Tag: windows
-
New ‘Helldown’ Ransomware Variant Expands Attacks to VMware and Linux Systems
Cybersecurity researchers have shed light on a Linux variant of a relatively new ransomware strain called Helldown, suggesting that the threat actors are broadening their attack focus.”Helldown deploys Windows ransomware derived from the LockBit 3.0 code,” Sekoia said in a report shared with The Hacker News. “Given the recent development of ransomware targeting ESX, it…
-
Chinese hackers exploit Fortinet VPN zero-day to steal credentials
Chinese threat actors use a custom post-exploitation toolkit named ‘DeepData’ to exploit a zero-day vulnerability in Fortinet’s FortiClient Windows VPN client that steal credentials. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/chinese-hackers-exploit-fortinet-vpn-zero-day-to-steal-credentials/
-
APT41 expands cyberespionage to target Windows
First seen on scworld.com Jump to article: www.scworld.com/brief/apt41-expands-cyberespionage-to-target-windows
-
Fortinet VPN Zero-Day Exploited in Malware Attacks Remains Unpatched: Report
The DeepData malware framework was seen exploiting a Fortinet VPN client for Windows zero-day that remains unpatched. The post Fortinet VPN Zero-Day Exploited in Malware Attacks Remains Unpatched: Report appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/fortinet-vpn-zero-day-exploited-in-malware-attacks-remains-unpatched-report/
-
Backup, Systemwiederherstellung, Updates sicher durchführen – Komplette Sicherungen für Windows-PCs mit Active Disk Image
First seen on security-insider.de Jump to article: www.security-insider.de/komplette-sicherungen-fuer-windows-pcs-mit-active-disk-image-a-3649dfcbeaba345fe9eaebe7b7b1d674/
-
Lumma Stealer statt KI-App: Malware befällt Windows und macOS
Vorsicht vor falschen KI-Tools wie EditProAI: Lumma Stealer bedroht Windows und macOS. So erkennt und vermeidet ihr die gut getarnte Malware. First seen on tarnkappe.info Jump to article: tarnkappe.info/artikel/it-sicherheit/lumma-stealer-statt-ki-app-malware-befaellt-windows-und-macos-304346.html
-
Fake AI video generators infect Windows, macOS with infostealers
Fake AI image and video generators infect Windows and macOS with the Lumma Stealer and AMOS information-stealing malware, used to steal credentials and cryptocurrency wallets from infected devices. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/fake-ai-video-generators-infect-windows-macos-with-infostealers/
-
DEF CON 32 Sudos And Sudon’ts: Peering Inside Sudo For Windows
Authors/Presenters: Michael Torres Our sincere appreciation to DEF CON, and the Presenters/Authors for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the organizations YouTube channel. Permalink First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/11/def-con-32-sudos-and-sudonts-peering-inside-sudo-for-windows/
-
Warning: DEEPDATA Malware Exploiting Unpatched Fortinet Flaw to Steal VPN Credentials
A threat actor known as BrazenBamboo has exploited an unresolved security flaw in Fortinet’s FortiClient for Windows to extract VPN credentials as part of a modular framework called DEEPDATA.Volexity, which disclosed the findings Friday, said it identified the zero-day exploitation of the credential disclosure vulnerability in July 2024, describing BrazenBamboo as the developer behind DEEPDATA,…
-
Zero-Day Vulnerability in FortiClient Exploited by BrazenBamboo APT
Cybersecurity firm Volexity has uncovered a zero-day vulnerability in Fortinet’s Windows VPN client, FortiClient, being exploited by the BrazenBamboo Advanced Persistent Threat (APT) group. This vulnerability, detailed in Volexity’s latest... First seen on securityonline.info Jump to article: securityonline.info/zero-day-vulnerability-in-forticlient-exploited-by-brazenbamboo-apt/
-
Daniel Stori’s Turnoff.US: ‘I Love Windows Powershell’
via the inimitable Daniel Stori at Turnoff.US! Permalink First seen on securityboulevard.com Jump to article: https://securityboulevard.com/2024/11/daniel-storis-turnoff-us-i-love-windows-powershell/
-
Microsoft just killed the Windows 10 Beta Channel for good
Five months after reviving it in June, Microsoft has shut down the Windows 10 Beta Channel and will move all enrolled Windows Insiders to the Release Preview Channel. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-just-killed-the-windows-10-beta-channel-for-good/
-
LightSpy Spyware Operation Expands to Windows
The Chinese APT behind the LightSpy iOS backdoor has expanded its toolset with DeepData, a modular Windows-based surveillance framework. The post LightSpy Spyware Operation Expands to Windows appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/lightspy-ios-spyware-operation-expands-to-windows/
-
Microsoft just killed the Windows 10 Beta Channel again
Five months after reviving it in June, Microsoft has shut down the Windows 10 Beta Channel and will move all enrolled Windows Insiders to the Release Preview Channel. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-just-killed-the-windows-10-beta-channel-again/
-
Newly patched Windows zero-day leveraged to attack Ukraine
First seen on scworld.com Jump to article: www.scworld.com/brief/newly-patched-windows-zero-day-leveraged-to-attack-ukraine
-
Blinded by Silence
