VMware patches critical vulnerabilities in Aria Operations for Networks

Categories: Exploits and vulnerabilities

Categories: News

Tags: cve-2023-20887

Tags: cve-2023-20888

Tags: cve-2023-20889

Tags: vmware

Tags: Aria Operations for Networks

Tags: RCE

Tags: information disclosure

Tags: deserialization

Tags: command injection

VMware has released security updates to fix a trio of flaws in Aria Operations for Networks that could result in information disclosure and remote code execution

(Read more…)

The post VMware patches critical vulnerabilities in Aria Operations for Networks appeared first on Malwarebytes Labs.

Read more

Detecting and mitigating a multi-stage AiTM phishing and BEC campaign

Credit to Author: Microsoft Threat Intelligence| Date: Thu, 08 Jun 2023 16:00:00 +0000

Microsoft Defender Experts observed a multi-stage adversary-in-the-middle (AiTM) and business email compromise (BEC) attack targeting banking and financial services organizations over two days. This attack originated from a compromised trusted vendor, involved AiTM and BEC attacks across multiple supplier/partner organizations for financial fraud, and did not use a reverse proxy like typical AiTM attacks.

The post Detecting and mitigating a multi-stage AiTM phishing and BEC campaign appeared first on Microsoft Security Blog.

Read more

Analyzing the FUD Malware Obfuscation Engine BatCloak

Credit to Author: Peter Girnus| Date: Fri, 09 Jun 2023 00:00:00 +0000

We look into BatCloak engine, its modular integration into modern malware, proliferation mechanisms, and interoperability implications as malicious actors take advantage of its fully undetectable (FUD) capabilities.

Read more

Warning: Victims’ faces placed on explicit images in sextortion scam

Categories: Personal

Tags: sextortion

Tags: deepfake

Tags: FBI

Tags: blackmail

Tags: extortion

Tags: fake

Tags: fakes

Tags: synthetic

We take a look at some new developments in sextortion cases via a warning issued by the FBI.

(Read more…)

The post Warning: Victims’ faces placed on explicit images in sextortion scam appeared first on Malwarebytes Labs.

Read more

Update Chrome now! Google patches actively exploited zero-day

Categories: Exploits and vulnerabilities

Categories: News

Tags: Google

Tags: Chrome

Tags: V8

Tags: heap corruption

Tags: type confusion

Tags: CVE-2023-3079

Google has released a Chrome update for a zero-day for which an exploit is actively being used in the wild.

(Read more…)

The post Update Chrome now! Google patches actively exploited zero-day appeared first on Malwarebytes Labs.

Read more

Barracuda Urges Replacing — Not Patching — Its Email Security Gateways

Credit to Author: BrianKrebs| Date: Thu, 08 Jun 2023 20:17:06 +0000

It’s not often that a zero-day vulnerability causes a network security vendor to urge customers to physically remove and decommission an entire line of affected hardware — as opposed to just applying software updates. But experts say that is exactly what transpired this week with Barracuda Networks, as the company struggled to combat a sprawling malware threat which appears to have undermined its email security appliances in such a fundamental way that they can no longer be safely updated with software fixes.

Read more