Krebs on Security

NOVEMBER 8, 2022

Let’s face it: Having “2022 election” in the headline above is probably the only reason anyone might read this story today. CVE-2022-41073 is a zero-day flaw in the Windows Print Spooler , a Windows component that Microsoft has patched mightily over the past year. Today’s patch batch addresses both issues.

Security 195

Security IT Access 195

Krebs on Security

JULY 12, 2022

The company said it would roll out the changes in stages between April and June 2022. The zero-day Windows vulnerability already seeing active attacks is CVE-2022-22047 , which is an elevation of privilege vulnerability in all supported versions of Windows. ” But last week, Microsoft abruptly changed course.

Access 215

Access Security Ransomware IT 215

Krebs on Security

MAY 10, 2022

By all accounts, the most urgent bug Microsoft addressed this month is CVE-2022-26925 , a weakness in a central component of Windows security (the “ Local Security Authority ” process within Windows). CVE-2022-26925 was publicly disclosed prior to today, and Microsoft says it is now actively being exploited in the wild.

Authentication 269

Authentication Ransomware Security IT 269

Data Breach Today

DECEMBER 28, 2022

Russia Continued Its Cyber Offensive With an Average of 10 Cyberattacks a Day Ukraine's domestic intelligence agency revealed this week that it successfully blocked more than 4,500 cyberattacks in 2022.

IT 272

IT 272

Krebs on Security

DECEMBER 14, 2022

Microsoft has released its final monthly batch of security updates for 2022, fixing more than four dozen security holes in its various Windows operating systems and related software. The bug already seeing exploitation is CVE-2022-44698 , which allows attackers to bypass the Windows SmartScreen security feature.

Ransomware 185

Ransomware Authentication Security Access 185

Krebs on Security

APRIL 13, 2022

Of particular concern this month is CVE-2022-24521 , which is a “privilege escalation” vulnerability in the Windows common log file system driver. Of particular concern this month is CVE-2022-24521 , which is a “privilege escalation” vulnerability in the Windows common log file system driver.

Ransomware 245

Ransomware Security IT Access 245

Security Affairs

MAY 26, 2022

Italy announced its National Cybersecurity Strategy for 2022/26, a crucial document to address cyber threats and increase the resilience of the country. The post Italy announced its National Cybersecurity Strategy 2022/26 appeared first on Security Affairs. A secure country is a more competitive country. Pierluigi Paganini.

Cybersecurity 141

Cybersecurity IT Risk Government 141

Security Affairs

APRIL 22, 2024

Microsoft reported that the Russia-linked APT28 group (aka “ Forest Blizzard ”, “ Fancybear ” or “ Strontium ” used a previously unknown tool, dubbed GooseEgg, to exploit the Windows Print Spooler flaw CVE-2022-38028. The vulnerability CVE-2022-38028 was reported by the U.S. The vulnerability CVE-2022-38028 was reported by the U.S.

Military 125

Military File names Education Phishing 125

Data Breach Today

NOVEMBER 9, 2023

Iranian Espionage Group Used Tactics From Previous Campaigns Security company CrowdStrike said it had observed Iranian hacker group Imperial Kitten, also known as TA456, Crimson Sandstorm and Tortoiseshell, conducting web compromise operations between 2022 and 2023 to infiltrate Israeli logistics, transportation and technology companies.

IT 273

IT Security 273

Security Affairs

APRIL 25, 2024

CISA added the Windows Print Spooler flaw CVE-2022-38028 to its Known Exploited Vulnerabilities catalog. Cybersecurity and Infrastructure Security Agency (CISA) added the CVE-2022-38028 Microsoft Windows Print Spooler Privilege Escalation vulnerability to its Known Exploited Vulnerabilities (KEV) catalog.

IT 104

IT Education Cybersecurity Risk 104

Data Breach Today

MAY 31, 2022

The Majority of Incidents Entailed Malware Distribution, Phishing and Intrusion Attempts Three months after Russia’s ongoing invasion of Ukraine began, the country takes a look back at the turbulence the nation has faced in its cyber sphere during Q1 2022, and considers the way ahead.

