#vulnerabilitiesandexploits — Public Fediverse posts

ToolShell: a story of five vulnerabilities in Microsoft SharePoint – Source: securelist.com https://ciso2ciso.com/toolshell-a-story-of-five-vulnerabilities-in-microsoft-sharepoint-source-securelist-com/ #Vulnerabilitiesandexploits #rssfeedpostgeneratorecho #zerodayvulnerabilities #microsoftsharepoint #CyberSecurityNews #vulnerabilities #GReATresearch #securelistcom #ToolShell

ToolShell: a story of five vulnerabilities in Microsoft SharePoint – Source: securelist.com https://ciso2ciso.com/toolshell-a-story-of-five-vulnerabilities-in-microsoft-sharepoint-source-securelist-com/ #Vulnerabilitiesandexploits #rssfeedpostgeneratorecho #zerodayvulnerabilities #microsoftsharepoint #CyberSecurityNews #vulnerabilities #GReATresearch #securelistcom #ToolShell

Analysis of the latest Mirai wave exploiting TBK DVR devices with CVE-2024-3721 – Source: securelist.com https://ciso2ciso.com/analysis-of-the-latest-mirai-wave-exploiting-tbk-dvr-devices-with-cve-2024-3721-source-securelist-com/ #Vulnerabilitiesandexploits #rssfeedpostgeneratorecho #Secureenvironment(IoT) #MalwareTechnologies #CyberSecurityNews #internetofthings #vulnerabilities #DataEncryption #GReATresearch #securelistcom #Honeypot #botnets #Malware #LINUX #Mirai #CVE #RC4

Exploits and vulnerabilities in Q1 2025 – Source: securelist.com https://ciso2ciso.com/exploits-and-vulnerabilities-in-q1-2025-source-securelist-com/ #Vulnerabilitiesandexploits #rssfeedpostgeneratorecho #VulnerabilityStatistics #Vulnerabilityreports #UnixandmacOSmalware #CyberSecurityNews #MalwareStatistics #MicrosoftWindows #bufferoverflows #MicrosoftOffice #Windowsmalware #securelistcom #Microsoft #browser #WinRAR #LINUX #APT #CVE

Exploits and vulnerabilities in Q1 2025 – Source: securelist.com https://ciso2ciso.com/exploits-and-vulnerabilities-in-q1-2025-source-securelist-com/ #Vulnerabilitiesandexploits #rssfeedpostgeneratorecho #VulnerabilityStatistics #Vulnerabilityreports #UnixandmacOSmalware #CyberSecurityNews #MalwareStatistics #MicrosoftWindows #bufferoverflows #MicrosoftOffice #Windowsmalware #securelistcom #Microsoft #browser #WinRAR #LINUX #APT #CVE

Exploits and vulnerabilities in Q1 2025 – Source: securelist.com https://ciso2ciso.com/exploits-and-vulnerabilities-in-q1-2025-source-securelist-com/ #Vulnerabilitiesandexploits #rssfeedpostgeneratorecho #VulnerabilityStatistics #Vulnerabilityreports #UnixandmacOSmalware #CyberSecurityNews #MalwareStatistics #MicrosoftWindows #bufferoverflows #MicrosoftOffice #Windowsmalware #securelistcom #Microsoft #browser #WinRAR #LINUX #APT #CVE

Exploits and vulnerabilities in Q1 2025 – Source: securelist.com https://ciso2ciso.com/exploits-and-vulnerabilities-in-q1-2025-source-securelist-com/ #Vulnerabilitiesandexploits #rssfeedpostgeneratorecho #VulnerabilityStatistics #Vulnerabilityreports #UnixandmacOSmalware #CyberSecurityNews #MalwareStatistics #MicrosoftWindows #bufferoverflows #MicrosoftOffice #Windowsmalware #securelistcom #Microsoft #browser #WinRAR #LINUX #APT #CVE

Operation SyncHole: Lazarus APT goes back to the well – Source: securelist.com https://ciso2ciso.com/operation-synchole-lazarus-apt-goes-back-to-the-well-source-securelist-com/ #Vulnerabilitiesandexploits #rssfeedpostgeneratorecho #zerodayvulnerabilities #APT(Targetedattacks) #MalwareDescriptions #MalwareTechnologies #Wateringholeattacks #CyberSecurityNews #Supplychainattack #Targetedattacks #infrastructure #securelistcom #MITREATT&CK #APTreports #Lazarus #Malware #APT

How ToddyCat tried to hide behind AV software – Source: securelist.com https://ciso2ciso.com/how-toddycat-tried-to-hide-behind-av-software-source-securelist-com/ #Vulnerabilitiesandexploits #AntivirusVulnerabilities #rssfeedpostgeneratorecho #zerodayvulnerabilities #APT(Targetedattacks) #MalwareDescriptions #MalwareTechnologies #CyberSecurityNews #Defenseevasion #Windowsmalware #securelistcom #Encryption #Incidents #ToddyCat #Drivers #Malware #Trojan #BYOVD #APT #CVE #DLL

