📢 Fresh Microsoft Office zero-day executes code on fully patched applications 📢
📖 Read
via "ITPro".
Malicious documents saved in Rich Text Format are especially concerning since they can execute code without even being opened📖 Read
via "ITPro".
ITPro
Fresh Microsoft Office zero-day executes code on fully patched applications
Malicious documents saved in Rich Text Format are especially concerning since they can execute code without even being opened
📢 How to turn on Windows Defender 📢
📖 Read
via "ITPro".
Find out how to switch on Windows Defender in Windows 10 and older versions of the OS📖 Read
via "ITPro".
ITPro
How to turn on Windows Defender
A simple guide on how to turn on Windows Defender in Windows 10 and Windows 11, and turn it off again if necessary
❌ Evil Corp Pivots LockBit to Dodge U.S. Sanctions ❌
📖 Read
via "Threat Post".
The cybercriminal group is distancing itself from its previous branding by shifting tactics and tools once again in an aim to continue to profit from its nefarious activity.📖 Read
via "Threat Post".
Threat Post
Evil Corp Pivots LockBit to Dodge U.S. Sanctions
The cybercriminal group is distancing itself from its previous branding by shifting tactics and tools once again in an aim to continue to profit from its nefarious activity.
👍1
🕴 For Ransomware, Speed Matters 🕴
📖 Read
via "Dark Reading".
Someone interested in putting together a ransomware campaign has to consider several factors. The LockBit group touts its speed over competing families to attract potential buyers for its ransowmare-as-a-service.📖 Read
via "Dark Reading".
Dark Reading
For Ransomware, Speed Matters
Someone interested in putting together a ransomware campaign has to consider several factors. The LockBit group touts its speed over competing families to attract potential buyers for its ransowmare-as-a-service.
❌ Old Hacks Die Hard: Ransomware, Social Engineering Top Verizon DBIR Threats – Again ❌
📖 Read
via "Threat Post".
Deja-Vu data from this year's DBIR report feels like we are stuck in the movie 'Groundhog Day.'📖 Read
via "Threat Post".
Threat Post
Old Hacks Die Hard: Ransomware, Social Engineering Top Verizon DBIR Threats – Again
Verizon’s annual report for 2022 confirms trends that have been years in the making.
‼ CVE-2021-42886 ‼
📖 Read
via "National Vulnerability Database".
TOTOLINK EX1200T V4.1.2cu.5215 contains an information disclosure vulnerability where an attacker can get the apmib configuration file without authorization, and usernames and passwords can be found in the decoded file.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-42887 ‼
📖 Read
via "National Vulnerability Database".
In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can bypass login by sending a specific request through formLoginAuth.htm.📖 Read
via "National Vulnerability Database".
🕴 Why Network Object Management Is Critical for Managing Multicloud Network Security 🕴
📖 Read
via "Dark Reading".
If you want your IT and security administrators to get buried in trivial workloads and productivity bottlenecks, having poor network object management is a great way to accomplish that.📖 Read
via "Dark Reading".
Dark Reading
Why Network Object Management Is Critical for Managing Multicloud Network Security
If you want your IT and security administrators to get buried in trivial workloads and productivity bottlenecks, having poor network object management is a great way to accomplish that.
🔏 Friday Five 6/3 🔏
📖 Read
via "".
In this week's Friday Five, read up on how Russian ransomware gangs are wreaking havoc, how software vulnerabilities may put election integrity at risk, and why you should be careful when donating to Ukraine.
📖 Read
via "".
Digital Guardian
Friday Five 6/3
In this week's Friday Five, read up on how Russian ransomware gangs are wreaking havoc, how software vulnerabilities may put election integrity at risk, and why you should be careful when donating to Ukraine.
‼ CVE-2021-42888 ‼
📖 Read
via "National Vulnerability Database".
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setLanguageCfg of the file global.so which can control langType to attack.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-42889 ‼
📖 Read
via "National Vulnerability Database".
