Security Affairs

AUGUST 26, 2021

Cybersecurity and Infrastructure Security Agency (CISA) released five malware analysis reports (MARs) related to samples found on compromised Pulse Secure devices. CISA published five malware analysis reports (MARs) related to samples found on compromised Pulse Secure devices. v1: Pulse Connect Secure MAR-10334057-3.v1:

Security 349

Security Authentication Libraries Passwords 349

Security Affairs

MARCH 27, 2020

A few days ago, Microsoft warned of hackers actively exploiting two zero-day remote code execution vulnerabilities in Windows Adobe Type Manager Library. The vulnerabilities affects the way Windows Adobe Type Manager Library handles a specially-crafted multi-master font – Adobe Type 1 PostScript format. See the link for more details.

Libraries 357

Libraries Risk Security IT 357

Security Affairs

OCTOBER 19, 2022

Researcher discovered a remote code execution vulnerability in the open-source Apache Commons Text library. GitHub’s threat analyst Alvaro Munoz discovered a remote code execution vulnerability, tracked as CVE-2022-42889, in the open-source Apache Commons Text library. ” wrote the security team. Pierluigi Paganini.

Libraries 190

Libraries Security IT Information Security 190

Security Affairs

MARCH 23, 2020

Microsoft warns of hackers actively exploiting two zero-day remote code execution vulnerabilities in Windows Adobe Type Manager Library. Microsoft warns of hackers exploiting two zero-day remote code execution (RCE) vulnerabilities in the Windows Adobe Type Manager Library, both issues impact all supported versions of Windows.

Libraries 336

Libraries Risk Authentication Security 336

Security Affairs

JUNE 17, 2022

The infection sequence can be carried out using a combination of Microsoft APIs, command-line interface (CLI) scripts, and PowerShell scripts, the enterprise security firm added. The versioning settings are under list settings for each document library. . ” continues the report. ” concludes the report.

Libraries 283

Libraries Encryption Ransomware Cloud 283

Security Affairs

DECEMBER 4, 2020

Hundreds of millions of Android users are potentially exposed to the risk of hack due to the use of Android Play Core Library versions vulnerable to CVE-2020-8913. The CVE-2020-8913 flaw is a local, arbitrary code execution vulnerability that resides exists in the SplitCompat.install endpoint in Android’s Play Core Library.

Libraries 340

Libraries e-Delivery Risk Passwords 340

Security Affairs

SEPTEMBER 7, 2024

Cybersecurity and Infrastructure Security Agency (CISA) adds Draytek VigorConnect and Kingsoft WPS Office bugs to its Known Exploited Vulnerabilities catalog. Cybersecurity and Infrastructure Security Agency (CISA) added Draytek VigorConnect and Kingsoft WPS Office vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog.

IT 329

IT Libraries Cybersecurity Risk 329

Security Affairs

AUGUST 10, 2021

Microsoft released patch Tuesday security updates for August that address 120 CVEs in Microsoft products including a zero-day actively exploited in the wild. An attacker could also embed an ActiveX control marked “safe for initialization” in an application or Microsoft Office document that hosts the IE rendering engine.

Security 251

Security Libraries IT 251

Security Affairs

OCTOBER 1, 2023

Every week the best security articles from Security Affairs are free for you in your email box. A new round of the weekly SecurityAffairs newsletter arrived! Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Artificial Intelligence 321

Artificial Intelligence Security Ransomware Data breaches 321

Security Affairs

MARCH 3, 2020

The Kimsuky APT group has been analyzed by several security teams. The “ AutoUpdate.dll” library then gains persistence by setting the following registry key “ HKCUSoftwareMicrosoftWindowsCurrentVersionRunOnceWindowsDefender ”. scr” file, the document is named “ ??? ??.hwp Table 3: Information about legit document with “.hwp”

IT 363

IT File names Libraries Communications 363

Security Affairs

APRIL 14, 2020

Microsoft Patch Tuesday security updates for April 2020 address 113 flaws, including three Windows issues that have been exploited in attacks in the wild. Microsoft Patch Tuesday security updates for April 2020 address 113 flaws, including two remote code execution flaws in Windows that are actively exploited. Pierluigi Paganini.

Libraries 333

Libraries Authentication Security Risk 333

Security Affairs

DECEMBER 26, 2020

Recent spam campaigns used messages with malicious Word documents, or links to them, pretending to be an invoice, shipping information, COVID-19 information , resumes, financial documents, or scanned documents. Emotet is a modular malware, its operators could develop new Dynamic Link Libraries to update its capabilities.

