Tag: windows
-
Revamped Remcos RAT Deployed Against Microsoft Windows Users
Tags: exploit, malicious, microsoft, office, rat, remote-code-execution, risk, tool, vulnerability, windowsWindows users are at risk for full device takeover by an emerging malicious version of the Remcos remote admin tool, which is being used in an ongoing campaign exploiting a known remote code execution (RCE) vulnerability in Microsoft Office and WordPad. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/revamped-remcos-rat-microsoft-windows-users
-
New Remcos RAT Variant Targets Windows Users Via Phishing
The new Remcos RAT variant identified in a new phishing campaign exploits CVE-2017-0199 via malicious Excel files First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/remcos-rat-variant-targets-windows/
-
Microsoft blames Windows Server 2025 automatic upgrades on 3rd-party tools
Microsoft has finally confirmed that some Windows Server 2019 and 2022 systems were “unexpectedly” upgraded to Windows Server 2025 on devices if updates were managed using third-party patch management tools. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-blames-windows-server-2025-automatic-upgrades-on-third-party-tools/
-
New Winos4.0 Malware Targeting Windows via Fake Gaming Apps
First seen on hackread.com Jump to article: hackread.com/winos4-0-malware-target-windows-fake-gaming-apps/
-
CRON#TRAP Campaign Attacks Windows Machine With Weaponized Linux Virtual Machine
Weaponized Linux virtual machines are used for offensive cybersecurity purposes, such as >>penetration testing>exploiting vulnerabilities.
-
November 2024 Patch Tuesday forecast: New servers arrive early
Microsoft followed their October precedent set with Windows 11 24H2 and announced Microsoft Server 2025 on the first of November. We were expecting the official announcement … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/11/11/november-2024-patch-tuesday-forecast/
-
Windows 11 is adding a ‘Share’ button to the Start menu and Taskbar
Microsoft wants you to share content/items more frequently, so it’s now adding the “Share” button everywhere, including the Start menu and even the taskbar. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-11-is-adding-a-share-button-to-the-start-menu-and-taskbar/
-
Microsoft says recent Windows 11 updates break SSH connections
Microsoft has confirmed that last month’s Windows security updates are breaking SSH connections on some Windows 11 22H2 and 23H2 systems. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-says-recent-windows-11-updates-break-ssh-connections/
-
Hands on with AI features in Windows 11 Paint and Notepad
As part of its efforts to add AI everywhere, Microsoft is now bringing AI features to the popular Paint and Notepad apps on Windows 11. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/hands-on-with-ai-features-in-windows-11-paint-and-notepad/
-
Hackers Use Excel Files to Deliver Remcos RAT Variant on Windows
This article explains the inner workings of the Remcos RAT, a dangerous malware that uses advanced techniques to… First seen on hackread.com Jump to article: hackread.com/hackers-use-excel-files-remcos-rat-variant-windows/
-
Microsoft still not said anything about unexpected Windows Server 2025 installs
Affected business calls situation ‘mindbogglingly dangerous’ as sysadmins reminded to check backup and restore strategies First seen on theregister.com Jump to article: www.theregister.com/2024/11/08/windows_2025_surprise_install/
-
Neue Zero-Day-Spoofing-Schwachstelle in Windows – Microsofts Patch für CVE-2024-21320 ist nutzlos
First seen on security-insider.de Jump to article: www.security-insider.de/sicherheitsluecke-cve-2024-21320-patch-leaking-ntlm-anmeldedaten-a-3b0ef2b5c786558a92ef33c2da2f4997/
-
New CRON#TRAP Malware Infects Windows by Hiding in Linux VM to Evade Antivirus
Cybersecurity researchers have flagged a new malware campaign that infects Windows systems with a Linux virtual instance containing a backdoor capable of establishing remote access to the compromised hosts.The “intriguing” campaign, codenamed CRON#TRAP, starts with a malicious Windows shortcut (LNK) file likely distributed in the form of a ZIP archive via a phishing email.”What makes…
-
KB5044384: Installationsfehler bei neuem Windows-11-Update
First seen on golem.de Jump to article: www.golem.de/news/kb5044384-installationsfehler-bei-neuem-windows-11-update-2410-190228.html
-
Winos4.0 abuses gaming apps to infect, control Windows machines
‘Multiple’ malware samples likely targeting education orgs First seen on theregister.com Jump to article: www.theregister.com/2024/11/08/winos40_targets_windows/
-
DEF CON 32 Windows Downdate: Downgrade Attacks Using Windows Updates
Authors/Presenters: Alon Leviev Our sincere appreciation to DEF CON, and the Presenters/Authors for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the organizations YouTube channel. Permalink First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/11/def-con-32-windows-downdate-downgrade-attacks-using-windows-updates/
-
Beware of phishing emails delivering backdoored Linux VMs!
