Tag: windows
-
North Korean APT Kimsuky Uses forceCopy Malware to Steal Browser-Stored Credentials
Tags: apt, attack, credentials, email, group, hacking, intelligence, korea, malware, microsoft, north-korea, office, phishing, spear-phishing, windowsThe North Korea-linked nation-state hacking group known as Kimsuky has been observed conducting spear-phishing attacks to deliver an information stealer malware named forceCopy, according to new findings from the AhnLab Security Intelligence Center (ASEC).The attacks commence with phishing emails containing a Windows shortcut (LNK) file that’s disguised as a Microsoft Office or PDF document. First…
-
Lumma Stealer Attacking Windows Users In India With Fake Captcha Pages
Cybersecurity experts are raising alarms over a new wave of attacks targeting Windows users in India, driven by the Lumma Stealer malware. This advanced information-stealing malware is being distributed through fake CAPTCHA verification pages, a deceptive tactic that preys on unsuspecting users. The campaign, which has gained significant traction since August 2024, highlights the evolving…
-
KB5050094: Microsoft nervt Nutzer mit neuen Bugs in Windows 11
Zahlreiche Nutzer beklagen neue Probleme mit dem Windows-11-Update KB5050094. Bei vielen spinnt der Mauszeiger, bei anderen schlägt das Update fehl. First seen on golem.de Jump to article: www.golem.de/news/kb5050094-microsoft-nervt-nutzer-mit-neuen-bugs-in-windows-11-2502-193080.html
-
AnyDesk Flaw Allows Admin Access Through Weaponized Windows Wallpapers
Cybersecurity enthusiasts and IT administrators worldwide are voicing concerns over a newly discovered vulnerability in AnyDesk that could lead to local privilege escalation (LPE). The vulnerability, identified as CVE-2024-12754 and coordinated by Trend Micro’s Zero Day Initiative, allows attackers to weaponize Windows background images for escalating permissions on Windows systems. A Closer Look at the Vulnerability Discovered…
-
Ubuntu Officially Available on the Updated Windows Subsystem for Linux
Ubuntu has announced its availability on Microsoft’s new tar-based Windows Subsystem for Linux (WSL) distribution architecture. This enhancement simplifies deployment and improves scalability, making Ubuntu on WSL more accessible and optimized for enterprise environments. Ubuntu has long been a popular choice among developers using WSL, thanks to its robust ecosystem and compatibility with development tools.…
-
HP Universal Print Driver Series (PCL 6): Potentielle Schwachstelle
In den HP Universal Print-Druckertreibern (PCL 6 und PostScript) für Windows gibt es in älteren Versionen potentielle Schwachstellen. Hintergrund ist, dass diese Druckertreiber die Bibliotheken libjpeg, libpng, OpenSSL und zlib verwenden und diese (teils uralte) Schwachstellen aufweisen. HP hat zum … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/02/06/hp-universal-print-driver-series-pcl-6-potentielle-schwachstelle/
-
New Microsoft script updates Windows media with bootkit malware fixes
Microsoft has released a PowerShell script to help Windows users and admins update bootable media so it utilizes the new “Windows UEFI CA 2023” certificate before the mitigations of the BlackLotus UEFI bootkit are enforced later this year. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/new-microsoft-script-updates-windows-media-with-bootkit-malware-fixes/
-
Microsoft script updates bootable media for BlackLotus bootkit fixes
Microsoft has released a PowerShell script to help Windows users and admins update bootable media so it utilizes the new “Windows UEFI CA 2023” certificate before the mitigations of the BlackLotus UEFI bootkit are enforced later this year. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-script-updates-bootable-media-for-blacklotus-bootkit-fixes/
-
7-Zip 0-day was exploited in Russia’s ongoing invasion of Ukraine
Vulnerability stripped MotW tag Windows uses to flag Internet-downloaded files. First seen on arstechnica.com Jump to article: arstechnica.com/security/2025/02/7-zip-0-day-was-exploited-in-russias-ongoing-invasion-of-ukraine/
-
How to Add Fingerprint Authentication to Your Windows 11 Computer
You can easily add a fingerprint reader to your computer if one isn’t already built in. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/how-to-add-fingerprint-authentication-to-windows-11-computer/
-
Umgehen der Voraussetzungen von Windows 11 ist unerwünscht
Microsoft entfernt Hinweise für einen Registry-Key, mit dem Windows 11 auf älteren Systemen läuft. Auch wird Flyby11 als Malware markiert. First seen on golem.de Jump to article: www.golem.de/news/microsoft-umgehen-der-voraussetzungen-von-windows-11-ist-unerwuenscht-2502-193059.html
-
Windows 10/11 KB5053484: Neues PS-Script für Zertifikate in Boot-Medien
Microsoft hat gerade ein neues PowerShell-Script für Windows 10 und Windows 11 veröffentlicht, welches die Boot-Medien aktualisiert. Dadurch soll sichergestellt werden, dass das Windows UEFI CA 2023 Zertifikat in naher Zukunft akzeptiert wird. Das Ganze steht im Kontext zur Black … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/02/05/windows-10-11-kb5053484-neues-ps-script-fuer-zertifikate-in-boot-medien/
-
7-Zip MotW bypass exploited in zero-day attacks against Ukraine
A 7-Zip vulnerability allowing attackers to bypass the Mark of the Web (MotW) Windows security feature was exploited by Russian hackers as a zero-day since September 2024. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/7-zip-motw-bypass-exploited-in-zero-day-attacks-against-ukraine/
-
Russian Cybercrime Groups Exploiting 7-Zip Flaw to Bypass Windows MotW Protections
A recently patched security vulnerability in the 7-Zip archiver tool was exploited in the wild to deliver the SmokeLoader malware.The flaw, CVE-2025-0411 (CVSS score: 7.0), allows remote attackers to circumvent mark-of-the-web (MotW) protections and execute arbitrary code in the context of the current user. It was addressed by 7-Zip in November 2024 with version 24.09.”The…
-
Hackers Exploiting 7-Zip Zero-Day Vulnerability to Deploy SmokeLoader Malware
A newly identified zero-day vulnerability in the widely used 7-Zip archiving software, designated as CVE-2025-0411. This critical flaw, which was exploited in the wild, is enabling threat actors to bypass vital Windows security protections and deploy SmokeLoader malware. The campaign has predominantly targeted Ukrainian organizations, with experts suspecting links to Russian cybercrime groups amid the…
-
Umfrage von Security-Insider – Wie gehen Sie mit dem Support-Ende von Windows 10 um?
