Shaun Nichols

2 weeks ago | scworld.com | Shaun Nichols

The June edition of Microsoft’s Patch Tuesday release became even more of a priority for administrators thanks to the disclosure of a potential rootkit vulnerability on the Windows Secure Boot system. Researchers with security vendor Binarly said that the vulnerability they discovered and securely reported to Microsoft would potentially allow an attacker to bypass the UEFI checks that prevent the use of unauthorized firmware on Windows systems.

2 weeks ago | scworld.com | Shaun Nichols

The makers of ChatGPT said they have spotted and disrupted a number of state-sponsored operations that it believes were abusing the AI tool to create malware and run espionage campaigns. OpenAI said in its June security report that it spotted and disrupted a number of attacks, most originating in China and Russia, that appear to have been using ChatGPT to either generate code or automate the process of making social media posts or emails for social engineering campaigns.

2 weeks ago | scworld.com | Shaun Nichols

An epidemic of overconfidence and underestimation in IT security protections and staff readiness could leave health care organizations at risk of catastrophic attacks. IT services provider Omega Systems said that a recent survey of healthcare IT professionals found that while many see their companies as doing more than enough when it comes to data security, there remain key weaknesses and pain points that will put organizations at risk.

2 weeks ago | scworld.com | Shaun Nichols

Microsoft gave administrators something of a summer break with the release of a relatively light load of 66 Patch Tuesday security fixes. The June edition of the monthly security update release sees Microsoft patch 10 flaws rated as "critical," two which are either publicly known or under active exploit. Administrators will want to take particular note of CVE-2025-33053 and CVE-2025-33073, the former of which is under active exploitation and the latter having a public exploit in circulation.

2 weeks ago | scworld.com | Shaun Nichols

The Trump administration issued an executive order rolling back and altering key points of U.S. cybersecurity strategy. The White House announced the new order from the president, which will alter and add on to a number of points from the Biden administration’s Executive Order 04144, as well as a number of other cybersecurity policies issued by the Biden and Obama administrations. “Today, President Donald J.