PrivEsc Archives - CyberConvoy Blog

Outlook Hack: Microsoft Reveals How a Crash Dump Led to a Major Security Breach

A consumer signing system crash in April of 2021 resulted in a snapshot of the crashed process

9 September

Almost 40% of Ubuntu users vulnerable to new privilege elevation flaws

CVE-2023-2640 is a high-severity (CVSS v3 score: 7.8) vulnerability in the Ubuntu Linux kernel caused by inadequate permission checks allowing a local attacker to gain elevated privileges

29 July

Grafana warns of critical auth bypass due to Azure AD integration

The discovered account takeover vulnerability is tracked as CVE-2023-3128 and received a CVSS v3.1 score of 9.4, rating it critical severity

1 July

Cisco fixes AnyConnect bug giving Windows SYSTEM privileges

This vulnerability exists because improper permissions are assigned to a temporary directory created during the upgrade process

10 June

VMware Releases Critical Patches for Workstation and Fusion Software

A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host

26 April

Microsoft shares tips on detecting Outlook zero-day exploitation

The threat actors can exploit it by sending messages with extended MAPI properties containing UNC paths to attacker-controlled SMB shares

27 March

Active Directory Domain Compromised in Under 24 Hours

01/14/2023
Cyber News
Exploit, Malware, Phishing, PrivEsc, Ransomware

IcedID malware attack enabled the threat actor to compromise the Active Directory domain in less than 24 hours after gaining initial access

14 January

New Python malware backdoors VMware ESXi servers for remote access

12/14/2022
Cyber News
Exploit, Hacking, Hardening, Patching, PrivEsc

A previously undocumented Python backdoor targeting VMware ESXi servers has been spotted, enabling hackers to execute commands remotely on a compromised system

14 December

Dell, HP, and Lenovo Devices Found Using Outdated OpenSSL Versions

12/03/2022
Cyber News
Hardening, PrivEsc, Security, SupplyChain

An analysis of firmware images across devices from Dell, HP, and Lenovo has revealed the presence of outdated versions of the OpenSSL cryptographic library, underscoring a supply chain risk

3 December

Google releases 165 YARA rules to detect Cobalt Strike attacks

11/23/2022
Cyber News
Exploit, Hacking, PrivEsc, RCE, Security

The Google Cloud Threat Intelligence team has open-sourced YARA Rules and a VirusTotal Collection of indicators of compromise (IOCs) to help defenders detect Cobalt Strike components in their networks

23 November