Tag: windows
-
Google Chrome Security Update, Patch for High-severity Vulnerability
Google has released a significant security update for its Chrome browser, aiming to address several vulnerabilities and enhance user safety. The Stable channel has been updated to version 131.0.6778.108/.109 for Windows, and Mac, and version 131.0.6778.108 for Linux. These updates will be gradually rolled out to users over the coming days and weeks. According to…
-
Progress WhatsUp Gold RCE Vulnerability PoC Exploit Released
A registry overwrite remote code execution (RCE) vulnerability has been identified in NmAPI.exe, part of the WhatsUp Gold network monitoring software. This vulnerability, present in versions before 24.0.1, allows an unauthenticated remote attacker to execute arbitrary code on affected systems, posing significant security risks. Vulnerability Details The vulnerability lies within NmAPI.exe, a Windows Communication Foundation…
-
First-ever Linux UEFI bootkit turns out to be student project
Tags: antivirus, attack, authentication, awareness, computer, conference, cybersecurity, firmware, linux, malicious, malware, microsoft, risk, software, technology, threat, training, update, windowsBootkitty, a recently discovered boot-level UEFI rootkit for Linux, was evidently created by students participating in a cybersecurity training program at the South Korean Information Technology Research Institute (KITRI).The bootkit, found and analyzed by researchers from antivirus vendor ESET last week, showed signs of being a proof of concept rather than production-ready malware. Nevertheless, the…
-
Windows 11 23H2 Hardening: AD Domain Computer ReJoin schlägt fehl
Heute noch ein kurzer Informationssplitter, auf den mich ein Blog-Leser bereits im November 2024 hingewiesen hat. Wird ein Active Directory Domain-Hardening gemäß Update KB5020276 durchgeführt, kann es Probleme unter Windows 11 23H2 geben, so dass Active Directory Domain Computer ReJoin … First seen on borncity.com Jump to article: www.borncity.com/blog/2024/12/04/windows-11-23h2-hardening-ad-domain-computer-rejoin-schlaegt-fehl/
-
First-ever Linux UEFI bootkit turns out to be research project
Tags: antivirus, attack, authentication, awareness, computer, conference, cybersecurity, firmware, linux, malicious, malware, microsoft, risk, software, technology, threat, training, update, windowsBootkitty, a recently discovered boot-level UEFI rootkit for Linux, was evidently created by students participating in a cybersecurity training program at the South Korean Information Technology Research Institute (KITRI).The bootkit, found and analyzed by researchers from antivirus vendor ESET last week, showed signs of being a proof of concept rather than production-ready malware. Nevertheless, the…
-
Hackers Exploited Windows Event Logs Tool log Manipulation, And Data Exfiltration
wevtutil.exe, a Windows Event Log management tool, can be abused for LOLBAS attacks. By manipulating its capabilities, attackers can execute arbitrary commands, download malicious payloads, and establish persistence, all while evading traditional security measures. It is a Windows tool for event log management that can be exploited by attackers to manipulate system logs, potentially concealing…
-
SmokeLoader picks up ancient MS Office bugs to pack fresh credential stealer
Threat actors are using a well-known modular malware loader, SmokeLoader, to exploit known Microsoft Office vulnerabilities and steal sensitive browser credentials.The loader which runs a framework to deploy multiple malware modules, was observed by Fortinet’s FortiGuard Labs in attacks targeting manufacturing, healthcare, and IT companies in Taiwan.”SmokeLoader, known for its ability to deliver other malicious…
-
NachoVPN Tool Exploits Flaws in Popular VPN Clients for System Compromise
Tags: access, cybersecurity, exploit, flaw, macOS, network, remote-code-execution, tool, vpn, windowsCybersecurity researchers have disclosed a set of flaws impacting Palo Alto Networks and SonicWall virtual private network (VPN) clients that could be potentially exploited to gain remote code execution on Windows and macOS systems.”By targeting the implicit trust VPN clients place in servers, attackers can manipulate client behaviours, execute arbitrary commands, and gain high levels…
-
