相關新聞
Windows Mark of the Web bypass zero-day gets unofficial patch
A free unofficial patch has been released through the 0patch platform to address an actively exploited zero-day flaw in the Windows Mark of the Web (MotW) security mechanism. [...]
Bleepingcomputer
2022年10月18日 620 觀看次數
New PHP information-stealing malware targets Facebook accounts
Threat analysts have spotted a new Ducktail campaign using a new infostealer variant and novel TTPs (tactics, techniques, and procedures), while the Facebook users it targets are no longer limited to holders of business accounts. [...]
Bleepingcomputer
2022年10月16日 613 觀看次數
Over 45,000 VMware ESXi servers just reached end-of-life
Over 45,000 VMware ESXi servers inventoried by Lansweeper just reached end-of-life (EOL), with VMware no longer providing software and security updates unless companies purchase an extended support contract. [...]
Bleepingcomputer
2022年10月16日 568 觀看次數
Almost 900 servers hacked using Zimbra zero-day flaw
Almost 900 servers have been hacked using a critical Zimbra Collaboration Suite (ZCS) vulnerability, which at the time was a zero-day without a patch for nearly 1.5 months. [...]
Bleepingcomputer
2022年10月15日 527 觀看次數
Feature-Rich 'Alchimist' Cyberattack Framework Targets Windows, Mac, Linux Environments
The comprehensive, multiplatform framework comes loaded with weapons, and it is likely another effort by a China-based threat group to develop an alternative to Cobalt Strike and Sliver.
Dark Reading
2022年10月14日 588 觀看次數
Unofficial WhatsApp Android app caught stealing users’ accounts
A new version of an unofficial WhatsApp Android application named 'YoWhatsApp' has been found stealing access keys for users' accounts.
Bleeping Computer
2022年10月13日 737 觀看次數
All Windows versions can now block admin brute-force attacks
Microsoft announced today that IT admins can now configure any Windows system still receiving security updates to automatically block brute force attacks targeting local administrator accounts via a group policy. [...]
Bleepingcomputer
2022年10月12日 633 觀看次數
Android leaks some traffic even when 'Always-on VPN' is enabled
Mullvad VPN has discovered that Android leaks traffic every time the device connects to a WiFi network, even if the "Block connections without VPN," or "Always-on VPN," features is enabled. [...]
Bleepingcomputer
2022年10月12日 742 觀看次數
The 2020-2022 ATM/PoS malware landscape
Attacks using ATM or PoS malware are on the rise again in 2022 after the COVID-19 lockdowns.
The post The 2020-2022 ATM/PoS malware landscape appeared first on TechRepublic.
TechRepublic
2022年10月12日 576 觀看次數
Fortinet warns admins to patch critical auth bypass bug immediately
Fortinet has warned administrators to update FortiGate firewalls and FortiProxy web proxies to the latest versions, which address a critical severity vulnerability.
Bleeping Computer
2022年10月10日 608 觀看次數
