MARCH 29, 2023
[vc_row pix_particles_check=”” nav_skin=”light” consent_include=”include”][vc_column][vc_column_text]
[/vc_column_text][vc_column_text]
Here are the insights from dark-web. Learn and protect yourself before threats reach you. If you want to reach more insight, follow us on Twitter and Subscribe to our Ransomware Newsletter![/vc_column_text][vc_empty_space height=”10px”][vc_single_image image=”18369″ img_size=”medium” alignment=”center”][vc_empty_space height=”10px”][vc_column_text]
[/vc_column_text][vc_empty_space height=”10px”][vc_single_image image=”18370″ img_size=”large” alignment=”center”][vc_empty_space height=”10px”][vc_column_text]
[/vc_column_text][vc_empty_space height=”10px”][vc_column_text]
What happened in cyberspace in last two weeks? Here is a quick shot of security news from the world.
Avast security researchers have observed that the Adobe Acrobat Sign software is being manipulated in Redline Stealer distribution campaigns by threat actors. It allows registered users to send document signing requests to anyone. This will create an email that will be sent to the targeted recipients containing a link to the document (PDF, Word document, HTML) that will be hosted on Adobe’s servers. The sender can also add text to the email, which is an important detail that can be easily exploited by cybercriminals.
[/vc_column_text][pix_button btn_text=”Learn More” btn_target=”true” btn_size=”normal” btn_effect=”” btn_hover_effect=”” btn_add_hover_effect=”” btn_div=”text-right” btn_link=”https://brandefense.io/security-news/adobe-acrobat-sign-redline-stealer/”][vc_empty_space height=”10px”][vc_column_text]
Microsoft has released its March 2023 Patch Tuesday software updates, which include two zero-days. The first vulnerability is an information disclosure issue that can allow a remote attacker to send specially crafted email messages to a victim’s inbox. This will cause Windows Mail or Outlook to crash and restart, allowing the attacker to obtain the NTLMv2 hash of the victim’s account.
[/vc_column_text][pix_button btn_text=”Learn More” btn_target=”true” btn_size=”normal” btn_effect=”” btn_hover_effect=”” btn_add_hover_effect=”” btn_div=”text-right” btn_link=”https://brandefense.io/security-news/microsoft-march-2023-updates/”][vc_empty_space height=”10px”][vc_column_text]
[/vc_column_text][vc_empty_space height=”10px”][vc_single_image image=”18330″ img_size=”large” alignment=”center”][vc_empty_space height=”10px”][vc_column_text]
Hitachi Energy has confirmed a data breach as part of the GoAnywhere attacks. The Cl0p ransomware gang behind the attacks exploited a 0-day vulnerability in Fortra GoAnywhere MFT (Managed File Transfer) to gain access. Recently, it was discovered that a third-party software provider named FORTRA GoAnywhere MFT was vulnerable to a zero-day vulnerability and was being used in attacks by the Cl0p ransomware group targeting institutions/organizations in various countries.
[/vc_column_text][pix_button btn_text=”Learn More” btn_target=”true” btn_size=”normal” btn_effect=”” btn_hover_effect=”” btn_add_hover_effect=”” btn_div=”text-right” btn_link=”https://brandefense.io/security-news/goanywhere-target-japan-based-hitachi/”][vc_empty_space height=”10px”][vc_column_text]
Three critical vulnerabilities have been discovered in Apache Fineract, a platform designed to bring the world’s unbanked population into the modern financial ecosystem. These vulnerabilities, namely CVE-2023-25195, CVE-2023-25196, and CVE-2023-25197, could allow unauthorized users to access sensitive data or take control of the system.
[/vc_column_text][pix_button btn_text=”Learn More” btn_target=”true” btn_size=”normal” btn_effect=”” btn_hover_effect=”” btn_add_hover_effect=”” btn_div=”text-right” btn_link=”https://brandefense.io/security-news/sql-injection-in-apache-fineract/”][vc_empty_space height=”10px”][vc_column_text]
Hackers exploit a severe vulnerability, CVE-2022-41328, in FortiOS – an operating system widely used by governments and large organizations. This flaw enables them to execute arbitrary code and has already caused data loss and system corruption in targeted organizations.
[/vc_column_text][pix_button btn_text=”Learn More” btn_target=”true” btn_size=”normal” btn_effect=”” btn_hover_effect=”” btn_add_hover_effect=”” btn_div=”text-right” btn_link=”https://brandefense.io/security-news/fortios-vulnerability-exploitation/”][vc_empty_space][/vc_column][/vc_row]
Take control of your digital security with an exclusive demo of our powerful threat management platform.