Complex Petya-Like Ransomware Outbreak Worse than WannaCry
Today’s global ransomware attack is spreading via EternalBlue and through local networks using PSEXEC and WMIC. Continue reading Complex Petya-Like Ransomware Outbreak Worse than WannaCry
Author Archives: Michael Mimoso
Major Hole Plugged in Secure File Transfer Tool
Biscom recently patched a stored cross-site scripting vulnerability in its secure file transfer product. Continue reading Major Hole Plugged in Secure File Transfer Tool
Major Hole Plugged in Secure File Transfer Tool
Biscom recently patched a stored cross-site scripting vulnerability in its secure file transfer product. Continue reading Major Hole Plugged in Secure File Transfer Tool
Another RCE Vulnerability Patched in Microsoft Malware Protection Engine
Google Project Zero’s Tavis Ormandy found another remote code execution vulnerability in the Microsoft Malware Protection Engine, the third since early May. Continue reading Another RCE Vulnerability Patched in Microsoft Malware Protection Engine
Few Victims Reporting Ransomware Attacks to FBI
The FBI’s Internet Crime Complaint Center (IC3) identified ransomware as one of 2016’s top threats, but a relatively small number of attacks were reported. Continue reading Few Victims Reporting Ransomware Attacks to FBI
Microsoft Says Fireball Threat ‘Overblown’
Check Point has toned down its initial estimates on the number of Fireball malware infections from 250 million machines and 20 percent of corporate networks to 40 million computers. Continue reading Microsoft Says Fireball Threat ‘Overblown’
GhostHook Attack Bypasses Windows 10 PatchGuard
Researchers at CyberArk have developed a bypass for Windows PatchGuard that leverages Intel’s Processor Trace (Intel PT) technology to execute code at the kernel. Continue reading GhostHook Attack Bypasses Windows 10 PatchGuard
OpenVPN Patches Critical Remote Code Execution Vulnerability
OpenVPN patched four vulnerabilities privately disclosed by Dutch researcher Guido Vranken, including a critical issue that could lead to remote code execution. Continue reading OpenVPN Patches Critical Remote Code Execution Vulnerability
Avaya Patches Remote Code Execution Flaw in Aura
Avaya released a patch last week for a remote code execution vulnerability in its Avaya Aura Application Enablement Services software. Continue reading Avaya Patches Remote Code Execution Flaw in Aura
University College London Ransomware Linked to AdGholas Malvertising Group
Proofpoint has connected the University College London ransomware to Mole, spread by AdGholas malvertising campaigns and the Astrum Exploit Kit. Continue reading University College London Ransomware Linked to AdGholas Malvertising Group