Neue Update-Technologie kommt für alle Server-Editionen – So funktioniert Hotpatching in Windows Server 2025
First seen on security-insider.de Jump to article: www.security-insider.de/neue-update-technologie-windows-server-2025-hotpatching-a-b73adbd463369bcbd9c0110fb33481bd/
-
ElizaRAT Exploits Google, Telegram, Slack Services For C2 Communications
APT36, a Pakistani cyber-espionage group, has recently upgraded its arsenal with ElizaRAT, a sophisticated Windows RAT that, initially detected in 2023, employs advanced evasion tactics and robust C2 capabilities to target Indian government agencies, diplomatic personnel, and military installations. The group leverages multiple platforms, including Windows, Linux, and Android, to broaden its attack surface as…
-
CIO POV: Building trust in cyberspace
Tags: access, ai, attack, best-practice, business, cio, cisa, cloud, cyber, data, deep-fake, encryption, framework, GDPR, group, identity, infrastructure, intelligence, Internet, mfa, mitre, nist, privacy, regulation, resilience, risk, service, software, strategy, technology, threat, tool, update, windowsTrust lies at the heart of every relationship, transaction, and encounter. Yet in cyberspace”, where we work, live, learn, and play”, trust can become elusive.Since the dawn of the internet nearly 50 years ago, we’ve witnessed incredible digital transformations paired with increasingly formidable threats. Knowing who and what to trust has become so difficult that…
-
Mozilla really wants you to set Firefox as default Windows browser
In an effort to turn the tide, Mozilla is testing a fresh approach that could persuade more people to switch their default browser on Windows during the installation of the browser. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/software/mozilla-really-wants-you-to-set-firefox-as-default-windows-browser/
-
Just Like Windows: Linux Targeted by First-Ever UEFI Bootkit – UPDATED
Linux-Targeting Bootkitty Appears More Proof-of-Concept Than Threat, Researchers Say. Cybersecurity researchers have discovered the first-ever UEFI bootkit designed to target Linux systems and subvert their boot process for malicious purposes. The Bootkitty malware, first uploaded to VirusTotal this month, appears to be more proof of concept than full-fledged threat, they said. First seen on govinfosecurity.com…
-
Trotz Support-Ende im Oktober 2025 – Windows 10 gewinnt im November 2024 wieder Marktanteile
Obwohl Windows 10 nur noch ein Jahr Updates erhält, kann es im November bei den Marktanteilen gegenüber Windows 11 sogar zulegen. First seen on computerbase.de Jump to article: www.computerbase.de/news/betriebssysteme/trotz-support-ende-im-oktober-2025-windows-10-gewinnt-im-november-2024-wieder-marktanteile.90515
-
New CleverSoar Malware Attacking Windows Users Bypassing Security Mechanisms
CleverSoar, a new malware installer, targets Chinese and Vietnamese users to deploy advanced tools like Winos4.0 and Nidhogg rootkit. These tools enable keylogging, data theft, security circumvention, and stealthy system control for potential long-term espionage. It was initially uploaded to VirusTotal in July 2024 and began distribution in November 2024 as an .msi installer, extracting…
-
Microsoft Boosts Device Security With Windows Resiliency Initiative
Microsoft is readying a new release of Windows in 2025 that will have significant security controls such as more resilient drivers and self-defending operating system kernel. First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/microsoft-boosts-device-security-windows-resiliency-initiative
-
Mozilla really wants you to easily set Firefox as default Windows browser
Mozilla is testing a fresh approach that could persuade more people to switch their default browser on Windows. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/software/mozilla-really-wants-you-to-easily-set-firefox-as-default-windows-browser/
-
Kein Patch von Microsoft: Zero-Day-Lücke gefährdet Windows Server 2012
In dem betagten Betriebssystem Windows Server 2012 klafft eine Sicherheitslücke. Ein Patch ist verfügbar, jedoch bisher nur von einem Drittanbieter. First seen on golem.de Jump to article: www.golem.de/news/kein-patch-von-microsoft-zero-day-luecke-gefaehrdet-windows-server-2012-2412-191330.html
-
Windows Server 2012 0-day Vulnerability Exposes Critical Security Flaw
