Exploit Archives - Page 2 of 12

New Cactus ransomware encrypts itself to evade antivirus

Researchers found that Cactus obtains initial access into the victim network by exploiting known vulnerabilities in Fortinet VPN appliances

8 May

Hackers start using double DLL sideloading to evade detection

These attack variations begin with an initial vector that leverages a clean application that sideloads a second-stage payload which in turn, sideloads a malicious malware loader DLL

5 May

Zyxel Firewall Devices Vulnerable to Remote Code Execution Attacks — Patch Now

Improper error message handling in some firewall versions could allow an unauthenticated attacker to execute some OS commands remotely by sending crafted packets to an affected device

29 April

Google ads push BumbleBee malware used by ransomware gangs

Considering that the trojanized software is targeting corporate users, infected devices make candidates for the beginning of ransomware attacks

27 April

Ransomware gangs abuse Process Explorer driver to kill security software

The drivers can run with kernel privileges on the victims' devices to disable security solutions and take over the system

19 April

Microsoft SQL servers hacked to deploy Trigona ransomware

The MS-SQL servers are being breached via brute-force or dictionary attacks that take advantage of easy-to-guess account credentials

19 April

Google Chrome Hit by Second Zero-Day Attack – Urgent Patch Update Released

It allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page

19 April

LockBit Ransomware Now Targeting Apple macOS Devices

Threat actors behind the LockBit ransomware operation have developed new artifacts that encrypt files on devices running Apple's macOS operating system

19 April

Google Releases Urgent Chrome Update to Fix Actively Exploited Zero-Day Vulnerability

Tracked as CVE-2023-2033, the high-severity vulnerability has been described as a type confusion issue in the V8 JavaScript engine

15 April

Microsoft Issues Patches for 97 Flaws, Including Active Ransomware Exploit

The security flaw under active exploitation is CVE-2023-28252 (CVSS score: 7.8), a privilege escalation bug in the Windows Common Log File System (CLFS) Driver

12 April

Exploit Archives - Page 2 of 12 - CyberConvoy Blog