Hacking Archives - Page 13 of 16

Microsoft fixes Windows zero-day bug exploited to push malware

11/11/2022
Cyber News
Exploit, Hacking, Malware, Patching, RCE

Windows has fixed a bug that prevented Mark of the Web flags from propagating to files within downloaded ISO files

11 November

Citrix urges admins to patch critical ADC, Gateway auth bypass

11/08/2022
Cyber News
0day, Exploit, Hacking, Patching, PrivEsc

Citrix is urging customers to install security updates for a critical authentication bypass vulnerability in Citrix ADC and Citrix Gateway.

8 November

Emotet botnet is blasting malware again after 5 month’s break

The Emotet malware operation is again spamming malicious emails after almost a five-month "vacation"

5 November

Fortinet Patches 6 High-Severity Vulnerabilities

Fortinet on Tuesday informed customers about 16 vulnerabilities discovered in the company's products, including six flaws that have been assigned a "high" severity rating

2 November

Critical RCE Vulnerability Reported in ConnectWise Server Backup Solution

11/01/2022
Cyber News
0day, Exploit, Hacking, Patching, RCE, Security

ConnectWise's advisory notes that the flaw affects Recover v2.9.7 and earlier, and R1Soft SBM v6.16.3 and earlier are impacted by the critical flaw

1 November

OpenSSL fixes two high severity vulnerabilities, what you need to know

11/01/2022
Cyber News
0day, Exploit, Hacking, Patching, PrivEsc, RCE, Security

CVE-2022-3602 is an arbitrary 4-byte stack buffer overflow that could trigger crashes or lead to remote code execution (RCE)

1 November

Text4Shell, a remote code execution bug in Apache Commons Text library

Researcher discovered a remote code execution vulnerability in the open-source Apache Commons Text library

20 October

Microsoft data breach exposes customers’ contact info, emails

10/20/2022
Cyber News
Breach, Business, Exploit, Hacking, Security

Threat actors who accessed the bucket may use this information in different forms for extortion, blackmailing, creating social engineering tactics with the help of exposed information, or simply selling the information to the highest bidder on the dark web and Telegram channels

20 October

Tear in Microsoft Azure Service Fabric can give attackers full admin privileges

10/19/2022
Cyber News
Hacking, Hardening, Patching, PrivEsc, Security

The size of the threat depends on the number of clusters set up within user organizations and if those have non-admin users that use the CreateComposeApplication role to create applications and the vulnerable SFXv1

19 October

Experts Warn of Stealthy PowerShell Backdoor Disguising as Windows Update

10/19/2022
Cyber News
Exploit, Hacking, Malware, PrivEsc, Security

Some notable commands issued include exfiltrating the list of running processes, enumerating files in specific folders, launching whoami, and deleting files under the public user folders

19 October

Hacking Archives - Page 13 of 16 - CyberConvoy Blog