Sys-Admin & InfoSec Channel. Страница 7

OneNote documents have emerged as a new malware infection vector

The content of this post is solely the responsibility of the author.  AT&T does not adopt or endorse any of the views, positions, or information provided by the author in this article.  Intro In February 2022, Microsoft disabled VBA macros on documents due to their frequent use as a malware distribution method. This move prompted malware authors to seek out new ways to distribute their payloads, resulting in an increase in the use of other infection vectors, such as password-encr

1+ Million Sites Affected by Critical Privilege Escalation Vulnerability in Essential Addons for Elementor Plugin

This blog post is about the Essential Addons for Elementor plugin vulnerability. If you’re a Essential Addons for Elementor user, please update the plugin to at least version 5.7.2. Patchstack Developer and Business plan users are protected from the vulnerability. You can also sign up for the Patchstack Community plan to be notified about vulnerabilities […]

Threat Assessment: Royal Ransomware

Royal ransomware has made notable attacks against sectors such as healthcare and infrastructure. Our overview includes victimology and functionality.

Security Vulnerabilities fixed in Firefox 113

RapperBot DDoS Botnet Expands into Cryptojacking | FortiGuard Labs

FortiGuard Labs discusses the changes observed in a new RapperBot campaign and provides a technical analysis of the variant upgraded with miner capabilities. Learn more.…

Fake system update drops Aurora stealer via Invalid Printer loader

Not all system updates mean well, and some will even trick you into installing malware.

From One Vulnerability to Another: Outlook Patch Analysis Reveals Important Flaw in Windows API | Akamai

Akamai researchers explore a new critical vulnerability in Windows that could lead to a bypass of CVE-2023-23397’s mitigation.

New Akira Ransomware Operation Hits Corporate Networks | Black Hat Ethical Hacking

A new ransomware operation named Akira has been quietly and systematically infiltrating corporate networks worldwide since its launch in March 2023.

When Good APIs Go Bad: Uncovering 3 Azure API Management Vulnerabilities - Ermetic

Learn how now-patched Azure API Management service vulnerabilities revealed by the Ermetic research team enabled malicious actions

About the security content of AirPods and Beats firmware updates

This document describes the security content of AirPods and Beats firmware updates.

The LockBit ransomware (kinda) comes for macOS

Analyzing an arm64 mach-O version of LockBit

FP-2023-01 - NETGEAR’s ProSAFE® Network Management System NMS300

Flashpoint disclosed a new vulnerability affecting NETGEAR's ProSAFE® Network Management System NMS300.