Tags: access, antivirus, attack, backdoor, breach, control, credentials, crowdstrike, cybersecurity, data, defense, detection, edr, endpoint, exploit, extortion, firewall, github, malicious, malware, microsoft, mitre, monitoring, network, open-source, phone, ransomware, risk, service, siem, sophos, threat, tool, update, vulnerability, windowsBlinded by Silence: How Attackers Disable EDR Overview Endpoint Detection and Response systems (EDRs) are an essential part of modern cybersecurity strategies. EDR solutions gather and analyze data from endpoints to identify suspicious activities and provide real-time threat visibility. This allows security teams to respond quickly to incidents, investigate threats thoroughly, and mitigate the impact of…
-
Windows Zero-Day Exploited by Russia Triggered With File Drag-and-Drop, Delete Actions
The exploit for a new zero-day vulnerability in Windows is executed by deleting files, drag-and-dropping them, or right clicking on them. The post Windows Zero-Day Exploited by Russia Triggered With File Drag-and-Drop, Delete Actions appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/windows-zero-day-exploited-by-russia-triggered-with-file-drag-and-drop-delete-actions/
-
How a Windows zero-day was exploited in the wild for months (CVE-2024-43451)
CVE-2024-43451, a Windows zero-day vulnerability for which Microsoft released a fix on November 2024 Patch Tuesday, has been exploited since at least April 2024, ClearSky … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/11/14/cve-2024-43451-exploited/
-
Dringend patchen: Kritische Kerberos-Lücke gefährdet Windows-Server-Systeme
Die Lücke betrifft alle Windows-Server-Versionen ab 2012 aufwärts und erlaubt es Angreifern, aus der Ferne Schadcode einzuschleusen und auszuführen. First seen on golem.de Jump to article: www.golem.de/news/dringend-patchen-kritische-kerberos-luecke-gefaehrdet-windows-server-systeme-2411-190766.html
-
Gratis-Tool: Sicherheitsforscher knacken ShrinkLocker-Verschlüsselung
Der Erpressungstrojaner ShrinkLocker nutzt Microsofts Bitlocker, um Windows-Systeme zu verschlüsseln. Ein Entschlüsselungstool hilft. First seen on heise.de Jump to article: www.heise.de/news/Gratis-Tool-Sicherheitsforscher-knacken-ShrinkLocker-Verschluesselung-10034933.html
-
Windows 10 ESU: Microsoft will 30 USD für ein Jahr Sicherheitsupdates
First seen on golem.de Jump to article: www.golem.de/news/windows-10-esu-microsoft-will-30-usd-fuer-ein-jahr-sicherheitsupdates-2411-190379.html
-
Windows 0-Day Exploited in Wild with Single Right Click
A newly discovered zero-day vulnerability, CVE-2024-43451, has been actively exploited in the wild, targeting Windows systems across various versions. This critical vulnerability, uncovered by the ClearSky Cyber Security team in June 2024, has been linked to attacks aimed specifically at Ukrainian organizations. The exploit allows malicious actors to gain control of a system through seemingly innocuous…
-
Russian Hackers Exploit New NTLM Flaw to Deploy RAT Malware via Phishing Emails
A newly patched security flaw impacting Windows NT LAN Manager (NTLM) was exploited as a zero-day by a suspected Russia-linked actor as part of cyber attacks targeting Ukraine.The vulnerability in question, CVE-2024-43451 (CVSS score: 6.5), refers to an NTLM hash disclosure spoofing vulnerability that could be exploited to steal a user’s NTLMv2 hash. It was…
-
Right-Click to Hack: Zero-Day CVE-2024-43451 Vulnerability Targets Windows Users
ClearSky Cyber Security has uncovered a new zero-day vulnerability, CVE-2024-43451, actively exploited in the wild, targeting Windows systems primarily in Ukraine. This flaw enables attackers to exploit URL files for... First seen on securityonline.info Jump to article: securityonline.info/right-click-to-hack-zero-day-cve-2024-43451-vulnerability-targets-windows-users/
-
Patch Tuesday: Four Critical Vulnerabilities Paved Over
The November 2024 Microsoft updates let Windows 11 users remap the Copilot button. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/patch-tuesday-nov-24/
-
Microsoft patches Windows zero-day exploited in attacks on Ukraine
Suspected Russian hackers were caught exploiting a recently patched Windows vulnerability as a zero-day in ongoing attacks targeting Ukrainian entities. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-patches-windows-zero-day-exploited-in-attacks-on-ukraine/
-
November Patch Tuesday Brings Cornucopia Of 89 Fixes To Windows
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36589/November-Patch-Tuesday-Brings-Cornucopia-Of-89-Fixes-To-Windows.html
-
Patchday: Windows Server 2012 / R2 und Windows 7 (12. November 2024)
Zum 12. November wurden diverse Sicherheitsupdates für Windows Server 2012/R2 (1. ESU Jahr) veröffentlicht. Für Windows Server 2008 R2 ist der Support im Januar 2024 ausgelaufen. Hier ein Überblick über diese Updates für Windows Server 2012 sowie Windows Server 2012 … First seen on borncity.com Jump to article: www.borncity.com/blog/2024/11/13/patchday-windows-server-2012-r2-und-windows-7-12-november-2024/
-
Dieser Hacker-Trick umgeht sogar Antivirenprogramme: Wie Windows-Malware in Zip-Dateien versteckt wird
First seen on t3n.de Jump to article: t3n.de/news/hacker-trick-umgeht-antivirenprogramme-windows-malware-in-zip-dateien-1657123/
-
Sicherheitsupdates: Zoom Room Client & Co. angreifbar
Die Entwickler rüsten verschiedene Zoom-Apps gegen mögliche Angriffe. Davon sind unter anderem macOS und Windows betroffen. First seen on heise.de Jump to article: www.heise.de/news/Sicherheitsupdates-Zoom-Room-Client-Co-angreifbar-10031648.html