Tag: windows
-
Hackers Use Custom Backdoor Powershell Scripts to Attack Windows Machines
The Damselfly Advanced Persistent Threat (APT) group, also known as APT42, has been actively utilizing custom backdoor variants, NiceCurl and TameCat,… First seen on gbhackers.com Jump to article: gbhackers.com/hackers-use-custom-backdoor/
-
RootkitPfadkonvertierung
Tags: windowsFirst seen on csoonline.com Jump to article: www.csoonline.com/de/a/neuer-angriffsweg-ueber-windows-pfadkonvertierung
-
Windows users left to fend for themselves after BitLocker patch bungle
First seen on theregister.com Jump to article: www.theregister.com/2024/05/03/microsoft_windows_recovery_environment/
-
Kreml-Hacker missbrauchen alten Print-Spooler-Bug in Windows
Ausgenutzt wird die Schwachstelle mit einem Tool namens Goose Egg. Microsoft hat entsprechende Angriffe von APT28 mindestens bis Juni 2020 zurückverfo… First seen on golem.de Jump to article: www.golem.de/news/microsoft-kreml-hacker-missbrauchen-alten-print-spooler-bug-in-windows-2404-184437.html
-
Microsoft won’t fix Windows 0x80070643 errors, manual fix required
‹Microsoft has confirmed that it won’t provide an automated fix for a known issue causing 0x80070643 errors when installing recent Windows Recovery En… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-wont-fix-windows-0x80070643-errors-manual-fix-required/
-
Russia’s APT28 Exploited Windows Print Spooler Flaw to Deploy ‘GooseEgg’ Malware
The Russia-linked nation-state threat actor tracked as APT28 weaponized a security flaw in the Microsoft Windows Print Spooler component to deliver a … First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/russias-apt28-exploited-windows-print.html
-
Rust rustles up fix for 10/10 critical command injection bug on Windows in std lib
First seen on theregister.com Jump to article: www.theregister.com/2024/04/10/rust_critical_vulnerability_windows/
-
April Windows Server updates cause NTLM auth failures
Microsoft has confirmed customer reports of NTLM authentication failures and high load after installing last month’s Windows Server security updates. … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-april-windows-server-updates-cause-ntlm-auth-failures/
-
Windows Print-Spooler-Schwachstelle CVE-2022-38028 bevorzugtes Einfallstor russischer Angreifer
Die alte Print-Spooler-Schwachstelle CVE-2022-38028 in Windows ist wohl das bevorzugte Angriffsziel der russischen Hackergruppe Fancy Bear. Das hat di… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/04/23/windows-print-spooler-schwachstelle-cve-2022-38028-bevorzugtes-einfallstor-russischer-angreifer/
-
Microsoft says April Windows updates break VPN connections
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-says-april-windows-updates-break-vpn-connections/
-
Attention all Windows Users! The Microsoft April Security Update Could Break Your VPN
In a recent development that has caught the attention of IT administrators and users alike, Microsoft has acknowledged a significant issue affecting V… First seen on gbhackers.com Jump to article: gbhackers.com/microsoft-april-security-update-could-break-your-vpn/
-
Google Guide! How to Detect Browser Data Theft Using Windows Event Logs
In the ever-evolving cybersecurity landscape, Google is continually striving to protect user data from malicious actors. In a recent blog post, the te… First seen on gbhackers.com Jump to article: gbhackers.com/google-guide-how-to-detect-browser-data-theft-using-windows-event-logs/
-
Researchers Uncover Windows Flaws Granting Hackers Rootkit-Like Powers
New research has found that the DOS-to-NT path conversion process could be exploited by threat actors to achieve rootkit-like capabilities to conceal … First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/researchers-uncover-windows-flaws.html
-
Schwachstelle in Windows ermöglicht Remotecode-Ausführung – RAR-Dateien stellen eine Gefahr dar
First seen on security-insider.de Jump to article: www.security-insider.de/sicherheitsluecke-cve-2024-20697-windows-11-server-2022-a-6cea86382990c0d90e249e7ca63dea3a/
-
Winrar: Gefälschte Ausgaben unter Linux möglich und MotW-Probleme in Windows
First seen on heise.de Jump to article: www.heise.de/news/Winrar-MotW-Probleme-in-Windows-und-eine-Linux-Luecke-korrigiert-9701474.html
