proxyshell – PossibleThreat Articles

2022’s most routinely exploited vulnerabilities—history repeats

August 7, 2023 0 Comments atlassian, cve-2021-13379, cve-2021-26084, cve-2021-31207, cve-2021-34473, cve-2021-34523, cve-2021-40539, cve-2021-44228, cve-2022-1388, cve-2022-22954, cve-2022-22960, cve-2022-26134, cve-2022-30190, Exploits and vulnerabilities, follina, log4shell, news, proxyshell, zoho manageengine

Categories: Exploits and vulnerabilities

Categories: News

Tags: Zoho ManageEngine

Tags: CVE-2021-40539

Tags: Log4Shell

Tags: CVE-2021-44228

Tags: CVE-2021-13379

Tags: ProxyShell

Tags: CVE-2021-34473

Tags: CVE-2021-31207

Tags: CVE-2021-34523

Tags: CVE-2021-26084

Tags: Atlassian

Tags: CVE-2022-22954

Tags: CVE-2022-22960

Tags: CVE-2022-26134

Tags: CVE-2022-1388

Tags: CVE-2022-30190

Tags: Follina

What can the routinely exploited vulnerabilities of 2022 tell us, and what do we think will make it on to next year’s list?

MalwareBytes Security

[updated]Two new Exchange Server zero-days in the wild

October 4, 2022 0 Comments cve-2022-41040, cve-2022-41082, exchange, Exploits and vulnerabilities, news, proxyshell, rce, remote powershell, ssrf, web shell

Categories: Exploits and vulnerabilities

Categories: News

Tags: Exchange

Tags: ProxyShell

Tags: remote PowerShell

Tags: web shell

Tags: CVE-2022-41040

Tags: CVE-2022-41082

Tags: SSRF

Tags: RCE

Two ProxyShell-like vulnerabilities are being used to exploit Microsoft Exchange Servers

Security Sophos

Two Exchange Server vulns veer dangerously close to ProxyShell

October 3, 2022 0 Comments exchange server, featured, proxyshell, ssrf, threat research

Credit to Author: Angela Gunn| Date: Mon, 03 Oct 2022 22:03:02 +0000

A chained pair of vulnerabilities, plus PowerShell, affects the Microsoft messaging platform well in advance of Patch Tuesday; Sophos customers are protected

MalwareBytes Security

Two new Exchange Server zero-days in the wild

September 30, 2022 0 Comments cve-2022-41040, cve-2022-41082, exchange, Exploits and vulnerabilities, news, proxyshell, rce, remote powershell, ssrf, web shell

Categories: Exploits and vulnerabilities

Categories: News

Tags: Exchange

Tags: ProxyShell

Tags: remote PowerShell

Tags: web shell

Tags: CVE-2022-41040

Tags: CVE-2022-41082

Tags: SSRF

Tags: RCE

Two ProxyShell-like vulnerabilities are being used to exploit Microsoft Exchange Servers

(Read more…)

The post Two new Exchange Server zero-days in the wild appeared first on Malwarebytes Labs.

MalwareBytes Security

IIS extensions are on the rise as backdoors to servers

July 27, 2022 0 Comments backdoor, Cryptomining, Exploits and vulnerabilities, extensions, iis, modules, proxylogon, proxyshell, Reports, Server, wdigest

Credit to Author: Pieter Arntz| Date: Wed, 27 Jul 2022 13:58:06 +0000

The Microsoft 365 Defender Research Team has warned that attackers are increasingly leveraging Internet Information Services (IIS) extensions as covert backdoors into servers.

The post IIS extensions are on the rise as backdoors to servers appeared first on Malwarebytes Labs.

MalwareBytes Security

You only have nine months to ditch Exchange Server 2013

June 27, 2022 0 Comments 2013, eol, eos, exchange server, exploits, proxylogon, proxyoracle, proxyshell, proxytoken

Credit to Author: Pieter Arntz| Date: Mon, 27 Jun 2022 19:51:07 +0000

Microsoft posted a reminder that Exchange Server 2013 is destined to reach end of support very, very soon.

The post You only have nine months to ditch Exchange Server 2013 appeared first on Malwarebytes Labs.

Security Sophos

Active Adversary Playbook 2022 Insights: Web Shells

June 22, 2022 0 Comments active adversary playbook, cve-2021-31207, cve-2021-34473, cve-2021-34523, featured, proxylogon, proxyshell, threat research, web shells

Credit to Author: gallagherseanm| Date: Wed, 22 Jun 2022 11:00:07 +0000

Public proofs-of-concept of web shell exploits coincide with major spikes in attacks.

Security Sophos

The Active Adversary Playbook 2022

June 7, 2022 0 Comments active adversary, artifacts, attack tools, cobalt strike, Cryptomining, cyberattacks, cyberthreats, dwell time, Exploit, featured, initial access broker, malware delivery system, mitre, proxylogon, proxyshell, Ransomware, Ransomware as a Service, security operations, sophos rapid response, vulnerability

Credit to Author: Tilly Travers| Date: Tue, 07 Jun 2022 11:02:43 +0000

Cyberattacker behaviors, tactics and tools seen on the frontline of incident response during 2021

MalwareBytes Security

The top 5 most routinely exploited vulnerabilities of 2021

April 29, 2022 0 Comments cisa, confluence, cve-2021-26084, cve-2021-26857, cve-2021-26858, cve-2021-27065, cve-2021-31207, cve-2021-34473, cve-2021-34523, cve-2021-40539, cve-2021-44228, cve-26855, Exploits and vulnerabilities, log4shell, microsoft exchange server, ognl, proxylogon, proxyshell, zoho manageengine

Credit to Author: Pieter Arntz| Date: Fri, 29 Apr 2022 16:28:20 +0000

International cybersecurity authorities have published an overview of the most routinely exploited vulnerabilities of 2021.

The post The top 5 most routinely exploited vulnerabilities of 2021 appeared first on Malwarebytes Labs.

MalwareBytes Security

AvosLocker ransomware uses Microsoft Exchange Server vulnerabilities, says FBI

March 21, 2022 0 Comments avoslocker, cve-2021-26855, cve-2021-31207, cve-2021-34473, cve-2021-34523, exchange server, FBI, proxylogon, proxyshell, Ransomware

Credit to Author: Pieter Arntz| Date: Mon, 21 Mar 2022 21:09:12 +0000

The AvosLocker ransomware as a service affiliates have been found to target multiple critical infrastructure sectors, using Exchange Server vulnerabilities.

The post AvosLocker ransomware uses Microsoft Exchange Server vulnerabilities, says FBI appeared first on Malwarebytes Labs.

← Previous