Daily Archives: Aralık 14, 2022

Çağlar Arlı - 107 Views

14Ara

Update now! Two zero-days fixed in 2022’s last patch Tuesday

Categories: Exploits and vulnerabilities

Categories: News

Tags: patch Tuesday

Tags: Microsoft

Tags: Android

Tags: Apple

Tags: Mozilla

Tags: Google

Tags: Sap

Tags: Citrix

Tags: Fortinet

Tags: Cisco

Tags: CVE-2022-44698

Tags: MotW

Tags: CVE-2022-44710

Tags: race condition

Tags: CVE-2022-44670

Tags: CVE-2022-44676

Tags: CVE-2022-41076

Tags: remote powershell

The last patch Tuesday of 2022 is here—find out what Microsoft and many others have fixed

Çağlar Arlı - 187 Views

14Ara

Exploiting ONLYOFFICE Web Sockets for Unauthenticated Remote Code Execution

About 18 months ago, I was conducting a pentest of a document management platform. It was designed with the goal of providing a secure document storage and sharing solution for some high impact use cases. In order to allow document editing…

Çağlar Arlı - 100 Views

14Ara

New GoTrim Botnet Attempting to Break into WordPress Sites’ Admin Accounts

A new Go-based botnet has been spotted scanning and brute-forcing self-hosted websites using the WordPress content management system (CMS) to seize control of the targeted systems.
“This new brute forcer is part of a new campaign we have named GoTrim b…

Çağlar Arlı - 109 Views

14Ara

Ransomware Attackers Use Microsoft-Signed Drivers to Gain Access to Systems

Microsoft on Tuesday disclosed it took steps to suspend accounts that were used to publish malicious drivers that were certified by its Windows Hardware Developer Program were used to sign malware.
The tech giant said its investigation revealed the act…

Çağlar Arlı - 115 Views

14Ara

Introducing quarantine for Cloud Storage Scanning in Nebula

Categories: Business

We’re excited to announce quarantine for Malwarebytes Cloud Storage Scanning (CSS), a new feature which allows you to automatically quarantine threats found in your cloud storage repositories.

Çağlar Arlı - 103 Views

14Ara

Play ransomware attacks city of Antwerp

Categories: News

Categories: Ransomware

Tags: Antwerp

Tags: Diest

Tags: Zwijndrecht

Tags: Play

Tags: Ragnar Locker

Tags: ransomware

Play ransomware is claiming credit for a devastating attack on Belgium’s largest city.

(Read more…)

The post Play ransomware attacks city of Antwerp appeared first on Malwarebytes Labs.

Çağlar Arlı - 101 Views

14Ara

Why PCI DSS 4.0 Should Be on Your Radar in 2023

Protecting customer data is critical for any business accepting online payment information. The Payment Card Industry Data Security Standard (PCI DSS), created by leading credit card companies, establishes best practices for protecting consumers’ infor…

Çağlar Arlı - 109 Views

14Ara

FarsightAD – PowerShell Script That Aim To Help Uncovering (Eventual) Persistence Mechanisms Deployed By A Threat Actor Following An Active Directory Domain Compromise

FarsightAD is a PowerShell script that aim to help uncovering (eventual) persistence mechanisms deployed by a threat actor following an Active Directory domain compromise. The script produces CSV / JSON file exports of various objects and their a…

Çağlar Arlı - 99 Views

14Ara

December 2022 Patch Tuesday: Get Latest Security Updates from Microsoft and More

Tech giant Microsoft released its last set of monthly security updates for 2022 with fixes for 49 vulnerabilities across its software products.
Of the 49 bugs, six are rated Critical, 40 are rated Important, and three are rated Moderate in severity. Th…

Çağlar Arlı - 111 Views

14Ara

Hackers Actively Exploiting Citrix ADC and Gateway Zero-Day Vulnerability

The U.S. National Security Agency (NSA) on Tuesday said a threat actor tracked as APT5 has been actively exploiting a zero-day flaw in Citrix Application Delivery Controller (ADC) and Gateway to take over affected systems.
The critical remote code exec…

1 2 >>

P	S	Ç	P	C	C	P
			1	2	3	4
5	6	7	8	9	10	11
12	13	14	15	16	17	18
19	20	21	22	23	24	25
26	27	28	29	30	31

Annanowa

Daily Archives: Aralık 14, 2022

Update now! Two zero-days fixed in 2022’s last patch Tuesday

Exploiting ONLYOFFICE Web Sockets for Unauthenticated Remote Code Execution

New GoTrim Botnet Attempting to Break into WordPress Sites’ Admin Accounts

Ransomware Attackers Use Microsoft-Signed Drivers to Gain Access to Systems

Introducing quarantine for Cloud Storage Scanning in Nebula

Play ransomware attacks city of Antwerp

Why PCI DSS 4.0 Should Be on Your Radar in 2023

FarsightAD – PowerShell Script That Aim To Help Uncovering (Eventual) Persistence Mechanisms Deployed By A Threat Actor Following An Active Directory Domain Compromise

December 2022 Patch Tuesday: Get Latest Security Updates from Microsoft and More

Hackers Actively Exploiting Citrix ADC and Gateway Zero-Day Vulnerability

Son Yazılar

Son Yorumlar