CyberConvoy Blog

Microsoft August 2023 Patch Tuesday warns of 2 zero-days, 87 flaws

This month's Patch Tuesday fixes two zero-day vulnerabilities, with both exploited in attacks and one of them publicly disclosed

8 August

Malicious npm Packages Found Exfiltrating Sensitive Data from Developers

The harvested data, which could also contain credentials and valuable intellectual property, is ultimately transmitted to the server in the form of a ZIP archive file

4 August

New PaperCut critical bug exposes unpatched servers to RCE attacks

08/04/2023
Cyber News
0day, Patching, RCE

PaperCut recently fixed a critical security vulnerability in its NG/MF print management software that allows unauthenticated attackers to gain remote code execution on unpatched Windows servers

4 August

Microsoft fixes flaw discovered by Tenable

This created an opportunity for attackers to exploit unsecured Azure Function hosts and intercept OAuth client IDs and secrets

4 August

Fake VMware vConnector package on PyPI targets IT pros

A malicious package that mimics the VMware vSphere connector module ‘vConnector’ was uploaded on the Python Package Index (PyPI) under the name VMConnect

4 August

Threat actors abuse Google AMP for evasive phishing attacks

The AMP URLs trigger a redirection to a malicious phishing site, and this additional step also adds an analysis-disrupting layer

2 August

Almost 40% of Ubuntu users vulnerable to new privilege elevation flaws

CVE-2023-2640 is a high-severity (CVSS v3 score: 7.8) vulnerability in the Ubuntu Linux kernel caused by inadequate permission checks allowing a local attacker to gain elevated privileges

29 July