Security Affairs

JANUARY 27, 2021

That’s one reason we added this new category and teamed up with Zoom to have them in the contest. A successful demonstration of an exploit in either of these products will earn the contestant $200,000 – quite the payout for a new category.” Microsoft Teams will also be a target. ” reads the announcement published by ZDI.

Hacking 118

Hacking Information Security Malware 118

Security Affairs

MARCH 23, 2023

#Pwn2Own pic.twitter.com/UTvzqxmi8E — Zero Day Initiative (@thezdi) March 22, 2023 The first hack of the day was performed by the AbdulAziz Hariri ( @abdhariri ) of Haboob SA ( @HaboobSa ), who demonstrated a zero-day attack against Adobe Reader in the Enterprise Applications category. Hariri earned $50,000 and 5 Master of Pwn points.

Hacking 93

Hacking Information Security 93

Bleeping Computer

APRIL 10, 2021

Windows 10 will soon let you select pre-configured categories, such as Gaming and Business, that tell the operating system how you plan on using the device. [.].

73

73

Malwarebytes

OCTOBER 29, 2021

Each time it was a Windows executable, containing up to 3 stages to break, in order to get the final flag. Any updates about the known winners in this category will be appended to this post. The first place winner in each category will additionally get any IT-related book of their choice. The application is a Windows executable.

Malware 110

Malware Education Accountability 110

Security Affairs

JUNE 21, 2022

Experts discovered a new kind of Windows NTLM relay attack dubbed DFSCoerce that allows taking control over a Windows domain. Researchers warn of a new Windows NTLM relay attack dubbed DFSCoerce that can be exploited by threat actors to take control over a Windows domain. To nominate, please visit:?. Pierluigi Paganini.

Authentication 116

Authentication Hacking Cybersecurity Information Security 116

Security Affairs

MAY 22, 2022

During the third day of the Pwn2Own Vancouver 2022 hacking competition, white hat hackers demonstrated a working exploit against Microsoft Windows 11 OS. nghiadt12 from Viettel Cyber Security demonstrated an exploit for an escalation of privilege via Integer Overflow on Microsoft Windows 11.

Hacking 123

Hacking Cybersecurity Information Security 123

Krebs on Security

SEPTEMBER 14, 2022

This month’s Patch Tuesday offers a little something for everyone, including security updates for a zero-day flaw in Microsoft Windows that is under active attack, and another Windows weakness experts say could be used to power a fast-spreading computer worm. ” And Adobe axed 63 vulnerabilities in a range of products. .”

Spyware 182

Spyware Cyber threats Security Defenses Cyber Attacks 182

Security Affairs

MARCH 19, 2020

During the first day of the Pwn2Own 2020 hacking competition, participants earned a total of $180,000 for exploits targeting Windows 10, Ubuntu Desktop and macOS. ” The popular Team Fluoroacetate (Amat Cama and Richard Zhu) that won past editions, earned $40,000 for a local privilege escalation exploit targeting Windows 10.

Hacking 113

Hacking Advertising Cybercrime Software 113

Malwarebytes

JUNE 9, 2022

As cybercriminals adapted and restrictions eased, detection numbers surged again in 2021, on Windows business machines and home computers, and on Macs. Windows malware detections from January 2019 to May 2022. Top 10 Windows malware detection categories 2021. Dramatic change in email detections.

Threat Detection 98

Threat Detection Malware Adware Accountability 98

Security Affairs

MAY 25, 2022

Chaining the above vulnerabilities, an attacker can trick a vulnerable client into connecting to a rogue server, potentially leading to arbitrary code execution due to an update package downgrade in Zoom Client for Windows that could allow the installation of a less secure version. To nominate, please visit:?.

Hacking 139

Hacking Cybersecurity Information Security 139

Malwarebytes

DECEMBER 19, 2022

Every two months, experts at AV-Test evaluate Windows antivirus software across three categories: Protection against malware infections such as viruses, worms or Trojan horses. All products can achieve a maximum of 6 points each in of the three categories, making 18 points the best possible test result.

Malware 75

Malware Software Antivirus Internet 75

Security Affairs

MAY 15, 2024

Vulnerability Category Vulnerability Impact Severity CVSS base score CVSS vector CVE Number Use After Free ( CWE-416 ) Arbitrary code execution Critical 7.8 Vulnerability Category Vulnerability Impact Severity CVSS base score CVSS vector CVE Number Use After Free ( CWE-416 ) Arbitrary code execution Critical 7.8

Software 70

Software Hacking Information Security 70

Security Affairs

DECEMBER 14, 2021

Adobe warns of threat actors that could exploit critical vulnerabilities in multiple products running on Windows and macOS systems. Adobe has issued critical warnings for more than 60 vulnerabilities in multiple products running on Windows and macOS machines. and important vulnerabilities in Photoshop for Windows and macOS.?An

Hacking 100

Hacking Information Security 100

eSecurity Planet

MAY 17, 2021

The top category of threats detected across endpoints by Cisco Secure Endpoint was dual-use tools leveraged for exploitation and post-exploitation tasks. Those four categories are responsible for more than 80 percent of critical IoCs. Disable or restrict Windows Remote Management while you’re at it.

