home.social

#markoftheweb — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #markoftheweb, aggregated by home.social.

  1. Take heed, traveler, those that are marked by the Web are everywhere.

    They can be friends, acquaintances, or even family. Stay vigilant.

    en.wikipedia.org/wiki/Mark_of_

    #markoftheweb

  2. Another Zero Day Initiative security advisory, since RARLAB failed to include the CVE ID in their release notes: CVE-2024-30370 (4.3 medium, CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) RARLAB WinRAR Mark-Of-The-Web Bypass Vulnerability. I'm not a betting man, but I can see threat actors utilizing this quickly based on historical abuse. 🔗 zerodayinitiative.com/advisori and rarlab.com/rarnew.htm#27.%20Bu

    This vulnerability allows remote attackers to bypass the Mark-Of-The-Web protection mechanism on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must perform a specific action on a malicious page.

    The specific flaw exists within the archive extraction functionality. A crafted archive entry can cause the creation of an arbitrary file without the Mark-Of-The-Web. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current user.

    #CVE_2024_30370 #markoftheweb #WinRAR #vulnerability

  3. CW: Windows zero-day
    Reading up on some #infosec news after three crazy days of moving (reminder: never move) and came across the most amazing attribute name Windows gives to files from untrusted remote locations:

    Mark of the Web.

    But when you open such a file, you only see a boring 'Security Warning' popup.

    Why not just have burning flames, cackling demons and blood-red dripping capital letters shouting "WARNING! THIS FILE BEARS THE MARK OF THE WEB!" Missed opportunity!

    Also, excuse my noobness if Mark of the Web is something I should TOTALLY know about already, sheesh.

    #markoftheweb #cybersecurity #bleepingcomputer #zeroday #malware