Category Archives: in the wild

This Week In Security: Scamming the FBI, In The Wild, and AI Security

Posted on by

If you’re part of a government alphabet agency, particularly running a program to share information to fight cybercrime, make sure to properly verify the identity of new members before admission. …read more Continue reading This Week In Security: Scamming the FBI, In The Wild, and AI Security→

This Week in Security: In the Wild, Through Your NAT, and Brave

Posted on by

Most of the stories from this week are vulnerabilities dropped before fixes are available, many of them actively being exploited. Strap yourselves in!

Windows Kernel Crypto

The first is CVE-2020-17087, an issue in the Windows Kernel Cryptography Driver. The vulnerable system calls are accessible from unprivileged user-space, and potentially even …read more

Continue reading This Week in Security: In the Wild, Through Your NAT, and Brave→

Unpatched Windows Zero-Day Exploited in the Wild for Sandbox Escape

Posted on by

Google Project Zero disclosed the bug before a patch becomes available from Microsoft. Continue reading Unpatched Windows Zero-Day Exploited in the Wild for Sandbox Escape→

Zerologon Attacks Against Microsoft DCs Snowball in a Week

Posted on by

The attempted compromises, which could allow full control over Active Directory identity services, are flying thick and fast just a week after active exploits of CVE-2020-1472 were first flagged. Continue reading Zerologon Attacks Against Microsoft DCs Snowball in a Week→

Critical Citrix RCE Flaw Still Threatens 1,000s of Corporate LANs

Posted on by

RCE and myriad other types of attacks could take aim at the 19 percent of vulnerable companies that haven’t yet patched CVE-2019-19781. Continue reading Critical Citrix RCE Flaw Still Threatens 1,000s of Corporate LANs→

BlueKeep ‘Mega-Worm’ Looms as Fresh PoC Shows Full System Takeover

Posted on by

A working exploit for the critical remote code-execution flaw shows how an unauthenticated attacker can achieve full run of a victim machine in about 22 seconds. Continue reading BlueKeep ‘Mega-Worm’ Looms as Fresh PoC Shows Full System Takeover→