Threat Detection 129

Threat Detection Malware Banking Internet 129

Security Affairs

JULY 26, 2021

Microsoft published mitigations for the recently discovered PetitPotam attack that allows attackers to force remote Windows machines to share their password hashes. The company pointed out that PetitPotam is a classic NTLM Relay Attack, a category of attack that has been deeply documented by the IT giant. ” reads the advisory.

Authentication 118

Authentication Passwords Encryption Hacking 118

The Last Watchdog

OCTOBER 30, 2023

LW: Your chapter teasers suggest there remains a ton of viable attack paths in the nooks and crannies of Windows systems; is this where attackers are making hay with Living off the Land (LotL) tactics? Windows is a very complex operating system and there are a ton of native capabilities that attackers can leverage.

Engineering 311

Engineering Mobile Internet Internet 311

SecureList

SEPTEMBER 16, 2021

If the site falls into one of 14 undesirable categories, the product sends an alert to Kaspersky Security Network. However, anonymous statistics are collected for all the 14 categories. The information in this report was obtained from computers running Windows and macOS. Website categorization. Internet communication.

Accountability 106

Accountability Mobile Media Banking 106

Cisco Security

MARCH 23, 2021

We’ll focus on specific industries, looking at two things: the top threat categories they face, and the categories that they’re more likely to encounter when compared to other industries. All of this gives us a window into the categories of threats that generate the most traffic for various organizations.

DNS 137

DNS Financial Services Manufacturing Healthcare 137

Security Affairs

MAY 11, 2021

Adobe confirmed that a zero-day vulnerability affecting Adobe Reader for Windows has been exploited in the wild in limited attacks. One of the issues, tracked as CVE-2021-28550, is a use-after-free memory corruption flaw that affects Adobe Reader for Windows that has been exploited in the wild in limited attacks. Pierluigi Paganini.

Software 116

Software Media Hacking Information Security 116

Schneier on Security

MARCH 27, 2023

An impressive array of hacks were demonstrated at the first day of the Pwn2Own conference in Vancouver: On the first day of Pwn2Own Vancouver 2023, security researchers successfully demoed Tesla Model 3, Windows 11, and macOS zero-day exploits and exploit chains to win $375,000 and a Tesla Model 3.

Hacking 45

Hacking 45

Security Affairs

MAY 7, 2022

Experts spotted a malware campaign that is the first one using a technique of hiding a shellcode into Windows event logs. In February 2022 researchers from Kaspersky spotted a malicious campaign using a novel technique that consists of hiding the shellcode in Windows event logs. SecurityAffairs – hacking, Windows event logs).

Malware 85

Malware Encryption Hacking Cybersecurity 85

Security Affairs

MAY 30, 2022

A zero-day flaw in Microsoft Office that could be exploited by attackers to achieve arbitrary code execution on Windows systems. Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. The cybersecurity researcher nao_sec discovered a malicious Word document (“05-2022-0438.doc”)

Cybersecurity 145

Cybersecurity Hacking Information Security Malware 145

The Last Watchdog

JANUARY 4, 2022

A big reason why APIs haven’t gotten the attention they deserve may be that, from a security standpoint, they fall into a category of hacking tactics known as Living off the Land, or LotL. APIs are an access mechanism that come into play everywhere across the breadth of digital commerce – not just inside of Windows systems.

Digital transformation 260

Digital transformation Hacking Architecture Cyber Risk 260

Security Affairs

JUNE 8, 2022

0patch researchers released an unofficial security patch for a Windows zero-day vulnerability dubbed DogWalk. 0patch released an unofficial security patch for a new Windows zero-day vulnerability in the Microsoft Support Diagnostic Tool (MSDT) dubbed DogWalk. The expert warned to pay special attention to not open .diagcab

Internet 84

Internet Internet Hacking Cybersecurity 84

Security Affairs

APRIL 13, 2021

and earlier versions Windows and macOS Photoshop 2021 22.3?and Windows and macOS. In the following table are reported vulnerability details: Vulnerability Category Vulnerability Impact Severity CVE Numbers Out-of-bounds? Affected Versions are: Product Affected version Platform Photoshop 2020 21.2.6 and earlier?versions????

