Latest cybersecurity reporting from selected sources.

Eleven forgotten Microsoft-signed UEFI shims can bypass Secure Boot on almost any machine

A security researcher has observed threat actors exploiting vulnerabilities in a driver used by CheckPoint’s ZoneAlarm antivirus to bypass Windows security measures

SecurityScorecard revealed that the large-scale password spraying campaign can bypass MFA and security access policies by utilizing Non-interactive sign-ins

Trend Micro found that Chinese espionage group Mustang Panda is deploying malware via legitimate Microsoft tools, enabling it to bypass ESET antivirus applications

Microsoft MFA flaw exposed that allowed attackers to bypass security within an hour, putting 400m Office 365 accounts at risk

Blackwing researchers bypass the authentication system

Discovered by Microsoft and dubbed "Migraine," the flaw was disclosed to Apple and patched

The attack bypassed both SPF and DMARC email authentication checks

ESET said the vulnerability was exploited at least twice via a specific user-mode module