article thumbnail

Microsoft Patch Tuesday, June 2023 Edition

Krebs on Security

today released software updates to fix dozens of security vulnerabilities in its Windows operating systems and other software. Microsoft Corp. It wouldn’t be a proper Patch Tuesday if we also didn’t also have scary security updates for organizations still using Microsoft Exchange for email.

article thumbnail

REvil Ransom Arrest, $6M Seizure, and $10M Reward

Krebs on Security

Prosecutors say Vasinskyi was involved in a number of REvil ransomware attacks, including the July 2021 attack against Kaseya , Miami-based company whose products help system administrators manage large networks remotely. Among those was carder[.]su,

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Microsoft provides more mitigation instructions for the PetitPotam attack

Malwarebytes

The attack could force remote Windows systems to reveal password hashes that could then be easily cracked. Microsoft quickly sent out an advisory for system administrators to stop using the now deprecated Windows NT LAN Manager (NTLM) to thwart an attack. Vulnerable systems. PetitPotam. ” New mitigation details.

article thumbnail

Four in-the-wild exploits, 13 critical patches headline bumper Patch Tuesday

Malwarebytes

Looking at the urgency levels Microsoft has assigned to them, system administrators have their work cut out for them once again: 13 criticial patches 103 important patches. Windows 10, Windows Server 2008, Windows Server 2012, Windows Server 2016, and Windows Server 2019. and Windows 10.

DNS 101
article thumbnail

Adconion Execs Plead Guilty in Federal Anti-Spam Case

Krebs on Security

For many years, Dye was a system administrator for Optinrealbig , a Colorado company that relentlessly pimped all manner of junk email, from mortgage leads and adult-related services to counterfeit products and Viagra.

article thumbnail

Who and What is Behind the Malware Proxy Service SocksEscort?

Krebs on Security

com was registered in 2008 to an Adrian Crismaru from Chisinau, Moldova. md , and that they were a systems administrator for sscompany[.]net. SSC asked fellow forum members for help in testing the security of a website they claimed was theirs: myiptest[.]com DomainTools says myiptest[.]com

Malware 196
article thumbnail

Feds Warn About Critical Infrastructure Ransomware Attacks, Vulnerabilities

eSecurity Planet

or Windows Server (2008 R2 SP1, 2012 Gold) allows attackers to execute arbitrary code via crafted HTTP requests. With the shortlist of widely exploited vulnerabilities, system administrators and security teams can quickly identify and patch key vulnerabilities to prevent malicious actors from exploiting the weaknesses.