Remove 2008 Remove Libraries Remove Security
article thumbnail

0patch releases free unofficial patches for Windows 0days exploited in the wild

Security Affairs

A few days ago, Microsoft warned of hackers actively exploiting two zero-day remote code execution vulnerabilities in Windows Adobe Type Manager Library. The vulnerabilities affects the way Windows Adobe Type Manager Library handles a specially-crafted multi-master font – Adobe Type 1 PostScript format. See the link for more details.

Libraries 357
article thumbnail

0Patch released unofficial security patch for new DogWalk Windows zero-day

Security Affairs

0patch researchers released an unofficial security patch for a Windows zero-day vulnerability dubbed DogWalk. 0patch released an unofficial security patch for a new Windows zero-day vulnerability in the Microsoft Support Diagnostic Tool (MSDT) dubbed DogWalk. The expert warned to pay special attention to not open .diagcab

Security 246
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Experts add a BlueKeep exploit module to MetaSploit

Security Affairs

The Metasploit BlueKeep exploit module is based on the proof-of-concept code from the security researchers z??osum0x0 It has been developed to target only the 64-bit versions of Windows 7 and Windows 2008 R2. The initial PR of the exploit module targets 64-bit versions of Windows 7 and Windows 2008 R2.” Pierluigi Paganini.

Libraries 266
article thumbnail

Expert identifies new Nazar APT group referenced in 2017 Shadow Brokers leak

Security Affairs

A security expert uncovered an old APT operation, tracked Nazar, by analyzing the NSA hacking tools included in the dump leaked by Shadow Brokers in 2017. Guerrero-Saade discovered that the SIG37 campaign references hacking activities dated back as far as 2008 that was carried out by an unknown threat actor, the expert tracked it as Nazar.

Libraries 349
article thumbnail

Microsoft Patch Tuesday, November 2023 Edition

Krebs on Security

Microsoft today released updates to fix more than five dozen security holes in its Windows operating systems and related software, including three “zero day” vulnerabilities that Microsoft warns are already being exploited in active attacks. and CVE-2023-36413 : A Microsoft Office security feature bypass.

Phishing 317
article thumbnail

Avast released a free decryptor for the Windows version of the Akira ransomware

Security Affairs

This Linux version is 64-bit and also uses the Boost library, it uses the Crypto++ library instead of Windows CryptoAPI. Files are encrypted by Chacha 2008 ( D. ” The decryptor also supports the option to back up encrypted files, which is recommended by the security firm. Bernstein’s implementation ).”

article thumbnail

Experts bypassed Microsoft’s emergency patch for the PrintNightmare

Security Affairs

Yesterday, Microsoft has released an out-of-band KB5004945 security update to address the PrintNightmare vulnerability, unfortunately, the patch is incomplete and still allows remote code execution. 2008 and 2012 but require Point&Print configured for Windows 2016,2019,10 & 11(?). These work out of the box on Windows 7, 8, 8.1,

Libraries 256