Ransomware pushes City of Oakland into state of emergency

The ransomware attack that hit Oakland on Wednesday February 8, 2023 is still crippling many of the citys services a week later. In fact, the situation is so bad that the Interim City Administrator has now declared a state of emergency. Tweet announcing the state of emergency The ransomware attac...

Microsoft Defender for Endpoint Security Feature Bypass Vulnerability

...

Introducing Malwarebytes Application Block: How to block unauthorized software from executing on Windows endpoints

Malwarebytes is excited to announce Application Block, a new module for Nebula and OneView for MSPs which helps organizations easily thwart unwanted applications from launching on Windows endpoints. For as many applications out there that help you keep business running as usual, there are just as...

CVE-2022-38777

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account...

Design/Logic Flaw

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account...

CVE-2022-38777

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account...

CVE-2022-38777

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account...

CVE-2022-38777

CVE-2022-38777 concerns a privilege-escalation in Elastic Endpoint Security for Windows due to a flaw in the rollback/quarantine workflow. The issue could allow an unprivileged user to elevate to LocalSystem by exploiting insufficient access control in the quarantine-related logic. Affected softw...

Elastic Endpoint Security 安全漏洞

Elastic Endpoint Security is a suite of endpoint security solutions from Elastic. A security vulnerability exists in Elastic Endpoint Security for Windows. An attacker exploited the vulnerability to elevate its privileges to those of the LocalSystem account...

CVE-2022-38775

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account...

CVE-2022-38775

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account...

CVE-2022-38774

An issue was discovered in the quarantine feature of Elastic Endpoint Security and Elastic Endgame for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account...

CVE-2022-38774

An issue was discovered in the quarantine feature of Elastic Endpoint Security and Elastic Endgame for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account...

Design/Logic Flaw

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account...

Design/Logic Flaw

An issue was discovered in the quarantine feature of Elastic Endpoint Security and Elastic Endgame for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account...

Admin TakeOver

Description The endpoint /api/v2/token/ allows an unauthorized user to perform brute-forcing and the app doesn't block the request which not having any SESSION COOKIE or even CSRF token Request POST /api/v2/token/ HTTP/1.1 Host: demo.modoboa.org User-Agent: Mozilla/5.0 X11; Linux x8664; rv:109.0...

Elastic Endpoint Security 安全漏洞

Elastic Endpoint Security is an endpoint security solution from Elastic. A security vulnerability exists in Elastic Endpoint Security that stems from a faulty rollback feature that could allow an unprivileged user to elevate their privileges to the privileges of a system account...

Elastic Endpoint Security 安全漏洞

Elastic Endpoint Security is a suite of endpoint security solutions from Elastic. A security vulnerability exists in Elastic Endpoint Security and Elastic Endgame that stems from an issue in the isolation feature that could allow an unprivileged user to elevate their privileges to the privileges ...

Siemens Desigo PXM Devices Cross-Site Request Forgery (CVE-2022-40179)

A vulnerability has been identified in Desigo PXM30-1 All versions V02.20.126.11-41, Desigo PXM30.E All versions V02.20.126.11-41, Desigo PXM40-1 All versions V02.20.126.11-41, Desigo PXM40.E All versions V02.20.126.11-41, Desigo PXM50-1 All versions V02.20.126.11-41, Desigo PXM50.E All versions...

PT-2023-13651 · Elastic · Endpoint Security +1

Name of the Vulnerable Software and Affected Versions: Elastic Endpoint Security and Elastic Endgame for Windows affected versions not specified Description: An issue was discovered in the quarantine feature, which could allow unprivileged users to elevate their privileges to those of the...