Security news weekly round-up - 21st June 2024

Introduction

Today's review is about malware and a vulnerability. Unlike previous editions, this one is short because we have just 3 articles. All are worthy of your reading time, and you can relate to them (like every article that we have ever covered in the years gone by).

With that out of the way, let's begin.

When it comes to internet security, the one thing that can stop some attacks is education and awareness. The latter and former can prevent this type of attack. So, be nice to your non-technical family and friends and let them know the difference between a legitimate browser update and a fake one.

To aid you in this, you can start with the following excerpt:

...the threat actors exploit their targets' lack of awareness about the risks of executing PowerShell commands on their systems.

They also take advantage of Windows' inability to detect and block the malicious actions initiated by the pasted code.

. Read the article and check if it affects you.

Here is an excerpt to get you started:

Tracked as CVE-2024-0762 (CVSS score: 7.5), the "UEFIcanhazbufferoverflow" vulnerability has been described as a case of a buffer overflow stemming from the use of an unsafe variable in the Trusted Platform Module (TPM) configuration that could result in the execution of malicious code.

Credits

Cover photo by Debby Hudson on Unsplash.

That's it for this week, and I'll see you next time.