Cybersecurity researchers have identified a critical 0-day vulnerability in Windows Server 2012 and Server 2012 R2. This previously unknown security flaw allows attackers to bypass the Mark of the Web (MoTW) verification on certain files, posing a significant threat to affected systems. Vulnerability Details The vulnerability, which was introduced over two years ago, has managed…
-
Logpoint erklärt Dynamic Link Dazzle: Die dunkle Seite von DLLs
Tags: windowsUnter Windows ist eine Dynamic Link Library (DLL) eine Komponente, die Funktionen und Daten enthält, die von anderen Modulen wie Programmen oder DLLs … First seen on infopoint-security.de Jump to article: www.infopoint-security.de/logpoint-erklaert-dynamic-link-dazzle-die-dunkle-seite-von-dlls/a37368/
-
Kommentar von Qualys zum Patch Tuesday
Die Auswirkungen von CVE-2024-38080, einer Schwachstelle in Windows Hyper-V, sind enorm, da diese Schwachstelle Angreifern den höchsten Systemzugriff … First seen on infopoint-security.de Jump to article: www.infopoint-security.de/kommentar-von-qualys-zum-patch-tuesday/a37772/
-
Internet Explorer wird für Zero-Day-Spoofing-Angriffe missbraucht
Die Angreifer verwenden spezielle Windows-Internet-Verknüpfungsdateien (.url-Erweiterungen), die den ausgedienten Internet Explorer (IE) aufriefen, um… First seen on infopoint-security.de Jump to article: www.infopoint-security.de/internet-explorer-wird-fuer-zero-day-spoofing-angriffe-missbraucht/a37795/
-
Check Point veröffentlicht Top Malware Ranking August 2024
Der Anteil des Windows-Downloader stieg um fünf Prozentpunkte. Check Point zeigt in seiner Top Malware für August 2024 zudem die schwerwiegenden Konse… First seen on infopoint-security.de Jump to article: www.infopoint-security.de/check-point-veroeffentlicht-top-malware-ranking-august-2024/a38255/
-
Zunehmender Missbrauch von automatisierten Prozessen in Windows-Systemen
Tags: windowsIT-Abteilungen sollten dringend regelmäßige Audits aller geplanten Aufgaben durchführen. Dabei ist sicherzustellen, dass nur vertrauenswürdige Anwendu… First seen on infopoint-security.de Jump to article: www.infopoint-security.de/zunehmender-missbrauch-von-automatisierten-prozessen-in-windows-systemen/a38264/
-
CrowdStrike-Vorfall offenbart Schwächen eines vernetzten IT- Ökosystems
Ein fehlerhaftes Update der Sicherheitssoftware von CrowdStrike hat zu weltweiten Ausfällen von Windows-Rechnern geführt. Das zeigt, wie anfällig Soft… First seen on 8com.de Jump to article: www.8com.de/cyber-security-blog/crowdstrike-vorfall-offenbart-schwachen-eines-vernetzten-it–okosystems
-
Support-Ende für Windows 10 Ende 2025 – Ein Jahr an zusätzlichen Sicherheitsupdates kostet 30 US-Dollar
Tags: windowsFirst seen on computerbase.de Jump to article: www.computerbase.de/news/betriebssysteme/support-ende-fuer-windows-10-ende-2025-ein-jahr-an-zusaetzlichen-sicherheitsupdates-kostet-30-us-dollar.90167
-
WinRM Penetration Testing
Windows Remote Management (WinRM) is a protocol developed by Microsoft for remotely managing hardware and operating systems on Windows machines. It is… First seen on hackingarticles.in Jump to article: www.hackingarticles.in/winrm-penetration-testing/
-
File Transfer Cheatsheet: Windows and Linux
File transfer is a crucial step in the post-exploitation scenario while performing penetration testing or red teaming. There are various ways to do th… First seen on hackingarticles.in Jump to article: www.hackingarticles.in/file-transfer-cheatsheet-windows-and-linux/
-
SPNEGO NEGOEX: Critical Pre-Authentication RCE Vulnerability in Modern Microsoft Windows Operating Systems (CVE-2022-37958)
Written by Mark Stueck of the Kudelski Security Threat Detection & Research Team Summary On Tuesday, December 13th, Microsoft reclassified a previ… First seen on research.kudelskisecurity.com Jump to article: research.kudelskisecurity.com/2022/12/14/advisory-spnego-negoex-critical-pre-authentication-rce-vulnerability-in-modern-microsoft-windows-operating-systems-cve-2022-37958/
-
CVE-2023-36884 Office and Windows HTML Remote Code Execution Vulnerability
Written by Yann Lehmann and Harish Segar of the Kudelski Security Threat Detection & Research Team Summary On July 11th, Microsoft disclosed a rem… First seen on research.kudelskisecurity.com Jump to article: research.kudelskisecurity.com/2023/07/14/cve-2023-36884-office-and-windows-html-remote-code-execution-vulnerability/