10783 matches found
Feds Hit with Successful Cyberattack, Data Stolen
A federal agency has suffered a successful espionage-related cyberattack that led to a backdoor and multistage malware being dropped on its network. The U.S. Cybersecurity and Infrastructure Security Agency CISA issued an alert on Thursday, not naming the agency but providing technical details of...
Unpatched Domain Controllers Remain Vulnerable to Netlogon Vulnerability, CVE-2020-1472
The Cybersecurity and Infrastructure Security Agency CISA is aware of active exploitation of CVE-2020-1472, an elevation of privilege vulnerability in Microsoft’s Netlogon. A remote attacker can exploit this vulnerability to breach unpatched Active Directory domain controllers and obtain domain...
Zerologon Patches Roll Out Beyond Microsoft
UPDATE The “perfect” Windows vulnerability known as the Zerologon bug is getting a patch assist from two non-Microsoft sources, as they strive to fill in the gaps that the official fix doesn’t address. They roll out as Microsoft announced that it is tracking active exploitation in the wild. “We...
Netlogon Weak Cryptographic Authentication
A vulnerability exists within the Netlogon authentication process where the security properties granted by AES are lost due to an implementation flaw related to the use of a static initialization vector IV. An attacker can leverage this flaw to target an Active Directory Domain Controller and mak...
Multiple vulnerabilities in Active Update function implemented in multiple Trend Micro products
Overview Active Update function implemented in Premium Security 2019 for Windows v15, Maximum Security 2019 for Windows v15, Internet Security 2019 for Windows v15 and Antivirus+ 2019 for Windows v15 provided by Trend Micro Incorporated contain multiple vulnerabilities listed below. Update files...
JVN#60093979: Multiple vulnerabilities in Active Update function implemented in multiple Trend Micro products
Active Update function implemented in Premium Security 2019 for Windows v15, Maximum Security 2019 for Windows v15, Internet Security 2019 for Windows v15 and Antivirus+ 2019 for Windows v15 provided by Trend Micro Incorporated contain multiple vulnerabilities listed below. Update files are not...
The vulnerability of the Active Directory integrated DNS (ADIDNS) component in Microsoft Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Active Directory Integrated DNS ADIDNS component in Microsoft Windows operating systems is related to incorrect processing of objects in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of Microprogramming Software under Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM) arises from operations that go beyond buffer boundaries in memory, allowing attackers to exploit their privileges.
The vulnerability of Intel Active Management Technology AMT and Intel Standard Manageability ISM relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
The vulnerability of the DNS Active Directory operating system components, allowing a perpetrator to execute arbitrary code
The vulnerability of the DNS Active Directory operating system components is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Active Directory Integrated DNS (ADIDNS) operating system components allows a perpetrator to execute arbitrary code.
The vulnerability of the Active Directory Integrated DNS ADIDNS component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the Active Directory Federation Services (ADFS) for Windows operating systems allows a perpetrator to carry out spoofing attacks.
The vulnerability of the Active Directory Federation Services AD FS for Windows operating systems is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to carry out spear-phishing attacks remotely...
The vulnerability of the DNS Active Directory operating system components, allowing a perpetrator to execute arbitrary code
The vulnerability of the DNS Active Directory operating system components in Windows relates to operations that go beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
DHS Issues Dire Patch Warning for ‘Zerologon’
Federal agencies that haven’t patched their Windows Servers against the ‘Zerologon’ vulnerability by Monday Sept. 21 at 11:59 pm EDT are in violation of a rare emergency directive issued by the Secretary of Homeland Security. With only hours until the deadline for the directive, issued on Friday,...
CVE-2020-8200
Improper authentication in Citrix StoreFront Server 1912.0.1000 allows an attacker who is authenticated on the same Microsoft Active Directory domain as a Citrix StoreFront server to read arbitrary files from that server...
CVE-2020-8200
Improper authentication in Citrix StoreFront Server 1912.0.1000 allows an attacker who is authenticated on the same Microsoft Active Directory domain as a Citrix StoreFront server to read arbitrary files from that server...
CVE-2020-8200
Improper authentication in Citrix StoreFront Server 1912.0.1000 allows an attacker who is authenticated on the same Microsoft Active Directory domain as a Citrix StoreFront server to read arbitrary files from that server...
Authentication flaw
Improper authentication in Citrix StoreFront Server 1912.0.1000 allows an attacker who is authenticated on the same Microsoft Active Directory domain as a Citrix StoreFront server to read arbitrary files from that server...
CVE-2020-8200
Improper authentication in Citrix StoreFront Server 1912.0.1000 allows an attacker who is authenticated on the same Microsoft Active Directory domain as a Citrix StoreFront server to read arbitrary files from that server...
CVE-2020-8200
CVE-2020-8200 affects Citrix StoreFront Server prior to versions 2006 (CR) and prior to CU1 for 1912 LTSR, as well as pre-CU5 for 3.12 in 7.15 LTSR. The vulnerability arises from improper authentication, allowing an attacker who is authenticated in the same Active Directory domain as a StoreFront...
