Confluence exploits used to drop ransomware on vulnerable servers
Credit to Author: Andrew Brandt| Date: Thu, 16 Jun 2022 11:00:03 +0000
Automated attacks are now widely exploiting the Atlassian vulnerability
Read morethreat research
Sophos uncovers how APT groups carried out highly targeted attack
Credit to Author: Andrew Brandt| Date: Wed, 15 Jun 2022 21:16:52 +0000
Two groups with common task targeted network security devices in two-stage attacks, dropping remote access tools.
Read moreTelerik UI exploitation leads to cryptominer, Cobalt Strike infections
Credit to Author: Matt Wixey| Date: Wed, 15 Jun 2022 11:00:05 +0000
Attacker targets bugs in a popular web application graphical interface development tool
Read moreLighter Patch Tuesday for June remains rich in LDAP vulns
Credit to Author: Angela Gunn| Date: Tue, 14 Jun 2022 18:24:12 +0000
The second-lightest set of updates so far in 2022 goes heavy on RCEs, brings along four Intel patches for company
Read more‘Follina’ Word doc taps previously unknown Microsoft Office vulnerability
Credit to Author: Andrew Brandt| Date: Tue, 31 May 2022 00:41:42 +0000
MSDT.exe misuse in May makes for Memorial Day Monday mayhem
Read moreMove fast, unbreak things: About the Sophos Active Adversary Playbook 2022
Credit to Author: Angela Gunn| Date: Tue, 07 Jun 2022 11:16:50 +0000
Our latest report shows that the most pleasant way to learn from Rapid Response mayhem is to read about how it worked out for someone else
Read moreAnalyzing CVE-2022-0778: When Square Root Results in a Denial of Service
Credit to Author: hardikshah| Date: Wed, 01 Jun 2022 14:31:06 +0000
How could a humble SSL certificate entirely gridlock a system? Walk with us through the math
Read moreMalicious Word doc taps previously unknown Microsoft Office vulnerability
Credit to Author: Andrew Brandt| Date: Tue, 31 May 2022 00:41:42 +0000
MSDT.exe misuse in May makes for Memorial Day Monday mayhem
Read moreLiquidity mining scams add another layer to cryptocurrency crime
Credit to Author: gallagherseanm| Date: Tue, 17 May 2022 11:52:33 +0000
Organized rings use fake apps, malicious smart contracts, and lure of big returns to swindle victims out of their savings.
Read moreHyper-V and Active Directory Front and Center for May Patch Tuesday
Credit to Author: Christopher Budd| Date: Tue, 10 May 2022 17:47:43 +0000
Organizations should look at last month’s and this month’s bulletins and put their Hyper-V and Active Directory servers and infrastructure at the top of the priority list.
Read more