Tags: windowsFirst seen on security-insider.de Jump to article: www.security-insider.de/umfrage-support-ende-windows-10-a-0dcdbdb1317d5f8d46e29218e805bdb8/
-
Microsoft Will Remove the Free VPN That Comes With Windows Defender Soon
The feature will no longer be available starting Feb. 28. Microsoft wants to focus on “new areas that will better align to customer needs.” First seen on techrepublic.com Jump to article: www.techrepublic.com/article/microsoft-defender-vpn-removed/
-
Microsoft Sets End Date for Defender VPN
Though Windows, iOS, and macOS users won’t need to make any changes, Android users are advised to remove their Defender VPN profiles. First seen on darkreading.com Jump to article: www.darkreading.com/mobile-security/microsoft-sets-end-date-for-defender-vpn
-
Further Adventures With CMPivot”Š”, “ŠClient Coercion
Further Adventures With CMPivot”Š”, “ŠClient Coercion Perfectly Generated AI Depiction based on Title TL:DR CMPivot queries can be used to coerce SMB authentication from SCCM client hosts Introduction CMPivot is a component part of the Configuration Manager framework. With the rise in popularity for ConfigMgr as a target in red team operations, this post looks to cover a…
-
Coyote Malware Launches Stealthy Attack on Windows Systems via LNK Files
FortiGuard Labs has issued a high-severity alert regarding the Coyote Banking Trojan, a sophisticated malware targeting Microsoft Windows users. Over the past month, researchers have identified malicious LNK files employing PowerShell commands to execute scripts and connect to remote servers, initiating a multi-stage attack. The primary objective of this Trojan is to harvest sensitive information…
-
Nach Preiserhöhung: Microsoft entfernt VPN-Feature aus Office
Das Windows-Defender-VPN kann von Microsoft-365-Abonnenten kostenlos genutzt werden. Damit ist in Kürze Schluss. First seen on golem.de Jump to article: www.golem.de/news/nach-preiserhoehung-microsoft-entfernt-vpn-feature-aus-office-2502-192995.html
-
Coyote Banking Trojan: a Threat to Banking Institutions
Over the past month, cybersecurity experts at FortiGuard Labs have identified a series of malicious Windows Shortcut (LNK) files containing PowerShell commands. These files serve as the initial stage of a sophisticated cyberattack aimed at delivering the Coyote Banking Trojan,… First seen on sensorstechforum.com Jump to article: sensorstechforum.com/coyote-banking-trojan-a-threat-to-banking-institutions/
-
Coyote Malware Expands Reach: Now Targets 1,030 Sites and 73 Financial Institutions
Brazilian Windows users are the target of a campaign that delivers a banking malware known as Coyote.”Once deployed, the Coyote Banking Trojan can carry out various malicious activities, including keylogging, capturing screenshots, and displaying phishing overlays to steal sensitive credentials,” Fortinet FortiGuard Labs researcher Cara Lin said in an analysis published last week.The First seen…
-
NVIDIA GPU Display Drivers Vulnerability Lets Attackers Access Files Remotely
NVIDIA has issued a critical security update to address multiple vulnerabilities in its GPU Display Driver and vGPU software, affecting both Windows and Linux systems. These vulnerabilities, disclosed in January 2025, pose risks such as denial of service (DoS), data tampering, information disclosure, and even code execution. Users are strongly advised to update their drivers…
-
Windows 11 stages a comeback still miles behind older sibling
Microsoft’s latest OS claws back market share from Windows 10, but the finish line is a long way off First seen on theregister.com Jump to article: www.theregister.com/2025/02/01/windows_11_statcounter/
-
New Process Hollowing Attack Vectors Uncovered in Windows 11 (24H2)
A significant evolution in the cybersecurity landscape has emerged with the uncovering of new vulnerabilities in Windows 11 (24H2). Process Hollowing, a widely used technique often referred to as RunPE, has encountered new challenges in this operating system version due to changes in the Windows loader, impacting both security researchers and attackers alike. Process Hollowing…
-
Windows 11’s Start menu is getting iPhone and Android integration
Windows 11’s Start menu is getting a big update with full-fledged Android and iPhone integration. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-11s-start-menu-is-getting-iphone-and-android-integration/