TA505 Crime Gang Deploys SDBbot for Corporate Network Takeover

The TA505 cybercrime group has ramped up its attacks lately, with a set of campaigns bent on spreading the persistent SDBbot remote-access trojan RAT laterally throughout an entire corporate environment, researchers said. SDBbot RAT is a custom job that has been observed in TA505 attacks since at...

Visual Studio Extension Installer Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations. An attacker who successfully exploited the vulnerability could delete files in arbitrary locations with elevated permissions. To exploit the vulnerability, an...

QQ Browser installation is vulnerable to dll hijacking

QQ Browser is an extremely fast browser developed by Tencent, which supports multiple terminals such as PC, Android and Apple. QQ Browser installation suffers from a dll hijacking vulnerability, which can be exploited by attackers to load untrusted dynamic link libraries for command execution...

PT-2020-19026 · Sap · Sap Business Client

Name of the Vulnerable Software and Affected Versions: SAP Business Client versions 6.5, 7.0 Description: The issue is related to the lack of necessary integrity checks in the SAP Business Client, which could be exploited by an attacker under certain conditions to modify the installer...

Security Updates for Microsoft Visual Studio Products (April 2020)

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service improperly handles file permissions. An attacker who successfully exploited thi...

Description of the security update for the Microsoft Visual Studio 2005 Service Pack 1 development platform

Description of the security update for the Microsoft Visual Studio 2005 Service Pack 1 development platform INTRODUCTION Microsoft has released security bulletin MS07-052. The security bulletin contains all the relevant information about the security update. This information includes file manifes...

MS09-062: Description of the security update for Microsoft Visual Studio 2008 Service Pack 1: October 13, 2009

MS09-062: Description of the security update for Microsoft Visual Studio 2008 Service Pack 1: October 13, 2009 INTRODUCTION Microsoft has released security bulletin MS09-062. To view the complete security bulletin, visit one of the following Microsoft Web sites: Home...

Description of the security update for Microsoft Visual Studio 2008 Service Pack 1: July 28, 2009

Description of the security update for Microsoft Visual Studio 2008 Service Pack 1: July 28, 2009 INTRODUCTION Microsoft has released security bulletin MS09-035. To view the complete security bulletin, visit one of the following Microsoft Web sites: Home...

Description of the security update for Microsoft Visual Studio 2008: July 28, 2009

Description of the security update for Microsoft Visual Studio 2008: July 28, 2009 INTRODUCTION Microsoft has released security bulletin MS09-035. To view the complete security bulletin, visit one of the following Microsoft Web sites: Home...

MS12-059: Description of the security update for Visio 2010 Viewer: August 14, 2010

MS12-059: Description of the security update for Visio 2010 Viewer: August 14, 2010 View products that this article applies to. Introduction Microsoft has released security bulletin MS12-059. To view the complete security bulletin, go to one of the following Microsoft websites: Home users:...

This Week in Security News: Exploring Common Threats to Cloud Security and Zoom Removes Meeting IDs from App Title Bar to Improve Privacy

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about why Zoom has released an update for its Linux, Mac, and Windows apps that removes the meeting ID from the app's title bar. Also,...

April 2015 servicing stack update for Windows 8.1 and Windows Server 2012 R2

April 2015 servicing stack update for Windows 8.1 and Windows Server 2012 R2 This article describes a servicing stack update for Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2. The update fixes some issues. About servicing stack The servicing stack includes the files and resources that a...

April 7, 2020, update for OneNote 2016 (KB4475586)

None None...

Holy water: ongoing targeted water-holing attack in Asia

On December 4, 2019, we discovered watering hole websites that were compromised to selectively trigger a drive-by download attack with fake Adobe Flash update warnings. This campaign has been active since at least May 2019, and targets an Asian religious and ethnic group. The threat actor's...

CVE-2020-7260

DLL Side Loading vulnerability in the installer for McAfee Application and Change Control MACC prior to 8.3 allows local users to execute arbitrary code via execution from a compromised folder...

CVE-2020-7260 MACC installer DLL side loading

DLL Side Loading vulnerability in the installer for McAfee Application and Change Control MACC prior to 8.3 allows local users to execute arbitrary code via execution from a compromised folder...

The vulnerability of Windows operating system installers allows a hacker to execute arbitrary code with elevated privileges.

The vulnerability of Windows operating system installers is related to the incorrect handling of certain file system operations. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges...

The vulnerability of the ActiveX Installer Service installation process on Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the ActiveX Installer Service for operating systems running on Windows is related to improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the ActiveX Installer Service installation process on Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the ActiveX Installer Service for operating systems running on Windows is related to improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Windows Installer component in Windows operating systems is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...