exploits – PossibleThreat Articles

We look at a spear phishing attack from APT36, an Advanced Persistent Threat group posing as the government of India and offering guidance on coronavirus. Instead, users are infected with a Crimson RAT that steals data.

Categories:

Threat analysis

Tags: APT APT36 coronavirus coronavirus malware covid-19 credential stealer crimson rat exploit exploits info-stealer macro malicious macro malware nation-state attack rat remote administration tool Social Engineering spear phishing spear phishing attack transparent tribe

Security Sophos

January 2020 Patch Tuesday delivers fixes for 50 bugs

January 14, 2020 0 Comments chromium, Edge, elevation of privilege, exploits, Microsoft, Patch Tuesday, RDP, SophosLabs Uncut, updates, vulnerability, Windows

Credit to Author: SophosLabs Offensive Security| Date: Tue, 14 Jan 2020 18:15:18 +0000

This month’s big security news from Microsoft is the end of support for Windows 7, and a patch of a cryptographic library<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/wiyw9sHJyLE” height=”1″ width=”1″ alt=””/>

MalwareBytes Security

A decade in cybersecurity fails: the top breaches, threats, and ‘whoopsies’ of the 2010s

December 19, 2019 0 Comments ashley madison, ashley madison hack, Awareness, badrabbit, Cambridge Analytica, cryptolocker, cryptolocker ransomware, Data privacy, edward snowden, emotet, exploits, facebook, Hacktivism, mat honan, notpetya, NSA, nsa spying, nsa surveillance, nsa tools, playstation breach, playstation hack, Ransomware, ryuk, Ryuk ransomware, security fails, shadow brokers, social media, sony, sony pictures hack, surveillance, target breach, target hack, trickbot, triple threat, WannaCry

Credit to Author: Malwarebytes Labs| Date: Thu, 19 Dec 2019 18:03:33 +0000

As the 2010s come to a close, we take a snarky walk down memory lane, listing the craziest, most impactful, or simply just awful cybersecurity fails of the decade.

Categories:

Awareness

Tags: ashley madison ashley madison hack BadRabbit cambridge analytica cryptolocker cryptolocker ransomware Data privacy Edward Snowden emotet exploits facebook hacktivism mat honan NotPetya NSA nsa spying nsa surveillance NSA tools playstation breach playstation hack ransomware ryuk Ryuk ransomware security fails shadow brokers social media sony sony pictures hack surveillance target breach target hack trickbot triple threat WannaCry

Security Sophos

Microsoft urges us to patch after partially effective BlueKeep attack

November 11, 2019 0 Comments BlueKeep, cve-2019-0708, exploits, Microsoft, security threats, vulnerability, Windows

Credit to Author: Danny Bradbury| Date: Mon, 11 Nov 2019 15:58:08 +0000

Microsoft has urged people to patch their Windows systems following the appearance of mass BlueKeep exploits just over a week ago.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/t3L4UyESmBg” height=”1″ width=”1″ alt=””/>

MalwareBytes Security

Pulse VPN patched their vulnerability, but businesses are trailing behind

October 18, 2019 0 Comments Business, cybercriminals, Exploit, exploit kits, exploits, Patch, Patching, pulse, vpn, Vulnerabilities, vulnerability

Credit to Author: Pieter Arntz| Date: Fri, 18 Oct 2019 16:36:36 +0000

After a vulnerability in a popular business VPN solutions was discussed at length and an easy to use exploit is availbale, organizations still fail to apply the patch. What’s up?

Categories:

Business

Tags: cybercriminals exploit exploit kits exploits patch patching pulse vpn vulnerabilities vulnerability

← Previous