Opsec Cyber vulnerabilities Archives - Page 12 of 21

Category Archives: vulnerabilities

Detection and Response to Exploitation of Microsoft Exchange Zero-Day Vulnerabilities

March 4 2021 By Daniel Pany in Andrew Thompson, Homepage Carousel, Latest Blog Posts, Managed Defense, Matt Bromiley, Microsoft, Security, Threat Research, vulnerabilities, Zero-day

Beginning in January 2021, Mandiant Managed Defense observed multiple instances of abuse of Microsoft Exchange Server within at least one client environment. The observed activity included creation...

Detection and Response to Exploitation of Microsoft Exchange Zero-Day Vulnerabilities

March 4 2021 By Daniel Pany in Andrew Thompson, Homepage Carousel, Latest Blog Posts, Managed Defense, Matt Bromiley, Microsoft, Security, Threat Research, vulnerabilities, Zero-day

Four Microsoft Exchange Zero-Days Exploited by China

March 4 2021 By Bruce Schneier in China, Microsoft, Security, vulnerabilities, Zero-day

Microsoft has issued an emergency Microsoft Exchange patch to fix four zero-day vulnerabilities currently being exploited by China. EDITED TO ADD (3/12): Exchange Online is not affected.

Fuzzing Image Parsing in Windows, Part Two: Uninitialized Memory

March 3 2021 By Syndicator in FLARE, Homepage Carousel, Latest Blog Posts, Security, Threat Research, vulnerabilities, Windows

Continuing our discussion of image parsing vulnerabilities in Windows, we take a look at a comparatively less popular vulnerability class: uninitialized memory. In this...

Fuzzing Image Parsing in Windows, Part Two: Uninitialized Memory

March 3 2021 By Syndicator in FLARE, Homepage Carousel, Latest Blog Posts, Security, Threat Research, vulnerabilities, Windows

Continuing our discussion of image parsing vulnerabilities in Windows, we take a look at a comparatively less popular vulnerability class: uninitialized memory. In this...

Fuzzing Image Parsing in Windows, Part Two: Uninitialized Memory

March 3 2021 By Syndicator in FLARE, Homepage Carousel, Latest Blog Posts, Security, Threat Research, vulnerabilities, Windows

Continuing our discussion of image parsing vulnerabilities in Windows, we take a look at a comparatively less popular vulnerability class: uninitialized memory. In this...

Twelve-Year-Old Vulnerability Found in Windows Defender

February 24 2021 By Bruce Schneier in Malware, Microsoft, Security, vulnerabilities, Windows

Researchers found, and Microsoft has patched, a vulnerability in Windows Defender that has been around for twelve years. There is no evidence that anyone has used the vulnerability...

Dependency Confusion: Another Supply-Chain Vulnerability

February 23 2021 By Bruce Schneier in Malware, Security, vulnerabilities

Alex Birsan writes about being able to install malware into proprietary corporate software by naming the code files to be identical to internal corporate code files. From a...

Cyber Criminals Exploit Accellion FTA for Data Theft and Extortion

February 22 2021 By Daniel Pany in Andrew Moore, data theft, Genevieve Stark, Homepage Carousel, Kimberly Goody, Latest Blog Posts, Mandiant, Ransomware, Security, Threat Research, Van Ta, vulnerabilities

Starting in mid-December 2020, malicious actors that Mandiant tracks as UNC2546 exploited multiple zero-day vulnerabilities in Accellion’s legacy File Transfer Appliance (FTA) to install a newly discovered...