Malicious Word doc taps previously unknown Microsoft Office vulnerability
Credit to Author: Andrew Brandt| Date: Tue, 31 May 2022 00:41:42 +0000
MSDT.exe misuse in May makes for Memorial Day Monday mayhem
Read moreSophosLabs Uncut
Liquidity mining scams add another layer to cryptocurrency crime
Credit to Author: gallagherseanm| Date: Tue, 17 May 2022 11:52:33 +0000
Organized rings use fake apps, malicious smart contracts, and lure of big returns to swindle victims out of their savings.
Read moreHyper-V and Active Directory Front and Center for May Patch Tuesday
Credit to Author: Christopher Budd| Date: Tue, 10 May 2022 17:47:43 +0000
Organizations should look at last month’s and this month’s bulletins and put their Hyper-V and Active Directory servers and infrastructure at the top of the priority list.
Read moreAttacking Emotet’s Control Flow Flattening
Credit to Author: Angela Gunn| Date: Wed, 04 May 2022 14:01:08 +0000
Sweeping aside one obfuscation technique in a notorious strain of malware
Read moreRPC Vulnerability Stands Out in a Field of 128 in April
Credit to Author: Christopher Budd| Date: Tue, 12 Apr 2022 17:45:37 +0000
This month’s Patch Tuesday is more about quantity than severity, with one flashback-inducing exception
Read moreRPC Vulnerability Stands Out in a Field of 129 in April
Credit to Author: Christopher Budd| Date: Tue, 12 Apr 2022 17:45:37 +0000
This month’s Patch Tuesday is more about quantity than severity, with one flashback-inducing exception
Read moreCryptoRom Bitcoin swindlers continue to target vulnerable iPhone and Android users
Credit to Author: Jagadeesh Chandraiah| Date: Wed, 16 Mar 2022 11:30:21 +0000
Abuse of iOS TestFlight and WebClips—along with social engineering and lookalike web pages—lead to double- and triple-dipping by criminals into victims’ pockets.
Read moreQakbot injects itself into the middle of your conversations
Credit to Author: Steeve Gaudreault| Date: Thu, 10 Mar 2022 11:00:56 +0000
The heavily distributed botnet delivers a wide variety of payloads – and scans your network for weaknesses
Read moreMicrosoft patches 71 vulnerabilities including RDP Client, Exchange Server, Intune
Credit to Author: Christopher Budd| Date: Tue, 08 Mar 2022 19:06:58 +0000
Just two Critical-class vulnerabilities, but Windows Update doesn’t handle every package this month
Read moreConti and Karma actors attack healthcare provider at same time through ProxyShell exploits
Credit to Author: gallagherseanm| Date: Mon, 28 Feb 2022 12:30:19 +0000
An unpatched Microsoft Exchange Server let both ransomware actors in; Karma just stole data, while Conti encrypted.
Read more