Ransomware 350

Ransomware Libraries Cybersecurity Security 350

Security Affairs

FEBRUARY 16, 2021

dll: Windows legitimate DLL for runtime dependencies – MICROSOFT® C RUNTIME LIBRARY. dll: Windows legitimate DLL for runtime dependencies – MICROSOFT® C RUNTIME LIBRARY. If a path is passed, then the library is only loaded from the specific path. Avira.OE.NativeCore.dll: malicious DLL used during the DLL side-loading process.

Libraries 334

Libraries Communications Phishing Encryption 334

Security Affairs

OCTOBER 6, 2020

The Cybersecurity and Infrastructure Security Agency (CISA) issued an alert to warn of a surge of Emotet attacks that have targeted multiple state and local governments in the U.S. Emotet is a modular malware, its operators could develop new Dynamic Link Libraries to update its capabilities. since August. Pierluigi Paganini.

Government 357

Government Libraries Cybersecurity Phishing 357

Security Affairs

JULY 5, 2020

The first issue, tracked as CVE-2020-6463, is a memory corruption vulnerability that affects PDFium, an open source PDF library used by Chrome and other applications. An attacker could trigger the issue by tricking the user into opening a specially crafted document that contains JavaScript code. Pierluigi Paganini.

Libraries 354

Libraries IT Security Information Security 354

Security Affairs

OCTOBER 5, 2023

The research of zero-day exploits for popular applications such as WhatsApp is even more complex due to the security mechanisms implemented by the developers of the mobile OSs and the app. According to the documents, a company was selling a zero-click exploit for a remote code execution (RCE) vulnerability in WhatsApp for around $1.7

Marketing 352

Marketing Libraries Sales Government 352

Security Affairs

MAY 2, 2024

Dropbox Sign is a service that allows users to electronically sign and request signatures on documents. It integrates with Dropbox storage, so users can sign and store documents in one place without ever leaving the Dropbox platform.

Passwords 334

Passwords Authentication Access Phishing 334

Security Affairs

JULY 2, 2020

OVER 165 PAGESALWAYS FREE – LOADED WITH EXCELLENT CONTENT Learn from the experts, cybersecurity best practices Find out about upcoming information security related conferences, expos and trade shows. appeared first on Security Affairs. Always free, no strings attached. Pierluigi Paganini.

B2C 302

B2C IT Libraries Information Security 302

Security Affairs

MAY 31, 2020

Every week the best security articles from Security Affairs free for you in your email box. The post Security Affairs newsletter Round 266 appeared first on Security Affairs. A new round of the weekly SecurityAffairs newsletter arrived! NetWalker ransomware gang threatens to release Michigan State University files.

Security 214

Security Data breaches Ransomware Sales 214

Security Affairs

SEPTEMBER 7, 2021

Security researcher Nguyen The Duc published on GitHub the proof-of-concept exploit code for a Ghostscript zero-day vulnerability. Ghostscript is a suite of software based on an interpreter for Adobe Systems’ PostScript and Portable Document Format (PDF) page description languages. Airbnb, Dropbox, and Yandex).

Libraries 292

Libraries Education Security IT 292

Security Affairs

AUGUST 5, 2020

OVER 145 PAGESALWAYS FREE – LOADED WITH EXCELLENT CONTENT Learn from the experts, cybersecurity best practices Find out about upcoming information security related conferences, expos and trade shows. appeared first on Security Affairs. Always free, no strings attached. Pierluigi Paganini.

B2C 303

B2C IT Libraries Information Security 303

Security Affairs

SEPTEMBER 6, 2023

Below are the improvements implemented after the investigation: Identified and resolved race Condition that allowed the signing key to be present in crash dumps Enhanced prevention, detection, and response for key material erroneously included in crash dumps Enhanced credential scanning to better detect presence of signing key in the debugging environment (..)

Authentication 340

Authentication Libraries Access Government 340

Security Affairs

MARCH 28, 2019

The flaw is an “Absolute Path Traversal” issue in the library that could be exploited to execute arbitrary code by using a specially-crafted file archive. The issue affects a third-party library, called UNACEV2.DLL DLL that is used by WINRAR, it resides in the way an old third-party library, called UNACEV2.DLL,

Archiving 272

Archiving File names Education Libraries 272

Security Affairs

JULY 24, 2024

In addition to this shared infrastructure, Macma and other malware in the Daggerfly’s arsenal, including Mgbot all contain code from a single, shared library or framework. Elements of this library have been used to build Windows, macOS, Linux, and Android threats. ” concludes the report.

Libraries 334

Libraries IT Information Security Security 334

Security Affairs

OCTOBER 2, 2020

The activity of the cyber espionage group was first documented by ESET experts Matthieu Faou and Francis Labelle in a talk at the Virus Bulletin 2020 security conference. The malware samples analyzed by the researchers are slightly obfuscated using string obfuscation and dynamic Windows API library loading.

