Microsoft has released a new security update for two Microsoft Exchange Server zero-day vulnerabilities (CVE-2022-41040 and CVE-2022-41082) dubbed “ProxyNotShell” under limited targeted attacks in the wild.
Microsoft update for Microsoft Exchange Server zero-day ProxyNotShell vulnerabilities Read More »
Microsoft has been monitoring a threat actor deploying malicious OAuth apps on compromised cloud tenants to spread spam.
Threat actor deploys malicious OAuth apps on compromised cloud tenants to spread spam Read More »
Microsoft has released an out-of-band patch for a Endpoint Configuration Manager vulnerability CVE-2022-37972.
Microsoft releases out-of-band patch for Endpoint Configuration Manager Read More »
The Microsoft September 2022 Security Updates includes patches and advisories for 63 vulnerabilities. Five of those are rated Critical severity, one that addresses a previously disclosed Spectre-BHP flaw, and a zero-day exploited in the wild.
The Cybersecurity and Infrastructure Security Agency (CISA) has added seven vulnerabilities to its Known Exploited Vulnerabilities Catalog, to include Apple (2), Microsoft (2), SAP, Google Chrome, and Palo Alto Networks.
CISA adds 7 vulnerabilities to Known Exploited Vulnerabilities Catalog Read More »
Attackers have been exploiting a well-known open redirect vulnerability on American Express and Snapchat sites to phish for victim’s personal data.
Attackers exploit open redirect vulnerability on Amex and Snapchat sites Read More »
Knotweed threat actors have exploited Microsoft and Adobe 0-day vulnerabilities in targeted attacks against European and Central American customers. The actors also developed Subzero malware used in these attacks.
Knotweed threat actors exploit Microsoft and Adobe 0-days and deliver Subzero malware Read More »
Security researchers from Microsoft warn threat actors from North Korea are using H0lyGh0st ransomware to target small and midsize businesses around the globe.
H0lyGh0st ransomware actors target small and midsize businesses Read More »
Researchers from Microsoft warn that toll fraud Android malware has been one of the most prevalent malware downloaded from the Google Play Store since 2017 and is a major threat to steal your money.
Toll fraud Android malware is major threat to steal your money Read More »
The Cybersecurity and Infrastructure Security Agency (CISA) has added a former zero-day Windows LSA Spoofing Vulnerability (CVE-2022-26925) to its Known Exploited Vulnerabilities Catalog.