Hacking 95

Hacking Information Security Malware 95

Security Affairs

JUNE 10, 2022

The attacks were aimed at both Linux and Windows operating systems using different infection chains. In the Windows attack chain, the checkit2.exe Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g.

Cryptocurrency 117

Cryptocurrency Malware Hacking Cybersecurity 117

CyberSecurity Insiders

JULY 30, 2021

Reflected, Stored and DOM-Based XSS still tops the root cause category, but the highest growth was seen in privilege management issues. Windows print spooler?vulnerability For 1675, the Microsoft Windows Print Spooler service fails to restrict access to functionality that allows users to add printers and related drivers.

Engineering 126

Engineering VPN Authentication Cybersecurity 126

Security Affairs

JULY 14, 2020

.” Adobe has released a security update for the Adobe Download Manager for Windows that addresses a? Adobe addresses critical and important vulnerabilities in Creative Cloud Desktop Application for Windows. critical vulnerability, tracked as CVE-2020-9688,?that that could lead to?arbitrary arbitrary code execution.?? .

Media 67

Media Advertising Hacking Information Security 67

Security Affairs

MAY 12, 2020

“Adobe has released security updates for Adobe Acrobat and Reader for Windows and macOS. Vulnerability Category Vulnerability Impact Severity CVE Number Null Pointer Application denial-of-service Important??? Vulnerability Category? ???? These updates address critical and important vulnerabilities. Severity? ?

Software 87

Software Advertising Hacking 87

Security Affairs

JUNE 7, 2022

Experts reported that the threat actor used two main techniques to evade anti-virus detection by disabling Windows Defender. The second technique involved creating a GPO (Group Policy Object) on a compromised Domain Controller, which would push out a series of changes to the Windows Registry of domain-joined hosts.

Ransomware 140

Ransomware Backups Malware Firewall 140

Security Affairs

APRIL 7, 2021

The Team Viettel also earned $40,000 for a local privilege escalation vulnerability in Windows 10, while the white hat hacker Ryota Shiga of Flatt Security earned $30,000 for a privilege escalation vulnerability in Ubuntu Desktop. The overall payout pool for Pwn2Own 2021 exceeds $1.5 million in cash and other prizes. Pierluigi Paganini.

Authentication 62

Authentication Hacking Information Security Malware 62

Security Affairs

AUGUST 4, 2022

The attackers were delivering the malware using archive files and Microsoft Office documents exploiting the Follina Windows flaw ( CVE-2022-30190 ). Attacks exploiting the Windows Follina flaw were spotted on June 7, 2022, when researchers observed threat actors using a weaponized Microsoft Office document titled ???????.docx.

Malware 93

Malware Information Security Encryption Phishing 93

Security Affairs

MAY 19, 2022

This year, 17 contestants are attempting to exploit 21 targets across multiple categories. All the attempts made during the first day were successful, the participants explored a total of 16 flaws affecting Microsoft Teams, Oracle VirtualBox, Firefox, Windows 11, Ubuntu, and Safari.

Hacking 120

Hacking Cybersecurity Information Security 120

Approachable Cyber Threats

MARCH 31, 2021

Category Awareness Risk Level. This next one may seem obvious, but make sure all doors and windows are locked. Many burglars enter through unlocked windows. Water damage is one of the highest insurance claim categories for homeowners. Hive Systems President and CEO Alex Nette was recently featured on the Redfin Blog.

Insurance 98

Insurance Media Mobile Risk 98

eSecurity Planet

MAY 10, 2022

Hackers have found a way to infect Windows Event Logs with fileless malware , security researchers have found. During a “very targeted” campaign, hackers used Windows Event Logs to inject shellcode payloads and operate stealthily. How the Attackers Injected Code in Windows Logs. Here’s What You Need to Watch.

Malware 106

Malware Architecture Encryption Antivirus 106

Security Affairs

JULY 21, 2020

Adobe has released a security update for Adobe Bridge for Windows and macOS?, Below the vulnerability details: Vulnerability Category Vulnerability Impact Severity CVE Numbers Out-of-bounds read Arbitrary code execution Critical CVE-2020-9675 Out-of-bounds write? for Windows and macOS that address critical vulnerabilities.

Advertising 68

Advertising Mobile Media Hacking 68

CyberSecurity Insiders

FEBRUARY 9, 2021

These categories of sensitive information are protected by regulations such as the GDPR, CCPA, HIPAA, and PCI DSS. Data classification is the process of organizing data that your organization collects into relevant categories for more efficient use and protection across company networks. Develop a classification system .

Unstructured Data 145

Unstructured Data Risk Education Marketing 145