MCCrash: Cross-platform DDoS botnet targets private Minecraft servers

Malware operations continue to rapidly evolve as threat actors add new capabilities to existing botnets, increasingly targeting and recruiting new types of devices. Attackers update malware to target additional operating systems, ranging from PCs to IoT devices, growing their infrastructure...

Directory Traversal

Overview std/net/http is a Go standard library package std/net/http Affected versions of this package are vulnerable to Directory Traversal. Go Vulnerability Report: On Windows, restricted files can be accessed via os.DirFS and http.Dir.The os.DirFS function and http.Dir type provide access to a...

Venus ransomware targets remote desktop services

Its time for another tale of remote desktop disaster, as a newish form of ransomware carves out a name for itself. Bleeping Computer reports that individuals behind Venus ransomware are breaking into "publicly exposed Remote Desktop services", with the intention of encrypting any and all Windows...

CVE-2022-0029 Cortex XDR Agent: Improper Link Resolution Vulnerability When Generating a Tech Support File

An improper link resolution vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local attacker to read files on the system with elevated privileges when generating a tech support file...

CVE-2022-0029 Cortex XDR Agent: Improper Link Resolution Vulnerability When Generating a Tech Support File

An improper link resolution vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local attacker to read files on the system with elevated privileges when generating a tech support file...

PT-2022-12962 · Palo Alto Networks · Palo Alto Networks Cortex Xdr Agent

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Cortex XDR agent affected versions not specified Description: An improper link resolution issue in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local attacker to read files on the system with elevated...

Vulnerability of the Windows.Devices.Picker.dll library in operating systems, allowing attackers to escalate their privileges

The vulnerability of the Windows.Devices.Picker.dll library in operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2022-22045

Windows.Devices.Picker.dll Elevation of Privilege Vulnerability...

CVE-2022-22045

Windows.Devices.Picker.dll Elevation of Privilege Vulnerability...

Privilege escalation

Windows.Devices.Picker.dll Elevation of Privilege Vulnerability...

CVE-2022-22045 Windows.Devices.Picker.dll Elevation of Privilege Vulnerability

...

CVE-2022-22045 Windows.Devices.Picker.dll Elevation of Privilege Vulnerability

...

Windows.Devices.Picker.dll Elevation of Privilege Vulnerability

...

CVE-2022-21868

Windows Devices Human Interface Elevation of Privilege Vulnerability...

CVE-2022-21868

Windows Devices Human Interface Elevation of Privilege Vulnerability...

CVE-2022-21868

Windows Devices Human Interface Elevation of Privilege Vulnerability...

CVE-2022-21868 Windows Devices Human Interface Elevation of Privilege Vulnerability

...

China Hijacked an NSA Hacking Tool—and Used It for Years

The hackers used the agency’s EpMe exploit to attack Windows devices years before the Shadow Brokers leaked the agency’s zero-day arsenal online...

Unifying security policy across all mobile form-factors with Wandera and Microsoft

The way we work is evolving—technology enables more effective employees by helping them to be productive where and when they choose. Businesses have also been enjoying the productivity benefits of an always-on and always-connected workforce. While new business applications and device form-factors...

Dell Patches SupportAssist Flaw That Allows Arbitrary Code Execution

Dell has patched a high-severity flaw in its SupportAssist software that could allow an attacker to execute arbitrary code with administrator privileges on affected computers. The flaw, an uncontrolled search path vulnerability that is being tracked as CVE-2020-5316, could allow a locally...