May 2022 – Page 2 – PossibleThreat Articles

Mysterious “Follina” zero-day hole in Office – here’s what to do!

May 31, 2022 0 Comments cve-2022-30190, follina, Microsoft, ms-msdt, msdt, office, security threats, vulnerability, zero day

Credit to Author: Paul Ducklin| Date: Mon, 30 May 2022 23:01:55 +0000

News has emerged of a “feature” in Office that has been abused as a zero-day bug to run evil code. Turning off macros doesn’t help!

MalwareBytes Security

Is quantum teleportation the future of secure communications?

May 31, 2022 0 Comments entangled, information, no-cloning theorem, Quantum Computing, qubit, Reports, teleportation

Credit to Author: Pieter Arntz| Date: Tue, 31 May 2022 12:27:32 +0000

Dutch scientists have demonstrated the next step towards a quantum-based Internet that will make communications immediate and private

The post Is quantum teleportation the future of secure communications? appeared first on Malwarebytes Labs.

Security TrendMicro

Patch Your WSO2: CVE-2022-29464 Exploited to Install Linux-Compatible Cobalt Strike Beacons, Other Malware

May 31, 2022 0 Comments trend micro research : articles, news, reports, trend micro research : cyber threats, trend micro research : endpoints, trend micro research : exploits & vulnerabilities, trend micro research : malware

Credit to Author: Hitomi Kimura| Date: Tue, 31 May 2022 00:00:00 +0000

Users of WSO2 products are advised to update their respective products and platforms or to apply the temporary mitigation steps immediately.

ComputerWorld Independent

Google’s open-source security move may be pointless. In a perfect world, it should be.

May 31, 2022 0 Comments Security, Software Development

Credit to Author: Evan Schuman| Date: Tue, 31 May 2022 02:30:00 -0700

One of the bigger threats to enterprise cybersecurity involves re-purposed third-party code and open-source code, so you’d
think Google’s Assured Open Source Software service would be a big help.

Think again.

Here’s Google’s pitch: “Assured OSS enables enterprise and public sector users of open source software to easily incorporate the same OSS packages that Google uses into their own developer workflows. Packages curated by the Assured OSS service are regularly scanned, analyzed, and fuzz-tested for vulnerabilities; have corresponding enriched metadata incorporating Container/Artifact Analysis data; are built with Cloud Build including evidence of verifiable SLSA-compliance; are verifiably signed by Google; and are distributed from an Artifact Registry secured and protected by Google.”

To read this article in full, please click here

MalwareBytes Security

[Updated]Microsoft Office zero-day “Follina”—it’s not a bug, it’s a feature! (It’s a bug)

May 31, 2022 0 Comments cve-2022-30190, Exploits and vulnerabilities, follina, ms-msdt, preview pane, protected view, RTF

Credit to Author: Pieter Arntz| Date: Mon, 30 May 2022 18:09:26 +0000

Researchers around the world are working to understand a new remote code vulnerability in Microsoft Office dubbed Follina.

The post [Updated]Microsoft Office zero-day “Follina”—it’s not a bug, it’s a feature! (It’s a bug) appeared first on Malwarebytes Labs.

Security TrendMicro

Managing Cyber Risk: The People Element

May 31, 2022 0 Comments trend micro ciso : article, trend micro ciso : cloud, trend micro ciso : detection and response, trend micro ciso : expert perspective, trend micro ciso : risk management, trend micro ciso : skills gap

Explore the latest findings from Trend Micro’s Cyber Risk Index (2H’2021) and how to better manage people to minimize cyber risk across the digital attack surface.