article thumbnail

Hackers are using Zerologon exploits in attacks in the wild

Security Affairs

— Microsoft Security Intelligence (@MsftSecIntel) September 24, 2020. We strongly recommend customers to immediately apply security updates for CVE-2020-1472. We strongly recommend customers to immediately apply security updates for CVE-2020-1472. Don’t waste time, patch your system now! Pierluigi Paganini.

article thumbnail

Russian Cybercrime group is exploiting Zerologon flaw, Microsoft warns

Security Affairs

TA505 hacking group has been active since 2014 focusing on Retail and banking sectors. — Microsoft Security Intelligence (@MsftSecIntel) October 6, 2020. — Microsoft Security Intelligence (@MsftSecIntel) October 6, 2020. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

The number of exploits in the Echobot botnet reached 59

Security Affairs

At the time of its discovery, operators added 8 new exploits, but a few weeks later the popular expert Larry Cashdollar from Akamai’s Security Intelligence Response Team (SIRT) discovered a variant that included a total of 26 exploits. Authentication Bypass / Remote Command Execution EnGenius EnShare IoT Gigabit Cloud Service 1.4.11

article thumbnail

Iran-linked APT is exploiting the Zerologon flaw in attacks

Security Affairs

The Netlogon service is an Authentication Mechanism used in the Windows Client Authentication Architecture which verifies logon requests, and it registers, authenticates, and locates Domain Controllers. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. We strongly recommend patching.

article thumbnail

Iran-linked Phosphorous APT hacked emails of security conference attendees

Security Affairs

.” Microsoft Threat Intelligence Information Center (MSTIC) has uncovered activity by the threat actor PHOSPHOROUS, which has been masquerading as conference organizers and sending spoofed invitations by email to high-profile individuals. Get details here: [link] — Microsoft Security Intelligence (@MsftSecIntel) October 28, 2020.

Hacking 72
article thumbnail

API-based CASB Spinbackup Announces 2017 Results

Spinone

BSSO allows organizations to access and share highly confidential documents securely from anywhere.The Spinbackup Blockchain Single Sign On solution acts as a bridge between the public cloud services provided by the likes of Google G Suite and Microsoft Office 365, and Blockchain.

Backups 40
article thumbnail

Top VC Firms in Cybersecurity of 2022

eSecurity Planet

Company Sector Year Status Verodin Cybersecurity analytics 2018 Acquired by FireEye Kenna Security Risk management 2018 Acquired by Cisco PhishMe Incident response 2016 Acquired: P.E. PagerDuty Operations performance 2014 NYSE: PD Auth0 Identity management 2014 Acquired: Okta. Evolution Equity Partners. NightDragon.