article thumbnail

Four in-the-wild exploits, 13 critical patches headline bumper Patch Tuesday

Malwarebytes

The list of July 2021 Patch Tuesday updates looks endless. Looking at the urgency levels Microsoft has assigned to them, system administrators have their work cut out for them once again: 13 criticial patches 103 important patches. CVE-2021-31979 Windows Kernel Elevation of Privilege Vulnerability for Windows 7, Windows 8.1,

DNS 102
article thumbnail

Defending Against Misconfigured MFA & PrintNightmare Vulnerabilities

eSecurity Planet

By using a misconfigured Cisco Duo MFA implementation to force enrollment of a new device, the hackers were then able to use the “PrintNightmare” Windows Print Spooler vulnerability ( CVE-2021-34527 and CVE-2021-36958 ) to obtain administrator privileges. Inactive Accounts and Default Configurations.

VPN 117
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Top Cybersecurity Accounts to Follow on Twitter

eSecurity Planet

Also read: Top Endpoint Detection and Response (EDR) Solutions for 2021. — Eva (@evacide) October 4, 2021. pic.twitter.com/gvP2ne9kTR — Graham Cluley (@gcluley) March 25, 2021. Longtime network and system administrator Jack Daniel is a technology community activist, mentor, and storyteller.

article thumbnail

Addressing Remote Desktop Attacks and Security

eSecurity Planet

As remote desktop solutions are prevalent among IT and managed service providers (MSP), downstream clients can be at risk, as Kaseya experienced in 2021. In November 2021, an unauthorized third party called a Robinhood customer support employee and, through social engineering , gained access to the company’s customer support systems.

VPN 120