Collaborate Disseminate
ZDI details a zero-day named Copy2Pwn and tracked as CVE-2024-38213, which cybercriminals exploited to bypass MotW protections in Windows.
The post Copy2Pwn Zero-Day Exploited to Bypass Windows Protections appeared first on SecurityWeek.
Continue reading Copy2Pwn Zero-Day Exploited to Bypass Windows Protections
Here’s a brief reminder to do two things. The first is to patch. The second is to read up why it’s a good idea to patch…
Continue reading Microsoft patches four zero-days, finally takes action against crimeware kernel drivers
Learn how to write plain-speaking and purposeful security advisories from one of the most widely-used open source tools in the world. Continue reading Serious Security: Learning from curl’s latest bug update
A cute name but an annoying and potentially damaging attack. Here’s what to do. Continue reading Windows “PetitPotam” network attack – how to protect against it
Security problems in Schneider Electric programmable logic controllers allow compromise of the hardware, responsible for physical plant operations. Continue reading Bugs in Critical Infrastructure Gear Allow Sophisticated Cyberattacks
A pair of recent campaigns aim to lift credentials and other personal information under the guise of Amazon package-delivery notices. Continue reading Amazon-Themed Phishing Campaigns Swim Past Security Checks
A bug bounty hunter found a way to login using “Sign in with Apple”… but without the part where you have to put in a password. Continue reading No password required! “Sign in with Apple” account takeover flaw patched
Apple 0-Day allows hackers to mimic mouse-clicks to allow malicious behavior on macOS Majove, despite mitigations. Continue reading MacOS Zero-Day Allows Trusted Apps to Run Malicious Code
A video has surfaced claiming to show someone unlocking a Nokia 9 by tapping a gum packet against the fingerprint scanner. Continue reading Phone fingerprint scanner fooled by chewing gum packet
Adobe Systems released new security patches for Adobe Reader and Acrobat to fix two critical vulnerabilities that could allow hackers to execute malicious code on computers. Both flaws were reported privately by external researchers through Trend Micr… Continue reading Adobe Reader and Acrobat Get Patches for Two Critical Flaws