CyberConvoy Blog

High-Severity Flaws Uncovered in Atlassian Products and ISC BIND Server

Several security flaws were discovered that could be exploited to achieve denial-of-service (DoS) and remote code execution

22 September

Apple emergency updates fix 3 new zero-days exploited in attacks

Local attackers can exploit this flaw (CVE-2023-41992) to escalate privileges

22 September

GitLab Releases Urgent Security Patches for Critical Vulnerability

The vulnerability has been addressed in GitLab versions 16.3.4 and 16.2.7.

22 September

Fake WinRAR proof-of-concept exploit drops VenomRAT malware

09/22/2023
Cyber News
Hacking, Malware

The threat actor included a summary in the README file and a Streamable video demonstrating how to use the PoC, which added further legitimacy to the malicious package

22 September

Fake Cisco Webex Google Ads abuse tracking templates to push malware

The threat actors can exploit a loophole in the Google Ad platform's tracking template that allows them to redirect at will while complying with Google's policy

15 September

Ransomware access broker steals accounts via Microsoft Teams phishing

In July 2023, Storm-0324 began using phishing lures sent over Teams with malicious links leading to a malicious SharePoint-hosted file

12 September

Microsoft September 2023 Patch Tuesday fixes 2 zero-days, 59 flaws

Microsoft has fixed an actively exploited local privilege elevation vulnerability that allows attackers to gain SYSTEM privileges

12 September

Free Download Manager site redirected Linux users to malware for years

The malware used in this campaign establishes a reverse shell to a C2 server and installs a Bash stealer that collects user data and account credentials

12 September

Google Rushes to Patch Critical Chrome Vulnerability Exploited in the Wild – Update Now

09/12/2023
Cyber News
0day, Exploit

CVE-2023-41064 relates to a buffer overflow issue in the Image I/O component that could lead to arbitrary code execution when processing a maliciously crafted image

12 September