A new vulnerability discovered in the Microsoft Windows operating system has been exploited as a zero-day attack by the Lazarus Group, a state-sponsored actor affiliated with North Korea. This vulnerability…
Tag: Microsoft
August’24 Patch Tuesday: Six Actively Exploited Zero-Day Vulnerabilities
In its August 2024 Patch Tuesday release, Microsoft addressed 88 vulnerabilities, including seven critical flaws and ten zero-day vulnerabilities. Notably, six of these zero-day vulnerabilities are currently being actively exploited…
Windows WiFi RCE Sell: CVE-2024-30078
During the Brandefense Intelligence Team operations, a threat actor was observed selling an exploit for CVE-2024-30078. This vulnerability allows remote code execution (RCE) via the WiFi driver on all Windows…
Microsoft June 2024 Patch Tuesday Fixes 51 Flaws, Including 18 RCEs
Yesterday marked Microsoft June 2024 Patch Tuesday, which introduces security updates for 51 flaws, including eighteen remote code execution (RCE) flaws and one publicly disclosed zero-day vulnerability. Key Fixes in…
Microsoft Security Slip-ups Allow Chinese Hackers Access to US Official Emails
Over the summer of 2023, Microsoft faced criticism for security blunders that allowed Chinese hackers to peek into the emails of US government officials. A detailed report pointed out that…
BlackCat Ransomware Is Targeted Vulnerable Microsoft Exchange Servers
[vc_row pix_particles_check=”” nav_skin=”light” consent_include=”include”][vc_column][vc_column_text]Cyber threat actors have been found to launch attack campaigns by exploiting vulnerable Microsoft Exchange servers to spread BlackCat ransomware. After gaining access to vulnerable Microsoft Exchange…
Follina: The Critical 0-Day Vulnerability Affects Windows Systems
[vc_row pix_particles_check=”” nav_skin=”light” consent_include=”include”][vc_column][vc_column_text]A 0-day vulnerability has been identified that allows threat actors to perform code execution activities on targeted Windows systems through Microsoft Office documents. It has been observed…
Detecting Phishing Emails?
How to Detect Phishing Emails? Phishing is swindling people to gather the account credentials of a specific website, credit card details, and strategic information of their company, infecting computers for…
Multiple Privilege Escalation Vulnerabilities Detected in Linux Operating System
Microsoft security researchers have detected two critical vulnerabilities that could allow threat actors to carry out a series of malicious activities with root privileges on Linux systems. The vulnerabilities collectively…
A New Backdoor in Microsoft: Serpent
[vc_row pix_particles_check=”” nav_skin=”light” consent_include=”include”][vc_column][vc_column_text]A new backdoor has been identified, used by threat actors in attacks targeting French construction, real estate, and government organizations, and distributed through popular Windows package managers….