Hacking Archives - CyberConvoy Blog

GitLab Releases Urgent Security Patches for Critical Vulnerability

The vulnerability has been addressed in GitLab versions 16.3.4 and 16.2.7.

22 September

Fake WinRAR proof-of-concept exploit drops VenomRAT malware

09/22/2023
Cyber News
Hacking, Malware

The threat actor included a summary in the README file and a Streamable video demonstrating how to use the PoC, which added further legitimacy to the malicious package

22 September

Ransomware access broker steals accounts via Microsoft Teams phishing

In July 2023, Storm-0324 began using phishing lures sent over Teams with malicious links leading to a malicious SharePoint-hosted file

12 September

Microsoft September 2023 Patch Tuesday fixes 2 zero-days, 59 flaws

Microsoft has fixed an actively exploited local privilege elevation vulnerability that allows attackers to gain SYSTEM privileges

12 September

Free Download Manager site redirected Linux users to malware for years

The malware used in this campaign establishes a reverse shell to a C2 server and installs a Bash stealer that collects user data and account credentials

12 September

Outlook Hack: Microsoft Reveals How a Crash Dump Led to a Major Security Breach

A consumer signing system crash in April of 2021 resulted in a snapshot of the crashed process

9 September

Hackers Can Exploit Windows Container Isolation Framework to Bypass Endpoint Security

Pulling off the attack requires administrative permissions to communicate with the wcifs driver and it cannot be used to override files on the host system

1 September

Lazarus Group Exploits Critical Zoho ManageEngine Flaw to Deploy Stealthy QuiteRAT Malware

Targets include internet backbone infrastructure and healthcare entities in Europe and the U.S

26 August

FBI warns of patched Barracuda ESG appliances still being hacked

Tracked as CVE-2023-2868, the vulnerability was first exploited in October 2022 to backdoor ESG appliances and steal data from the compromised systems

26 August