In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information (wifikey, wifiname, etc.) without authorization.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-42890 ‼
📖 Read
via "National Vulnerability Database".
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function NTPSyncWithHost of the file system.so which can control hostTime to attack.📖 Read
via "National Vulnerability Database".
⚠ Atlassian announces 0-day hole in Confluence Server – update soon! ⚠
📖 Read
via "Naked Security".
Zero-day announced - here's what you need to know📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
🕴 Iconium Software Releases DataLenz v1.3 for IBM zSystems 🕴
📖 Read
via "Dark Reading".
DataLenz delivers real-time, machine learning-based breach detection with user behavior modeling for IBM zSystems.📖 Read
via "Dark Reading".
Dark Reading
Iconium Software Releases DataLenz v1.3 for IBM zSystems
DataLenz delivers real-time, machine learning-based breach detection with user behavior modeling for IBM zSystems.
🕴 Actively Exploited Atlassian Zero-Day Bug Allows Full System Takeover 🕴
📖 Read
via "Dark Reading".
An unpatched remote code execution (RCE) vulnerability in all versions of the popular Confluence collaboration platform can be abused in credential harvesting, cyber espionage, and network backdoor attacks.📖 Read
via "Dark Reading".
Dark Reading
Actively Exploited Atlassian Zero-Day Bug Allows Full System Takeover
A remote code execution (RCE) vulnerability in all versions of the popular Confluence collaboration platform can be abused in credential harvesting, cyber espionage, and network backdoor attacks.
🕴 Microsoft Disables Iran-Linked Lebanese Hacking Group Polonium 🕴
📖 Read
via "Dark Reading".
The attack on Israeli organizations is the latest in a long line of attempts to compromise supply chains, as the APT looks to leverage that access to target a multitude of potential victims.📖 Read
via "Dark Reading".
Dark Reading
Microsoft Disables Iran-Linked Lebanese Hacking Group Polonium
The attack on Israeli organizations is the latest in a long line of attempts to compromise supply chains, as the APT looks to leverage that access to target a multitude of potential victims.
🕴 YourCyanide Ransomware Propagates With PasteBin, Discord, Microsoft Links 🕴
📖 Read
via "Dark Reading".
The latest iteration of CMD-based ransomware is sophisticated and tricky to detect – and integrates token theft and worming capabilities into its feature set.📖 Read
via "Dark Reading".
Dark Reading
YourCyanide Ransomware Propagates With PasteBin, Discord, Microsoft Links
The latest iteration of CMD-based ransomware is sophisticated and tricky to detect – and integrates token theft and worming capabilities into its feature set.
‼ CVE-2021-42891 ‼
📖 Read
via "National Vulnerability Database".
In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information (wifikey, etc.) without authorization.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-42892 ‼
📖 Read
via "National Vulnerability Database".
In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can start telnet without authorization because the default username and password exists in the firmware.📖 Read
via "National Vulnerability Database".
♟️ What Counts as “Good Faith Security Research?” ♟️
📖 Read
via "Krebs on Security".
The U.S. Department of Justice (DOJ) recently revised its policy on charging violations of the Computer Fraud and Abuse Act (CFAA), a 1986 law that remains the primary statute by which federal prosecutors pursue cybercrime cases. The new guidelines state that prosecutors should avoid charging security researchers who operate in “good faith” when finding and reporting vulnerabilities. But legal experts continue to advise researchers to proceed with caution, noting the new guidelines can’t be used as a defense in court, nor are they any kind of shield against civil prosecution.📖 Read
via "Krebs on Security".
Krebs on Security
What Counts as “Good Faith Security Research?”
The U.S. Department of Justice (DOJ) recently revised its policy on charging violations of the Computer Fraud and Abuse Act (CFAA), a 1986 law that remains the primary statute by which federal prosecutors pursue cybercrime cases. The new guidelines state…
‼ CVE-2021-42893 ‼
📖 Read
via "National Vulnerability Database".
In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information (wifikey, etc.) without authorization through getSysStatusCfg.📖 Read
via "National Vulnerability Database".