Domain Persistence – Machine Account

Machine accounts play a role in red team operations as in a number of techniques are utilized for privilege escalation, lateral movement and domain escalation.… Continue reading - Domain Persistence - Machine Account...

KB5010794: Out-of-band update for Windows 8.1 and Windows Server 2012 R2: January 17, 2022

KB5010794: Out-of-band update for Windows 8.1 and Windows Server 2012 R2: January 17, 2022 Summary This update resolves the following issues: Virtual machines VMs located on a server that has Unified Extensible Firmware Interface UEFI enabled fail to start after installing the January 11, 2022...

Real Big Phish: Mobile Phishing & Managing User Fallibility

According to a recent survey from Ivanti, nearly three-quarters 74 percent of IT professionals reported that their organizations have fallen victim to a phishing attack – and 40 percent of those happened in the last month alone. Increasingly, mobile phishing is the culprit. What’s more, nearly ha...

Being Naughty to See Who Was Nice: Machine Learning Attacks on Santa’s List

Editor’s note: We had planned to publish our Hacky Holidays blog series throughout December 2021 – but then Log4Shell happened, and we dropped everything to focus on this major vulnerability that impacted the entire cybersecurity community worldwide. Now that it’s 2022, we’re feeling in need of...

CVE-2021-45449

Docker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information access token or password on the user's machine during login. This only affects users if they are on Docker Desktop 4.3.0, 4.3.1 and the user has logged in while on 4.3.0, 4.3.1. Gaining access to this data would...

CVE-2022-22154

In a Junos Fusion scenario an External Control of Critical State Data vulnerability in the Satellite Device SD control state machine of Juniper Networks Junos OS allows an attacker who is able to make physical changes to the cabling of the device to cause a denial of service DoS. An SD can get...

Demystifying XDR: How Humans and Machines Join Forces in Threat Response

In our first post on demystifying the concepts and practices behind extended detection and response XDR technology, Forrester analyst Allie Mellen joined Sam Adams, Rapid7's VP for Detection and Response, to outline the basic framework for XDR and highlight the key outcomes it can help security...

Microsoft Windows Multiple Vulnerabilities (KB5009546)

This host is missing a critical security update according to Microsoft KB5009546 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB5009585)

This host is missing a critical security update according to Microsoft KB5009585 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB5009610)

This host is missing a critical security update according to Microsoft KB5009610 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-21833

Virtual Machine IDE Drive Elevation of Privilege Vulnerability...

CVE-2022-21833

Virtual Machine IDE Drive Elevation of Privilege Vulnerability...

CVE-2022-21833

Virtual Machine IDE Drive Elevation of Privilege Vulnerability...

Privilege escalation

Virtual Machine IDE Drive Elevation of Privilege Vulnerability...

CVE-2022-21833 Virtual Machine IDE Drive Elevation of Privilege Vulnerability

...

CVE-2022-21833

CVE-2022-21833 is a Local Elevation of Privilege in Virtual Machine IDE Drive. The NVD entry lists CVSS-3.1 base score 7.8 (LOCAL, LOW privileges required, no user interaction, privilege escalation with CHANGED scope; impacts: CONFIDENTIALITY/HIGH, INTEGRITY/HIGH, AVAILABILITY/HIGH). Publicly vis...

Virtual Machine IDE Drive Elevation of Privilege Vulnerability

...

Microsoft Windows Virtual Machine 权限许可和访问控制问题漏洞

Microsoft Windows Virtual Machine is a virtualization technology from Microsoft USA. It allows you to run many virtual environments in a Windows environment. A vulnerability exists in the Microsoft Windows Virtual Machine IDE Drive with privilege permission and access control issues. The followin...

Security Bulletin: Vulnerability in addressable - CVE-2021-32740 impacts IBM Watson Machine Learning Accelerator

Summary Addressable is used IBM Watson Machine Learning Accelerator. This bulletin provides mitigations for the addressable vulnerability CVE-2021-32740 by upgrading addressable to latest version. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affect...

VMware Patches Important Bug Affecting ESXi, Workstation and Fusion Products

VMWare has shipped updates to Workstation, Fusion, and ESXi products to address an "important" security vulnerability that could be weaponized by a threat actor to take control of affected systems. The issue relates to a heap-overflow vulnerability — tracked as CVE-2021-22045 CVSS score: 7.7 —...