Military 360

Military Phishing Passwords Government 360

Security Affairs

NOVEMBER 10, 2022

Apple released out-of-band patches for iOS and macOS to fix a couple of code execution vulnerabilities in the libxml2 library. Apple released out-of-band patches for iOS and macOS to address two code execution flaws, tracked as CVE-2022-40303 and CVE-2022-40304 , in the libxml2 library for parsing XML documents.

Libraries 246

Libraries Security IT Information Security 246

Security Affairs

FEBRUARY 1, 2019

Security experts at Cybaze – Yoroi ZLab have analyzed a new sample of the AdvisorsBot malware, a downloader that was first spotted in August 2018. Once opened, the document kindly asks to the users to enable the macro scripts, heavily obfuscated to avoid static detection. Figure 2 – Document view inviting to enable macro.

Libraries 274

Libraries Phishing Security IT 274

Security Affairs

DECEMBER 31, 2020

Security Center under the Ministry of National Defense recorded a large number of virus-infected e-mails addressed to several state institutions. postal system operators to specify their security rules and filters, ”says Rytis Rainys, Director of NKSC. Security Center. Security Center. “The National Cyber ??Security

Passwords 279

Passwords Archiving Libraries Government 279

Security Affairs

AUGUST 9, 2022

Cyber Security Specialist Zoziel Pinto Freire shows an example of malicious file analysis presented during his lecture on BSides-Vitória 2022. Microsoft Office Documents. Microsoft Office Documents. PEframe is an open source tool to perform static analysis of malware executables and malicious MS Office documents.

Libraries 270

Libraries Metadata Education Security 270

Security Affairs

OCTOBER 4, 2022

Threat actors sent spear-phishing emails using malicious Amazon-themed documents as lures. The experts spotted a dynamically linked library, codenamed FudModule.dll, that tries to disable various Windows monitoring features. The library modify kernel variables and remove kernel callbacks in the attempt to disable the features.

Libraries 246

Libraries Phishing Security IT 246

Security Affairs

MAY 12, 2020

IBM security researcher continues to monitor the evolution of the infamous Zeus Sphinx banking Trojan (aka Zloader or Terdot ) that receives frequent updates and that was involved in active coronavirus scams. . Zeus Sphinx is distributed through malspam campaigns that use weaponized office documents. 2 Trojan that was leaked online.

Libraries 341

Libraries Sales Government IT 341

OpenText Information Management

OCTOBER 25, 2024

GenAI can improve cybersecurity processes, such as automated threat detection, code review, and security testing. However, the same technology presents unique security challenges that traditional methods struggle to address. GenAI applications have both a supply chain to be secured and distinct vulnerabilities.

Security 64

Security Libraries Paper Cybersecurity 64

Security Affairs

JUNE 24, 2022

Cybersecurity and Infrastructure Security Agency (CISA), along with the Coast Guard Cyber Command (CGCYBER), published a joint advisory to warn of hacking attempts exploiting the Log4Shell flaw in VMware Horizon servers to compromise target networks. ” reads the advisory. Follow me on Twitter: @securityaffairs and Facebook.

Access 343

Access Libraries Cybersecurity Security 343

Security Affairs

FEBRUARY 5, 2021

The activity of the TeamTNT group has been detailed by security firm Trend Micro, but in August experts from Cado Security discovered that that botnet is also able to target misconfigured Kubernetes installations. It also hides malicious processes using library injection and encrypts the malicious payload. Pierluigi Paganini.

Mining 300

Mining Libraries Encryption Access 300

Security Affairs

SEPTEMBER 12, 2018

Security experts from Trend Micro have spotted a new strain of ransomware involved in attacks in July and August, the malicious code was posing as the Locky ransomware. exe will drop malware components — several C++ and Python libraries and the Python 2.7 When successfully run, the Facture_23100.31.07.2018.exe Pierluigi Paganini.

Ransomware 276

Ransomware Libraries Encryption Archiving 276

AIIM

JULY 15, 2021

There are certain outcomes to be aware of and avoid : Implementation is Half Baked: Maybe security is not thought through. Sensitive Data is Compromised: Without proper security precautions, data can be exposed to the wrong groups or employees, or even shared outside of your organization. Tip #1: Planning is Everything.

Libraries 195

Libraries Metadata Access Security 195

Security Affairs

OCTOBER 25, 2021

In OSS-RC systems of the release 18B and older customer documentation browsing libraries under ALEX are subject to Cross-Site Scripting. This problem is completely resolved in new Ericsson library browsing tool ELEX used in systems like Ericsson Network Manager. SecurityAffairs – hacking, cyber security). CVE-2021-32569.

Cleanup 274

Cleanup Data migration Libraries Passwords 274