Exploits and vulnerabilities – Page 20 – PossibleThreat Articles

MalwareBytes Security

“Multiple adversaries” exploiting Confluence vulnerability, warns Microsoft

June 14, 2022 0 Comments APT, atlassian, confluence, Exploits and vulnerabilities, nation-state, Ransomware

Credit to Author: Christopher Boyd| Date: Tue, 14 Jun 2022 12:43:08 +0000

Microsoft has warned of APT groups and ransomware authors exploiting the now patched Confluence vulnerability. We take a look at the dangers.

The post “Multiple adversaries” exploiting Confluence vulnerability, warns Microsoft appeared first on Malwarebytes Labs.

MalwareBytes Security

Don’t panic! “Unpatchable” Mac vulnerability discovered

June 14, 2022 0 Comments Exploits and vulnerabilities, m1, mit csail, pac, pacman, soc, speculative execution

Credit to Author: Pieter Arntz| Date: Tue, 14 Jun 2022 09:53:27 +0000

Researchers at MIT have published details about an attack that uses a flaw in the M1 security feature pointer authentication codes.

The post Don’t panic! “Unpatchable” Mac vulnerability discovered appeared first on Malwarebytes Labs.

MalwareBytes Security

Update Chrome now: Four high risk vulnerabilities found

June 13, 2022 0 Comments chrome, CVE, Exploit, Exploits and vulnerabilities, Google, update, vulnerability

Credit to Author: Christopher Boyd| Date: Mon, 13 Jun 2022 14:20:34 +0000

We take a look at the latest batch of vulnerabilities in Chrome requiring an update.

The post Update Chrome now: Four high risk vulnerabilities found appeared first on Malwarebytes Labs.

MalwareBytes Security

Serious vulnerabilities found in ITarian software, patches available for SaaS products

June 13, 2022 0 Comments cve-2022-25151, cve-2022-25152, cve-2022-25153, divd, Exploits and vulnerabilities, itarian, msp, saas, XSS

Credit to Author: Pieter Arntz| Date: Mon, 13 Jun 2022 12:25:19 +0000

Researchers at DIVD found vulnerabilities in ITarian products and worked with the vendor to develop patches. These patches are now available.

The post Serious vulnerabilities found in ITarian software, patches available for SaaS products appeared first on Malwarebytes Labs.

MalwareBytes Security

Update now! Patch against vulnerabilities in Meeting Owl Pro and Whiteboard Owl devices

June 9, 2022 0 Comments ble, Exploits and vulnerabilities, hardcoded, meeting owl, modzero, owl labs, passcode, whiteboard owl

Credit to Author: Pieter Arntz| Date: Thu, 09 Jun 2022 12:41:02 +0000

After dragging their feet for months Owl Labs has released a patch for vulnerabilities that were publicly disclosed a week ago. The company denies the seriousness of the vulnerabilities.

The post Update now! Patch against vulnerabilities in Meeting Owl Pro and Whiteboard Owl devices appeared first on Malwarebytes Labs.

MalwareBytes Security

[updated]Unpatched Atlassian Confluence vulnerability is actively exploited

June 3, 2022 0 Comments atlassian, behinder, China Chopper, cobalt strike, confluence, cve-2022-26134, Exploits and vulnerabilities, meterpreter, web shell

Credit to Author: Pieter Arntz| Date: Fri, 03 Jun 2022 14:41:58 +0000

A vulnerability in Atlassian Confluence was found by performing an incident response investigation on a compromised server. The vulnerability is not yet patched.

The post [updated]Unpatched Atlassian Confluence vulnerability is actively exploited appeared first on Malwarebytes Labs.

MalwareBytes Security

Unpatched Atlassian Confluence vulnerability is actively exploited

June 3, 2022 0 Comments atlassian, behinder, China Chopper, cobalt strike, confluence, cve-2022-26134, Exploits and vulnerabilities, meterpreter, web shell

Credit to Author: Pieter Arntz| Date: Fri, 03 Jun 2022 14:41:58 +0000

A vulnerability in Atlassian Confluence was found by performing an incident response investigation on a compromised server. The vulnerability is not yet patched.

The post Unpatched Atlassian Confluence vulnerability is actively exploited appeared first on Malwarebytes Labs.

MalwareBytes Security

FAQ: Mitigating Microsoft Office’s ‘Follina’ zero-day

June 1, 2022 0 Comments cve-2022-30190, Exploits and vulnerabilities, follina, zero day

Credit to Author: Threat Intelligence Team| Date: Wed, 01 Jun 2022 16:36:44 +0000

FAQ for the new Follina zero-day vulnerability. What you can do to protect your computers right now.

The post FAQ: Mitigating Microsoft Office’s ‘Follina’ zero-day appeared first on Malwarebytes Labs.

MalwareBytes Security

[Updated]Microsoft Office zero-day “Follina”—it’s not a bug, it’s a feature! (It’s a bug)

May 31, 2022 0 Comments cve-2022-30190, Exploits and vulnerabilities, follina, ms-msdt, preview pane, protected view, RTF

Credit to Author: Pieter Arntz| Date: Mon, 30 May 2022 18:09:26 +0000

Researchers around the world are working to understand a new remote code vulnerability in Microsoft Office dubbed Follina.

The post [Updated]Microsoft Office zero-day “Follina”—it’s not a bug, it’s a feature! (It’s a bug) appeared first on Malwarebytes Labs.

MalwareBytes Security

Microsoft Office zero-day “Follina”—it’s not a bug, it’s a feature! (It’s a bug)

May 30, 2022 0 Comments Exploits and vulnerabilities, follina, ms-msdt, preview pane, protected view, RTF

Credit to Author: Pieter Arntz| Date: Mon, 30 May 2022 18:09:26 +0000

Researchers around the world are working to understand a new remote code vulnerability in Microsoft Office dubbed Follina.

The post Microsoft Office zero-day “Follina”—it’s not a bug, it’s a feature! (It’s a bug) appeared first on Malwarebytes Labs.