Hacking Articles Tips Tricks Videos Tutorials

Black Hat Ethical Hacking
Google pushes emergency Chrome update to fix 8th zero-day this year

Google pushes emergency Chrome update to fix 8th zero-day this yearPost Views: 10 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes Google has released an emergency security update for the desktop version of the Chrome web browser, addressing the eighth zero-day vulnerability exploited in attacks this year.The high-severity flaw is tracked as CVE-2022-4135 and is a heap buffer overflow in GPU, discovered by Clement Lecigne of Google’s Threat Analysis Group on November 22, 2022.

“Google is aware that an exploit for CVE-2022-4135 exists in the wild,” reads the update notice.

As users need time to apply the security update on their Chrome installations, Google has withheld details about the vulnerability to prevent expanding its malicious exploitation.
Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed. – Google
In general, heap buffer overflow is a memory vulnerability resulting in data being written to forbidden (usually adjacent) locations without check.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course
Attackers may use heap buffer overflow to overwrite an application’s memory to manipulate its execution path, resulting in unrestricted information access or arbitrary code execution.

Chrome users are recommended to upgrade to version 107.0.5304.121/122 for Windows and 107.0.5304.122 for Mac and Linux, which addresses CVE-2022-4135.

To update Chrome, head to Settings → About Chrome → Wait for the download of the latest version to finish → Restart the program.
https://www.bleepstatic.com/images/news/u/1220909/Software/Update.png
Chrome’s eighth zero-day fix in 2022Chrome version 107.0.5304.121/122 fixes the eighth actively exploited zero-day vulnerability this year, indicating the high interest of attackers against the widely used browser.

The previous seven zero-day fixes are:

* CVE-2022-3723 – October 28th
* CVE-2022-3075 – September 2nd
* CVE-2022-2856 – August 17th
* CVE-2022-2294 – July 4th
* CVE-2022-1364 – April 14th
* CVE-2022-1096 – March 25th
* CVE-2022-0609 – February 14th

These flaws are typically leveraged by sophisticated hackers who use them in highly targeted attacks.

Nevertheless, all Chrome users are strongly advised to update their web browsers as soon as possible to block potential exploitation attempts.
Trending: Windows Kerberos authentication breaks after November updates
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/11/Images-for-the-News-posts-8-2-300x150.png Fake MSI Afterburner targets Windows gamers with miners, info-stealersNovember 24, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/11/Images-for-the-News-posts-7-1-300x[...]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking

Google pushes emergency Chrome update to fix 8th zero-day this year | Black Hat Ethical Hacking

Google has released an emergency security update for the desktop version of the Chrome web browser, addressing the eighth zero-day vulnerability exploited in attacks this year.

5 viewsedited 09:58

Hacking Articles Tips Tricks Videos Tutorials

Black Hat Ethical Hacking Google pushes emergency Chrome update to fix 8th zero-day this year Google pushes emergency Chrome update to fix 8th zero-day this yearPost Views: 10 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Patreon.png…

150.png Google Chrome extension used to steal cryptocurrency, passwordsNovember 23, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/11/Images-for-the-News-posts-6-2-300x150.png Attackers bypass Coinbase and MetaMask 2FA via TeamViewer, fake support chatNovember 22, 2022
Reading Time: 5 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/11/Images-for-the-News-posts-5-1-300x150.png AXLocker – a new ransomware that encrypts yours files, and then steals your Discord accountNovember 21, 2022
Reading Time: 4 minutes
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post Google pushes emergency Chrome update to fix 8th zero-day this year first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

7 viewsedited 09:58

Hacking Articles Tips Tricks Videos Tutorials

SharpSCCM - A C# Utility For Interacting With SCCM
http://www.kitploit.com/2022/11/sharpsccm-c-utility-for-interacting.html

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

SharpSCCM - A C# Utility For Interacting With SCCM

8 viewsedited 11:51

Hacking Articles Tips Tricks Videos Tutorials

8 views11:51

Hacking Articles Tips Tricks Videos Tutorials

SharpSCCM is a post-exploitation (https://www.kitploit.com/search/label/Post-Exploitation) tool designed to leverage Microsoft Endpoint Configuration Manager (a.k.a. ConfigMgr, formerly SCCM) for lateral movement (https://www.kitploit.com/search/label/Lateral%20Movement) and credential gathering without requiring access to the SCCM administration console GUI.SharpSCCM was initially created to execute user hunting and lateral movement functions ported from PowerSCCM (by @harmj0y, @jaredcatkinson, @enigma0x3, and @mattifestation) and now contains additional functionality to gather credentials and abuse newly discovered attack primitives for coercing NTLM authentication (https://www.kitploit.com/search/label/Authentication) in SCCM sites where automatic site-wide client push installation is enabled.Please visit the wiki (https://github.com/Mayyhem/SharpSCCM/wiki) for documentation detailing how to build and use SharpSCCM.
AuthorChris Thompson is the primary author of this project. Duane Michael (@subat0mik) and Evan McBroom (@mcbroom_evan) are active contributors as well. Please feel free to reach out on Twitter (@_Mayyhem) with questions, ideas for improvements, etc., and on GitHub with issues and pull requests.WarningThis tool was written as a proof of concept (https://www.kitploit.com/search/label/Proof%20Of%20Concept) in a lab environment (https://www.kitploit.com/search/label/Lab%20Environment) and has not been thoroughly tested. There are lots of unfinished bits, terrible error handling, and functions I may never complete. Please be careful and use at your own risk.

Download SharpSCCM (https://github.com/Mayyhem/SharpSCCM)

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Kitploit – Maintenance in Progress

Kitploit is temporarily under maintenance. We’ll be back shortly with improvements.

8 viewsedited 11:51

Hacking Articles Tips Tricks Videos Tutorials

7 views12:47

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
What Is A Hacker?

https://cdn-images-1.medium.com/max/610/1*APVFEOY7LUkS9sq3g-BiWQ.jpeg
Hey guys, myself Somya Gupta aka Devils_paradise and I’m gonna tell you about WHAT IS A HACKER. So let’s begin.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

What Is A Hacker?

Hey guys, myself Somya Gupta aka Devils_paradise and I’m gonna tell you about WHAT IS A HACKER. So let’s begin.