Collaborate Disseminate
If you’re part of a government alphabet agency, particularly running a program to share information to fight cybercrime, make sure to properly verify the identity of new members before admission. …read more Continue reading This Week In Security: Scamming the FBI, In The Wild, and AI Security
Most of the stories from this week are vulnerabilities dropped before fixes are available, many of them actively being exploited. Strap yourselves in!
The first is CVE-2020-17087, an issue in the Windows Kernel Cryptography Driver. The vulnerable system calls are accessible from unprivileged user-space, and potentially even …read more
Continue reading This Week in Security: In the Wild, Through Your NAT, and Brave
Google Project Zero disclosed the bug before a patch becomes available from Microsoft. Continue reading Unpatched Windows Zero-Day Exploited in the Wild for Sandbox Escape
The attempted compromises, which could allow full control over Active Directory identity services, are flying thick and fast just a week after active exploits of CVE-2020-1472 were first flagged. Continue reading Zerologon Attacks Against Microsoft DCs Snowball in a Week
RCE and myriad other types of attacks could take aim at the 19 percent of vulnerable companies that haven’t yet patched CVE-2019-19781. Continue reading Critical Citrix RCE Flaw Still Threatens 1,000s of Corporate LANs
After someone dropped a zero-day exploit on Securelist this week, the platform rushed out a fix — time to apply it. Continue reading Rash of Exploits Targets Critical vBulletin RCE Bug
A working exploit for the critical remote code-execution flaw shows how an unauthenticated attacker can achieve full run of a victim machine in about 22 seconds. Continue reading BlueKeep ‘Mega-Worm’ Looms as Fresh PoC Shows Full System Takeover
More and more attacks taking advantage of a XSS and RCE bug in the popular plugin have cropped up in the wild. Continue reading Exploits for Social Warfare WordPress Plugin Reach Critical Mass
With new attacks on the Israeli military and social-work educators, exploitation of the 19-year-old flaw shows no signs of slowing down. Continue reading Cybercriminals Have a Heyday with WinRAR Bug in Fresh Campaigns
Newly patched CVE-2019-0797 is being actively exploited by two APTs, FruityArmor and SandCat. Continue reading Threat Groups SandCat, FruityArmor Exploiting Microsoft Win32k Flaw