Unknown attackers are trying to trick Windows users into spinning up a custom Linux virtual machine (VM) with a pre-configured backdoor, Securonix res… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/11/05/phishing-oneamerica-survey-linux-vm-backdoor/
-
Attacks with novel SteelFox trojan hit Windows machines
First seen on scworld.com Jump to article: www.scworld.com/brief/attacks-with-novel-steelfox-trojan-hit-windows-machines
-
Novel phishing campaign targets Windows systems with malicious Linux VMs
First seen on scworld.com Jump to article: www.scworld.com/brief/novel-phishing-campaign-targets-windows-systems-with-malicious-linux-vms
-
SteelFox-Malware: Trojaner kapert Windows-PCs mithilfe anfälligem Treiber
SteelFox-Malware stiehlt u. a. Bankdaten und missbraucht die Rechnerleistung zum Krypto-Mining. Betroffen sind über 11.000 Nutzer weltweit. First seen on tarnkappe.info Jump to article: tarnkappe.info/artikel/it-sicherheit/steelfox-malware-trojaner-kapert-windows-pcs-mithilfe-anfaelligem-treiber-303586.html
-
Windows Themes 0-Day Bug Exposes Users To NTLM Credential Theft
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36541/Windows-Themes-0-Day-Bug-Exposes-Users-To-NTLM-Credential-Theft.html
-
Russian Espionage Group Targets Ukrainian Military with Malware via Telegram
A suspected Russian hybrid espionage and influence operation has been observed delivering a mix of Windows and Android malware to target the Ukrainian… First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/russian-espionage-group-targets.html
-
5 Most Common Malware Techniques in 2024
Tactics, techniques, and procedures (TTPs) form the foundation of modern defense strategies. Unlike indicators of compromise (IOCs), TTPs are more stable, making them a reliable way to identify specific cyber threats. Here are some of the most commonly used techniques, according to ANY.RUN’s Q3 2024 report on malware trends, complete with real-world examples.Disabling of Windows…
-
Patchmanagement: Auto-Upgrade auf Windows Server 2025 frustriert Admins
Tags: windowsEinige Systeme mit Windows Server 2019 und 2022 wurden automatisch auf die neue 2025er-Version aktualisiert. Unter Administratoren sorgt das für Unmut. First seen on golem.de Jump to article: www.golem.de/news/patchmanagement-auto-upgrade-auf-windows-server-2025-frustriert-admins-2411-190567.html
-
Office unter Windows 11 24H2 mit installiertem Crowdstrike lahmgelegt
Wer Crowdstrike-Sicherheitssoftware einsetzt und auf Windows 11 24H2 aktualisiert hat, hatte womöglich mit nicht funktionierenden Apps zu kämpfen. First seen on heise.de Jump to article: www.heise.de/news/Crowdstrike-legte-Office-unter-Windows-11-24H2-lahm-10007558.html
-
Researchers Uncover OS Downgrade Vulnerability Targeting Microsoft Windows Kernel
A new attack technique could be used to bypass Microsoft’s Driver Signature Enforcement (DSE) on fully patched Windows systems, leading to operating s… First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/researchers-uncover-os-downgrade.html
-
Crowdstrike legte Office unter Windows 11 24H2 lahm
Wer Crowdstrike-Sicherheitssoftware einsetzt und auf Windows 11 24H2 aktualisiert hat, hatte womöglich mit nicht funktionierenden Apps zu kämpfen. First seen on heise.de Jump to article: www.heise.de/news/Crowdstrike-legte-Office-unter-Windows-11-24H2-lahm-10007558.html
-
APT36 Hackers Attacking Windows Deevices With ElizaRAT
APT36, a sophisticated threat actor, has been actively targeting Indian entities with advanced malware like ElizaRAT, which is designed for espionage…. First seen on gbhackers.com Jump to article: gbhackers.com/apt36-elizarat-windows-attacks/
-
Sysadmin shock as Windows Server 2025 installs itself after update labeling error
Screens sprayed with coffee after techies find Microsoft’s latest OS in unexpected places First seen on theregister.com Jump to article: www.theregister.com/2024/11/06/windows_server_2025_surprise/