched in last month’s update.
SandboxAQ Open Sources Cryptography Tool for Post-Quantum Era

Aug 8, 2023 | esecurityplanet.com | Jeff Goldman

eSecurityPlanet content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More. SandboxAQ today introduced an open-source cryptography management framework built for the post-quantum era. The AI and quantum spin-out from Alphabet uses the Sandwich framework for the Cryptoservice module in its SandboxAQ Security Suite, currently used by several U.S. government agencies, global banks, telcos, and tech companies.
New SEC Rules Require Breach Disclosure within Four Days

Jul 27, 2023 | esecurityplanet.com | Jeff Goldman

The U.S. Securities and Exchange Commission this week announced new rules mandating the disclosure of cybersecurity incidents as well as ongoing risk management, strategy, and governance. The rules, which will become effective 30 days after publication, require public companies to disclose any cybersecurity incident they determine to be material within four business days, detailing its nature, scope, timing, and actual or expected material impact.
Demand For Timing Innovation Grows

Jul 18, 2023 | semiengineering.com | Jeff Goldman

The semiconductor industry has begun exploring a range of timing options as demand for increased performance and more features exceeds the ability to design chips using the same techniques and technology that have been relied on for decades. Like many elements in computing, timing is a hierarchy or stack.
Microsoft Unsure How Chinese Hackers Stole MSA Key to Breach U.S. Agencies

Jul 18, 2023 | esecurityplanet.com | Jeff Goldman

eSecurityPlanet content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More. Microsoft has hardened security following a Chinese hack of U.S. government agency email accounts, but some details remain a mystery. Even as the threat has passed, Microsoft officials are still analyzing how a Chinese threat group was able to access U.S. government accounts using a stolen inactive Microsoft account (MSA) consumer signing key.
Malicious Microsoft Drivers Could Number in the Thousands: Cisco Talos

Jul 13, 2023 | esecurityplanet.com | Jeff Goldman
Microsoft Addresses 130 Flaws

Jul 12, 2023 | esecurityplanet.com | Jeff Goldman