610 matches found
DarkMe Malware Targets Traders Using Microsoft SmartScreen Zero-Day Vulnerability
A newly disclosed security flaw in the Microsoft Defender SmartScreen has been exploited as a zero-day by an advanced persistent threat actor called Water Hydra aka DarkCasino targeting financial market traders. Trend Micro, which began tracking the campaign in late December 2023, said it entails...
Microsoft Rolls Out Patches for 73 Flaws, Including 2 Windows Zero-Days
Microsoft has released patches to address 73 security flaws spanning its software lineup as part of its Patch Tuesday updates for February 2024, including two zero-days that have come under active exploitation. Of the 73 vulnerabilities, 5 are rated Critical, 65 are rated Important, and three and...
Microsoft Windows Multiple Vulnerabilities (KB5034766)
This host is missing an important security update according to Microsoft KB5034766 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Windows Multiple Vulnerabilities (KB5034765)
This host is missing an important security update according to Microsoft KB5034765 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Patch Tuesday - February 2024
Microsoft is addressing 73 vulnerabilities this February 2024 Patch Tuesday, including two actually, three! zero-day/exploited-in-the-wild vulnerabilities, both of which are already included on the CISA KEV list. Today also brings patches for two critical remote code execution RCE vulnerabilities...
CVE-2024-21412
Internet Shortcut Files Security Feature Bypass Vulnerability...
CVE-2024-21412
Internet Shortcut Files Security Feature Bypass Vulnerability...
Security feature bypass
Internet Shortcut Files Security Feature Bypass Vulnerability...
CVE-2024-21412
CVE-2024-21412 is a Windows SmartScreen security feature bypass that lets a downloaded file, marked by the Mark of the Web (MoTW), execute without SmartScreen prompts when dealing with Internet Shortcut files. Connected sources cite in-the-wild activity (Water Hydra) and exploitation via spearphi...
CVE-2024-21412 Internet Shortcut Files Security Feature Bypass Vulnerability
...
CVE-2024-21412 Internet Shortcut Files Security Feature Bypass Vulnerability
...
Internet Shortcut Files Security Feature Bypass Vulnerability
...
PT-2024-1646
Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the February 2024 patch update are affected, including Windows 10 and Windows 11. Description The vulnerability is related to Internet Shortcut Files and allows attackers to bypass Microsoft Defender...
Microsoft Windows Security Vulnerabilities
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Internet Shortcut Files. The following products and editions are affected: Windows 10 Version 21H2 for x64-based Systems,Windows Serve...
VulnCheck KEV: CVE-2024-21412
Microsoft Windows Internet Shortcut Files contains an unspecified vulnerability that allows for a security feature bypass...
Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability
Microsoft Windows Internet Shortcut Files contains an unspecified vulnerability that allows for a security feature bypass...
CVE-2024-21412
Internet Shortcut Files Security Feature Bypass Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
Microsoft Windows Internet Shortcut SmartScreen Bypass Vulnerability
This vulnerability allows remote attackers to bypass the SmartScreen security feature to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The...
New Mispadu Banking Trojan Exploiting Windows SmartScreen Flaw
The threat actors behind the Mispadu banking Trojan have become the latest to exploit a now-patched Windows SmartScreen security bypass flaw to compromise users in Mexico. The attacks entail a new variant of the malware that was first observed in 2019, Palo Alto Networks Unit 42 said in a report...
CVE-2024-23204
CVE-2024-23204 affects macOS Shortcuts (and related OSes) with a root cause of insufficient permissions checks that could allow a shortcut to access sensitive data via certain actions without prompting the user. The issue is fixed in macOS Sonoma 14.3 and across watchOS 10.3, iOS 17.3 and iPadOS ...