In H2 2024, cybercriminals increasingly misused legitimate Microsoft tools and browser extensions to bypass cyber protection and deliver malware, states a report by Ontinue. They exploited features like Quick Assist and Windows Hello for illegal purposes. While ransom payments fell to $813.55 million in 2024 from $1.25 billion in 2023, the number of breaches rose, suggesting increased ransomware attacks. The report also cautioned about increased threats to IoT and OT environments.
IXON VPN Vulnerabilities Let Attackers Gain Access to Windows & Linux Systems
A security assessment by Shelltrail revealed three critical vulnerabilities in the IXON VPN client, allowing privilege escalation on Windows and Linux. Identified as CVE-2025-ZZZ-01, CVE-2025-ZZZ-02,
%20CISO%E2%80%99s%20Core%20Focus.webp?w=0&resize=0,0&ssl=1 "Identity and Access Management (IAM)")