Cybersecurity

Congress finds pharmacies give patient records to law enforcement without warrants

A sweeping congressional review of eight major pharmacy chains’ privacy practices found that none require a warrant prior to sharing customers’ records with law enforcement, and three of the eight do not require any legal review of such requests, according to an announcement Tuesday from Sen. Ron Wyden. Wyden urged the Biden administration to revise […]

Cybersecurity

New PoolParty Process Injection Techniques Outsmart Top EDR Solutions

Dec 11, 2023NewsroomEndpoint Security / Malware A new collection of eight process injection techniques, collectively dubbed PoolParty, could be exploited to achieve code execution in Windows systems while evading endpoint detection and response (EDR) systems. SafeBreach researcher Alon Leviev said the methods are “capable of working across all processes without any limitations, making them more […]

Cybersecurity

CISA adds Owl Labs, Samsung, Realtek bugs to exploited vulnerability list

The Cybersecurity and Infrastructure Security Agency (CISA) added eight bugs on Monday and another on Tuesday to its list of known exploited vulnerabilities, giving federal civilian agencies three weeks to patch the issues which affect products from MinIO, Samsung, Realtek, Zyxel, Laravel and Owl Labs. Cybersecurity experts focused in on the vulnerabilities affecting Owl Labs, […]