-
Schadsoftware Kapeka: Aus Russland gesteuerte Hintertür in Windows entdeckt
Tags: windowsDie Sicherheitsforscher von WithSecure haben eine gefährliche Hintertür für Windows-Systeme gefunden. Die Erkenntnisse der Finnen wurden von Microsoft… First seen on csoonline.com Jump to article: www.csoonline.com/de/a/aus-russland-gesteuerte-hintertuer-in-windows-entdeckt
-
Russia’s Fancy Bear Pummels Windows Print Spooler Bug
The infamous Russian threat actor has created a custom tool called GooseEgg to exploit CVE-2022-38028 in cyber-espionage attacks against targets in Uk… First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/russia-fancy-bear-pummels-windows-print-spooler-bug
-
Windows Vulnerability Reported By The NSA Exploited To Install Russian Malware
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/35804/Windows-Vulnerability-Reported-By-The-NSA-Exploited-To-Install-Russian-Malware.html
-
Cyberkriminelle greifen Druckerspooler in Windows an – Viele Windows-Rechner angreifbar
Tags: windowsFirst seen on security-insider.de Jump to article: www.security-insider.de/schwachstelle-cve-2022-38028-russische-hacker-windows-luecke-malware-angriffe-a-b9450c76a680e205cca80175c6069241/
-
KageNoHitobito Ransomware Attacking Windows Users Around the Globe
A new ransomware named KageNoHitobito has been targeting Windows users across various countries. It encrypts their data and demands a ransom through s… First seen on gbhackers.com Jump to article: gbhackers.com/kagenohitobito-ransomware-attacking/
-
PoC Exploit Released For Windows Kernel EoP Vulnerability
Microsoft released multiple product security patches on their April 2024 Patch Tuesday updates. One of the vulnerabilities addressed was CVE-2024-2621… First seen on gbhackers.com Jump to article: gbhackers.com/windows-kernel-eop-exploit-released/
-
Windows 11 24H2 blockiert Apps von Drittanbietern – Nutzer verlieren Freiheiten in neuer Windows 11-Version
Tags: windowsFirst seen on security-insider.de Jump to article: www.security-insider.de/windows-11-24h2-microsoft-beschraenkt-nutzereinstellungen-a-9819e91421649d5f739a0d54a438259e/
-
Updated CISA exploited vulnerabilties catalog includes Windows print spooler bug
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/updated-cisa-exploited-vulnerabilties-catalog-includes-windows-print-spooler-bug
-
Angriff aus Russland: Windows-Malware platziert Backdoor und verwischt Spuren
Die Kapeka genannte Schadsoftware wird mit der russischen Hackergruppe Sandworm in Verbindung gebracht. Sie ist als Erweiterung für Microsoft Word get… First seen on golem.de Jump to article: www.golem.de/news/angriff-aus-russland-windows-malware-platziert-backdoor-und-verwischt-spuren-2404-184257.html
-
Analyze Malicious Powershell Scripts by Running Malware in ANY.RUN Sandbox
Hackers exploit PowerShell, a built-in scripting tool on Windows (and sometimes Linux), to launch various attacks. PowerShell scripts can download mal… First seen on gbhackers.com Jump to article: gbhackers.com/powershell-script-tracer_-analyze-powershell-execution/
-
Microsoft really does not want Windows 11 running on ancient PCs
First seen on theregister.com Jump to article: www.theregister.com/2024/04/23/windows_11_cpu_requirements/
-
CISA adds Microsoft Windows Print Spooler flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA added the Windows Print Spooler flaw CVE-2022-38028 to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructur… First seen on securityaffairs.com Jump to article: securityaffairs.com/162295/hacking/cisa-adds-microsoft-windows-print-spooler-flaw-to-its-known-exploited-vulnerabilities-catalog.html
-
Russian APT28 Exploiting Windows Vulnerability with GooseEgg Tool
First seen on hackread.com Jump to article: www.hackread.com/russia-apt28-windows-vulnerability-gooseegg-tool/
-
‘MagicDot’ Windows Weakness Allows Unprivileged Rootkit Activity
Tags: windowsFirst seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/magicdot-windows-weakness-unprivileged-rootkit
-
Now all Windows 11 users are getting adverts to ‘make the Start menu great again’
Tags: windowsFirst seen on theregister.com Jump to article: www.theregister.com/2024/04/24/adverts_windows_11/