Phishing 283

Phishing IT 283

Krebs on Security

SEPTEMBER 14, 2022

Worst in terms of outright scariness is CVE-2022-37969 , which is a “privilege escalation” weakness in the Windows Common Log File System Driver that allows attackers to gain SYSTEM-level privileges on a vulnerable host. .” And Adobe axed 63 vulnerabilities in a range of products.

Privacy 175

Privacy Security Authentication Cybersecurity 175

Krebs on Security

MARCH 14, 2023

The government alleges that on May 7, 2022, Singh used stolen credentials to log into a U.S. On May 12, 2022, KrebsOnSecurity broke the news that hackers had gained access to a DEA portal that taps into 16 different federal law enforcement databases. .” federal government portal without authorization. ” Image: USDOJ.

Government 238

Government Communications Access Security 238

Krebs on Security

JUNE 15, 2022

On top of the critical heap this month is CVE-2022-30190 , a vulnerability in the Microsoft Support Diagnostics Tool (MSDT), a service built into Windows. Beaumont said other researchers on April 12, 2022 told Microsoft about active exploitation of the MSDT flaw, but Microsoft closed the ticket saying it wasn’t a security issue.

Cloud 224

Cloud Security IT Cybersecurity 224

Krebs on Security

JANUARY 11, 2022

By all accounts, the most severe flaw addressed today is CVE-2022-21907, a critical, remote code execution flaw in the “ HTTP Protocol Stack.” ” Microsoft says the flaw affects Windows 10 and Windows 11 , as well as Server 2019 and Server 2022. “Test and deploy this patch quickly.” ” Quickly indeed.

Libraries 233

Libraries Security Access IT 233

Data Breach Today

JUNE 14, 2023

The computing giant dubs the threat actor Cadet Blizzard and says it carried out the January 2022 WhisperGate attacks against Ukraine.

Military 196

Military IT 196

Security Affairs

DECEMBER 15, 2022

Microsoft revised the severity rate for the CVE-2022-37958 flaw which was addressed with Patch Tuesday security updates for September 2022. The CVE-2022-37958 was originally classified as an information disclosure vulnerability that impacts the SPNEGO Extended Negotiation ( NEGOEX ) security mechanism. Pierluigi Paganini.

IT 99

IT Authentication Security Access 99

IT Governance

OCTOBER 27, 2022

The Standard was last revised almost a decade ago (although a new iteration of the supplementary standard ISO 27002 was published in February 2022), meaning that the release of ISO 27001:2022 has been much needed and highly anticipated. However, the most significant changes with the 2022 version of ISO 27002 are in its structure.

IT 119

IT Information Security Compliance Security 119

Krebs on Security

FEBRUARY 8, 2022

Among those is CVE-2022-22005 , a weakness in Microsoft’s Sharepoint Server versions 2013-2019 that could be exploited by any authenticated user. ” Kevin Breen at Immersive Labs called attention to CVE-2022-21996 , an elevation of privilege vulnerability in the core Windows component “ Win32k.”

Authentication 179

Authentication Systems administration Ransomware Marketing 179

Data Breach Today

MAY 24, 2023

Company Executive Hopes Insurance Will Help Cover Most Costs Hospital chain CommonSpirit has upped its estimate on the financial toll incurred by a ransomware incident last fall that disrupted IT systems and patient services at some of its facilities for weeks.

Ransomware 130

Ransomware Insurance IT 130

Security Affairs

JANUARY 11, 2023

US CISA added Microsoft Exchange elevation of privileges bug CVE-2022-41080 to its Known Exploited Vulnerabilities Catalog. The first issue, tracked as CVE-2022-41080 , is a Microsoft Exchange server privilege escalation vulnerability. The issue can be chained with CVE-2022-41082 (ProxyNotShell) to achieve remote code execution.

IT 98

IT Ransomware Cloud Cybersecurity 98

Krebs on Security

JUNE 8, 2023

More alarmingly, the company said it appears attackers first started exploiting the flaw in October 2022. More alarmingly, the company said it appears attackers first started exploiting the flaw in October 2022. The Barracuda Email Security Gateway (ESG) 900 appliance. Campbell, Calif.

