929 matches found
CVE-2022-21921
CVE-2022-21921 is a Windows Defender Credential Guard security feature bypass. Connected documents identify Windows Defender as affected, with the issue categorized as a security-measure bypass (CVSS/Impact cited in sources such as Microsoft KBs and security advisories). The root cause and exact ...
CVE-2022-21921 Windows Defender Credential Guard Security Feature Bypass Vulnerability
...
CVE-2022-21906 Windows Defender Application Control Security Feature Bypass Vulnerability
...
CVE-2022-21906
Technical details are not publicly available in the provided documents. Monitor for official disclosures and updates.
Windows Defender Application Control Security Feature Bypass Vulnerability
...
Windows Defender Credential Guard Security Feature Bypass Vulnerability
...
Microsoft Windows Defender 安全特征问题漏洞
Microsoft Windows Defender is a suite of antivirus software that comes with Windows systems from Microsoft Corporation USA. Microsoft Windows Defender is vulnerable to a security feature issue. The following products and editions are affected:Windows 10 Version 21H1 for x64-based Systems,Windows ...
PT-2022-1566 · Microsoft · Windows Defender +1
Name of the Vulnerable Software and Affected Versions: Windows Defender affected versions not specified Description: The issue is related to errors in security settings, allowing an attacker to bypass security restrictions. It is a security-feature bypass vulnerability that enables attackers to...
Microsoft Windows .Reg File Dialog Spoofing / Mitigation Bypass
Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFTWINDOWSREGFILEDIALOGSPOOFMITIGATIONBYPASS.txt + twitter.com/hyp3rlinx + ISR: ApparitionSec Vendor www.microsoft.com A file with the .reg file extension is a...
Microsoft Windows Defender 安全特征问题漏洞
Microsoft Windows Defender is a suite of antivirus software that comes with Windows systems from Microsoft USA. Microsoft Windows Defender is vulnerable to a security feature issue. The following products and editions are affected:Windows 10 Version 21H1 for x64-based Systems,Windows 10 Version...
PT-2022-1529 · Microsoft · Windows Defender +1
Name of the Vulnerable Software and Affected Versions: Windows Defender affected versions not specified Description: The issue is related to a security feature bypass that may allow attackers to access protected information. This could potentially enable unauthorized access to sensitive data. The...
Microsoft Windows Defender / Detection Bypass
Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFTWINDOWSDEFENDERDETECTIONBYPASS.txt + twitter.com/hyp3rlinx + ISR: ApparitionSec Vendor www.microsoft.com Product Windows Defender Microsoft Defender Antivirus is a...
Mortar - Evasion Technique To Defeat And Divert Detection And Prevention Of Security Products (AV/EDR/XDR)
red teaming evasion technique to defeat and divert detection and prevention of security products.Mortar Loader performs encryption and decryption of selected binary inside the memory streams and execute it directly with out writing any malicious indicator into the hard-drive. Mortar is able to...
New Zloader Banking Malware Campaign Exploiting Microsoft Signature Verification
An ongoing ZLoader malware campaign has been uncovered exploiting remote monitoring tools and a nine-year-old flaw concerning Microsoft's digital signature verification to siphon user credentials and sensitive information. Israeli cybersecurity company Check Point Research, which has been trackin...
Telegram Abused to Steal Crypto-Wallet Credentials
Attackers are targeting crypto-wallets of Telegram users with the Echelon infostealer, in an effort aimed at defrauding new or unsuspecting users of a cryptocurrency discussion channel on the messaging platform, researchers have found. Researchers at the SafeGuard Cyber’s Division Seven threat...
KLA12393 RCE vulnerability in Microsoft System Center
Remote code execution vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2021-44228 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually such...
Patch Tuesday - December 2021
This month’s Patch Tuesday comes in the middle of a global effort to mitigate Apache Log4j CVE-2021-44228. In today’s security release, Microsoft issued fixes for 83 vulnerabilities across an array of products — including a fix for Windows Defender for IoT, which is vulnerable to CVE-2021-44228...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
🤝 Show your support - give a ⭐️ if you liked the content | SHARE...
AzureHunter - A Cloud Forensics Powershell Module To Run Threat Hunting Playbooks On Data From Azure And O365
A Powershell module to run threat hunting playbooks on data from Azure and O365 for Cloud Forensics purposes. Getting Started 1. Check that you have the right O365 Permissions The following roles are required in Exchange Online, in order to be able to have read only access to the UnifiedAuditLog:...
KLA12339 RCE vulnerability in Microsoft System Center
Remote code execution vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2021-42298 Exploitation Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details...