LDAPNightmare PoC Exploit Crashes LSASS and Reboots Windows Domain Controllers A proof-of-concept (PoC) exploit has been released for a now-patched security flaw impacting Windows Lightweight Directory Access Protocol (LDAP) that could trigger a denial-of-service (DoS) condition. The out-of-bounds reads vulnerability is tracked as CVE-2024-49113 (CVSS score: 7.5). It was addressed Read more…
New Malware Technique Could Exploit Windows UI Framework to Evade EDR Tools A newly devised technique leverages a Windows accessibility framework called UI Automation (UIA) to perform a wide range of malicious activities without tipping off endpoint detection and response (EDR) solutions. “To exploit this technique, a user must be Read more…
Microsoft Launches Windows Resiliency Initiative to Boost Security and System Integrity Microsoft has announced a new Windows Resiliency Initiative as a way to improve security and reliability, as well as ensure that system integrity is not compromised. The idea, the tech giant said, is to avoid incidents like that of Read more…
RomCom Exploits Zero-Day Firefox and Windows Flaws in Sophisticated Cyberattacks The Russia-aligned threat actor known as RomCom has been linked to the zero-day exploitation of two security flaws, one in Mozilla Firefox and the other in Microsoft Windows, as part of attacks designed to deliver the eponymous backdoor on victim Read more…
November Patch Tuesday brings cornucopia of 89 fixes to Windows Microsoft has delivered a bounty of patches this November in its latest edition of Patch Tuesday. The November 2024 edition of the Windows update cycle has brought with it critical fixes for Windows, Office, and SQL Server. Fortunately for users Read more…
New CRON#TRAP Malware Infects Windows by Hiding in Linux VM to Evade Antivirus Nov 08, 2024Ravie LakshmananMalware / Virtualization Cybersecurity researchers have flagged a new malware campaign that infects Windows systems with a Linux virtual instance containing a backdoor capable of establishing remote access to the compromised hosts. The “intriguing” Read more…
Microsoft Delays Windows Copilot+ Recall Release Over Privacy Concerns Nov 01, 2024Ravie LakshmananData Security / Artificial Intelligence Microsoft is further delaying the release of its controversial Recall feature for Windows Copilot+ PCs, stating it’s taking the time to improve the experience. The development was first reported by The Verge. The Read more…
Windows Themes 0-day opens door to NTLM credential theft • The Register There’s a Windows Themes spoofing zero-day bug on the loose that allows attackers to steal people’s NTLM credentials. That’s the bad news. The good news: Acros Security’s 0patch has developed a free micropatch that it says fixes the Read more…
Windows Update takeover lets an attacker revive a patched flaw Microsoft typically operates under the assumption that if an attacker has administrative privileges, gaining kernel-level code execution doesn’t cross a defined security boundary and therefore they don’t consider it a critical vulnerability needing immediate remediation. In an Oct. 26 blog Read more…
Kremlin-backed hackers have new Windows and Android malware to foist on Ukrainian foes Google researchers said they uncovered a Kremlin-backed operation targeting recruits for the Ukrainian military with information-stealing malware for Windows and Android devices. The malware, spread primarily through posts on Telegram, came from a persona on that platform Read more…