IT 302

IT Security Ransomware Encryption 302

Security Affairs

APRIL 21, 2022

CVE-2022-20685 flaw in the Modbus preprocessor of the Snort detection engine could trigger a DoS condition and make it ineffective against malicious traffic. The CVE-2022-20685 vulnerability is an integer-overflow issue that can cause the Snort Modbus OT preprocessor to enter an infinite while-loop. and release 3.1.11.0.

IT 133

IT Cybersecurity Security Information Security 133

Security Affairs

JANUARY 19, 2023

US CISA added the vulnerability CVE-2022-44877 in CentOS Control Web Panel utility to its Known Exploited Vulnerabilities Catalog. The US CISA added the Centos Web Panel 7 unauthenticated remote code execution flaw ( CVE-2022-44877 ) to its Known Exploited Vulnerabilities Catalog. reads the advisory for this vulnerability.

IT 97

IT Risk Security Information Security 97

Security Affairs

MAY 11, 2022

US Critical Infrastructure Security Agency (CISA) adds critical CVE-2022-1388 flaw in F5 BIG-IP products to its Known Exploited Vulnerabilities Catalog. Cybersecurity and Infrastructure Security Agency (CISA) has added critical CVE-2022-1388 flaw in F5 BIG-IP products to its Known Exploited Vulnerabilities Catalog. 15.1.0 – 15.1.5

IT 113

IT Cybersecurity Access Security 113

Security Affairs

JANUARY 9, 2022

Cyber Defense Magazine January 2022 Edition has arrived. RSA Conference 2022 has moved to June 6-9, 2022 so we have something awesome in store planned to bridge Q1/Q2. See you at RSA Conference 2022 – Our 10th Year Anniversary – Our 10th Year @RSAC #RSACONFERENCE #USA – Thank you so much!!! link] [link].

IT 97

IT Cybersecurity Security Information Security 97

Security Affairs

FEBRUARY 26, 2023

In February 2022, the American media and publishing giant News Corp revealed it was the victim of a cyber attack from an advanced persistent threat actor that took place in January 2022. The investigation conducted by News Corporation (News Corp) revealed that attackers remained on its network for two years.

IT 97

IT Data breaches Insurance Cybersecurity 97

Security Affairs

JANUARY 24, 2023

US CISA added the Zoho ManageEngine RCE vulnerability CVE-2022-47966 to its Known Exploited Vulnerabilities Catalog. The US CISA added the Zoho ManageEngine remote code execution flaw ( CVE-2022-47966 ) to its Known Exploited Vulnerabilities Catalog. The vulnerability was addressed by the company on October 27th, 2022.

IT 98

IT Risk Security Information Security 98

Security Affairs

DECEMBER 29, 2022

NCC Group’s Fox-IT research team warns of thousands of Citrix ADC and Gateway endpoints remain vulnerable to two critical vulnerabilities, tracked as CVE-2022-27510 and CVE-2022-27518 (CVSS scores: 9.8), that the company addressed in recent months. Citrix addressed the flaw on November 8, 2022. Pierluigi Paganini.

Cloud 98

Cloud Authentication Access IT 98

The Security Ledger

OCTOBER 13, 2021

In this Spotlight Podcast, Pondurance Founder and Chief Customer Officer Ron Pelletier gives us his predictions about the security trends that will shape 2022. Can We Fix It In 2022? After a devastating 18 months of COVID – which included a surge in cyber attacks – 2022 offers promises of better times.

IT 98

IT Security Risk Ransomware 98

Security Affairs

DECEMBER 14, 2022

Microsoft released December 2022 Patch Tuesday security updates that fix 52 vulnerabilities across its products. Microsoft December 2022 Patch Tuesday security updates fixed two zero-day vulnerabilities; one of the new issues addressed this month is listed as publicly known at the time of release, and one is actively exploited.

Security 111

Security IT Information Security 111