5709 matches found
2021 Top Malware Strains
Summary Immediate Actions You Can Take Now to Protect Against Malware: • Patch all systems and prioritize patching known exploited vulnerabilities. • Enforce multifactor authentication MFA. • Secure Remote Desktop Protocol RDP and other risky services. • Make offline backups of your data. • Provi...
August 16, 2022—KB5016693 (OS Build 20348.946) Preview
None None...
Feds: Zeppelin Ransomware Resurfaces with New Compromise, Encryption Tactics
Zeppelin ransomware is back and employing new compromise and encryption tactics in its recent campaigns against various vertical industries—particularly healthcare—as well as critical infrastructure organizations, the feds are warning. Threat actors deploying the ransomware as a service RaaS are...
#StopRansomware: MedusaLocker
Summary Actions to take today to mitigate cyber threats from ransomware: • Prioritize remediating known exploited vulnerabilities. • Train users to recognize and report phishing attempts. • Enable and enforce multifactor authentication. Note: this joint Cybersecurity Advisory CSA is part of an...
CISA and ACSC Release Top 2021 Malware Strains
CISA and the Australian Cyber Security Centre ACSC have published a joint Cybersecurity Advisory on the top malware strains observed in 2021. Malicious cyber actors often use malware to covertly compromise and then gain access to a computer or mobile device. As malicious cyber actors have been...
The vulnerability of the NTLM protocol implementation in the RDP client FreeRDP allows a hacker to disclose sensitive information.
The vulnerability of the NTLM protocol implementation in the RDP client FreeRDP is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to disclose sensitive information that is protected by the security mechanism...
Microsoft clamps down on RDP brute-force attacks in Windows 11
It wasnt so long ago that we were wondering what improvements Windows 11 would make in the security stakes. Well, we havent had to wait too long to find out. Windows 11 build 22528.1000 and up will tackle one of the more common entry points for network intruders. Namely, trying to prevent the bru...
AnyDesk 后置链接漏洞
AnyDesk is a remote desktop connection software from AnyDesk Germany. A security vulnerability exists in AnyDesk version 7.0.9, which can be exploited by an attacker to gain SYSTEM privileges...
Remote Desktop Client for Windows RCE (July 2022)
The Windows Remote Desktop client for Windows installed on the remote host is missing security updates. It is, therefore, affected by a remote code execution vulnerability in the Windows Graphics component. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary...
July 12, 2022—KB5015808 (OS Build 14393.5246) - EXPIRED
None None...
SUSE SLED15 / SLES15 Security Update : freerdp (SUSE-SU-2022:2354-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2354-1 advisory. - FreeRDP is a free implementation of the Remote Desktop Protocol RDP. In versions prior to 2.7.0, NT LAN...
SUSE SLED15 / SLES15 Security Update : freerdp (SUSE-SU-2022:2353-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2353-1 advisory. - FreeRDP is a free implementation of the Remote Desktop Protocol RDP. In versions prior to 2.7.0, NT LAN...
Microsoft Graphics Component 输入验证错误漏洞
Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Graphics Component. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for...
SUSE SLED12 / SLES12 Security Update : freerdp (SUSE-SU-2022:2352-1)
The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2352-1 advisory. - FreeRDP is a free implementation of the Remote Desktop Protocol RDP. In versions prior to 2.7.0, NT LAN...
The vulnerability of the Remote Desktop Protocol Client protocol on the Windows operating system, which allows a hacker to disclose protected information
The vulnerability of the Remote Desktop Protocol Client on the Windows operating system is related to the disclosure of information in the erroneous data field. Exploiting this vulnerability allows a malicious actor to disclose the protected information from a remote location...
The vulnerability of the Remote Desktop Protocol Client protocol on the Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the Remote Desktop Protocol Client on the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Configure Enterprise File Shares to Use Microsoft Hidden Shares on Windows Server 2008
This article describes how to configure Enterprise File Shares on Access Gateway Enterprise Edition appliance to use Microsoft hidden shares and the %username% environment variable on Microsoft Windows Server 2008. Requirements Remote Desktop Protocol RDP or console access to the Windows Active...
How to Configure RDP Load Balancing by Using Remote Desktop Gateway Server on NetScaler Appliance
This article describes how to configure the Remote Desktop Protocol RDP server load balancing by using a Remote Desktop Gateway server on a NetScaler appliance. Background A Remote Desktop Gateway server is a gateway that enables authorized users to connect to remote computers on a corporate...
NoMachine licensing issue vulnerability
NoMachine is a remote desktop access tool from Luxembourg-based NoMachine. v7.9.2 of NoMachine is vulnerable to an authorization issue that originates from incorrect permissions in the C:ProgramDataNoMachinevaruninstall folder. An attacker could exploit this vulnerability to hijack the DLL and...
CVE-2022-2221
Information Exposure vulnerability in My Account Settings of Devolutions Remote Desktop Manager before 2022.1.8 allows authenticated users to access credentials of other users. This issue affects: Devolutions Remote Desktop Manager versions prior to 2022.1.8...