Exploit – Page 8 – PossibleThreat Articles

S3 Ep71: VMware escapes, PHP holes, WP plugin woes, and scary scams [Podcast]

February 24, 2022 0 Comments backup, Exploit, Hacking, Naked Security Podcast, phishing, Podcast, Scam, sextortion, vmware, vulnerability, Wordpress

Credit to Author: Paul Ducklin| Date: Thu, 24 Feb 2022 16:51:41 +0000

Latest episode – listen now!

Security Sophos

Adobe fixes zero-day exploit in e-commerce code: update now!

February 14, 2022 0 Comments Adobe, cve-2022-24086, Exploit, vulnerability, zero day

Credit to Author: Paul Ducklin| Date: Mon, 14 Feb 2022 22:38:58 +0000

There’s a remote code execution hole in Adobe e-commerce products – and cybercrooks are already exploiting it.

MalwareBytes Security

Apply those updates now: CVE bypass offers up admin privileges for Windows 10

February 2, 2022 0 Comments CVE, cve-2022-21882, Exploit, hack, Malwarebytes news, Microsoft, Patch, phish, update, Windows 10

Credit to Author: Malwarebytes Labs| Date: Tue, 01 Feb 2022 11:07:29 +0000

A CVE bypass offers up the possibility of admin privileges on Windows 10 machines. Find out what’s happened, and how you can avoid it.

Categories: Malwarebytes news

Tags: CVE CVE-2022-21882 exploit hack microsoft patch phish update windows 10

Security Sophos

Log4Shell: How the Attackers’ Faces Have Changed Over Time

February 2, 2022 0 Comments Exploit, featured, log4j, log4shell, security operations, threat research, vulnerability

Credit to Author: Chester Wisniewski| Date: Wed, 02 Feb 2022 09:34:16 +0000

Following an article on January 24, 2022 of Log4Shell scanning and attack detections since the bug was reported, Sophos addresses reader questions about who’s behind it all

Security Sophos

Log4Shell: No Mass Abuse, But No Respite, What Happened?

February 2, 2022 0 Comments Exploit, featured, log4j, log4shell, mtr, security operations, threat research, vulnerability

Credit to Author: Chester Wisniewski| Date: Mon, 24 Jan 2022 17:52:07 +0000

Sophos reviews the scanning and attack detections for Log4Shell to see what’s really going on

Security Sophos

Apple fixes Safari data leak (and patches a zero-day!) – update now

February 2, 2022 0 Comments Apple, Exploit, iOS, iPhone, MacOS, OS X, Patch, Privacy, rce, vulnerability

Credit to Author: Paul Ducklin| Date: Thu, 27 Jan 2022 21:09:53 +0000

That infamous “supercookie” bug in Safari has now been fixed. Oh, and there was a zero-day kernel hole as well.

Security Sophos

Patch now! Microsoft releases fixes for the serious SMB bug CVE-2020-0796

March 17, 2020 0 Comments 2020-03, cve-2020-0796, Exploit, Patch Tuesday, smb, smbv3, SophosLabs Uncut, updates, Windows

Credit to Author: alexandrebecholey| Date: Thu, 12 Mar 2020 15:34:59 +0000

Microsoft issues its latest set of cumulative updates for Windows and other Microsoft products this week, but the March, 2020 Patch Tuesday is notable not only because of the sheer volume of fixes, but because it will prevent one very serious bug in its Server Message Block (SMB) technology (download the patch right now) that […]<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/d5Hn2Ie7ee4″ height=”1″ width=”1″ alt=””/>

MalwareBytes Security

APT36 jumps on the coronavirus bandwagon, delivers Crimson RAT

March 17, 2020 0 Comments APT, apt36, coronavirus, coronavirus malware, covid-19, credential stealer, crimson rat, Exploit, exploits, info-stealer, macro, malicious macro, malware, nation-state attack, rat, remote administration tool, Social engineering, spear phishing, spear phishing attack, Threat analysis, transparent tribe

Credit to Author: Threat Intelligence Team| Date: Mon, 16 Mar 2020 15:00:00 +0000

We look at a spear phishing attack from APT36, an Advanced Persistent Threat group posing as the government of India and offering guidance on coronavirus. Instead, users are infected with a Crimson RAT that steals data.

Categories:

Threat analysis

Tags: APT APT36 coronavirus coronavirus malware covid-19 credential stealer crimson rat exploit exploits info-stealer macro malicious macro malware nation-state attack rat remote administration tool Social Engineering spear phishing spear phishing attack transparent tribe

MalwareBytes Security

A week in security (March 2 – 8)

March 17, 2020 0 Comments A week in security, awis, cathay pacific, coronavirus, Exploit, GDPR, malware, Microsoft, Mobile, phishing, round up, Security, tesco, week in security, zynga

Credit to Author: Malwarebytes Labs| Date: Mon, 09 Mar 2020 20:07:46 +0000

A roundup of the previous week’s security headlines, including the introduction of a new series on child identity theft, an examination of law enforcement’s cybersecurity woes, a progress check on our stalkerware initiative, and more coronavirus scammers on the prowl.

Categories:

A week in security

Tags: a week in security awis cathay pacific coronavirus exploit gdpr malware microsoft Mobile phishing round up security TESCO week in security zynga

(Read more…)

The post A week in security (March 2 – 8) appeared first on Malwarebytes Labs.

Security Sophos

Mystery zero-day in Chrome – update now!

February 25, 2020 0 Comments chrome, cve-2020-6418:, Exploit, Google, Google Chrome, Patch, vulnerability, zero day

Credit to Author: Paul Ducklin| Date: Tue, 25 Feb 2020 20:55:03 +0000

When a bug’s a zero-day that means it’s being actively exploited. So don’t delay, just patch today!<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/xrcwT2eXQRY” height=”1″ width=”1″ alt=””/>