How ToddyCat tried to hide behind AV software – Source: securelist.com https://ciso2ciso.com/how-toddycat-tried-to-hide-behind-av-software-source-securelist-com/ #Vulnerabilitiesandexploits #AntivirusVulnerabilities #rssfeedpostgeneratorecho #zerodayvulnerabilities #APT(Targetedattacks) #MalwareDescriptions #MalwareTechnologies #CyberSecurityNews #Defenseevasion #Windowsmalware #securelistcom #Encryption #Incidents #ToddyCat #Drivers #Malware #Trojan #BYOVD #APT #CVE #DLL

How ToddyCat tried to hide behind AV software – Source: securelist.com https://ciso2ciso.com/how-toddycat-tried-to-hide-behind-av-software-source-securelist-com/ #Vulnerabilitiesandexploits #AntivirusVulnerabilities #rssfeedpostgeneratorecho #zerodayvulnerabilities #APT(Targetedattacks) #MalwareDescriptions #MalwareTechnologies #CyberSecurityNews #Defenseevasion #Windowsmalware #securelistcom #Encryption #Incidents #ToddyCat #Drivers #Malware #Trojan #BYOVD #APT #CVE #DLL

How ToddyCat tried to hide behind AV software – Source: securelist.com https://ciso2ciso.com/how-toddycat-tried-to-hide-behind-av-software-source-securelist-com/ #Vulnerabilitiesandexploits #AntivirusVulnerabilities #rssfeedpostgeneratorecho #zerodayvulnerabilities #APT(Targetedattacks) #MalwareDescriptions #MalwareTechnologies #CyberSecurityNews #Defenseevasion #Windowsmalware #securelistcom #Encryption #Incidents #ToddyCat #Drivers #Malware #Trojan #BYOVD #APT #CVE #DLL

Attackers exploiting a patched FortiClient EMS vulnerability in the wild – Source: securelist.com https://ciso2ciso.com/attackers-exploiting-a-patched-forticlient-ems-vulnerability-in-the-wild-source-securelist-com/ #Vulnerabilitiesandexploits #rssfeedpostgeneratorecho #CyberSecurityNews #Credentialstheft #IncidentResponse #vulnerabilities #Defenseevasion #securelistcom #MicrosoftSQL #SQLinjection #TIandIRposts #MITREATT&CK #Fortinet #mdr #SOC

Story of the Year: global IT outages and supply chain attacks – Source: securelist.com https://ciso2ciso.com/story-of-the-year-global-it-outages-and-supply-chain-attacks-source-securelist-com/ #Vulnerabilitiesandexploits #KasperskySecurityBulletin #rssfeedpostgeneratorecho #ArtificialIntelligence #UnixandmacOSmalware #Satellitereceivers #CyberSecurityNews #Supplychainattack #MicrosoftWindows #Windowsmalware #securelistcom #Triangulation #predictions #regreSSHion #JavaScript #opensource #Apple

Story of the Year: global IT outages and supply chain attacks – Source: securelist.com https://ciso2ciso.com/story-of-the-year-global-it-outages-and-supply-chain-attacks-source-securelist-com/ #Vulnerabilitiesandexploits #KasperskySecurityBulletin #rssfeedpostgeneratorecho #ArtificialIntelligence #UnixandmacOSmalware #Satellitereceivers #CyberSecurityNews #Supplychainattack #MicrosoftWindows #Windowsmalware #securelistcom #Triangulation #predictions #regreSSHion #JavaScript #opensource #Apple

Kaspersky Security Bulletin 2024. Statistics – Source: securelist.com https://ciso2ciso.com/kaspersky-security-bulletin-2024-statistics-source-securelist-com/ #Vulnerabilitiesandexploits #KasperskySecurityBulletin #rssfeedpostgeneratorecho #VulnerabilityStatistics #Secureenvironment(IoT) #UnixandmacOSmalware #CyberSecurityNews #MalwareStatistics #Financialmalware #internetofthings #MicrosoftWindows #vulnerabilities #Windowsmalware #securelistcom #TrojanBanker #AppleMacOS #ransomware #LINUX #ATM

Advanced threat predictions for 2025 – Source: securelist.com https://ciso2ciso.com/advanced-threat-predictions-for-2025-source-securelist-com/ #Vulnerabilitiesandexploits #KasperskySecurityBulletin #rssfeedpostgeneratorecho #ArtificialIntelligence #APT(Targetedattacks) #CyberSecurityNews #Supplychainattack #internetofthings #machinelearning #Targetedattacks #GoogleAndroid #securelistcom #Triangulation #Hacktivists #deepfakes #AppleiOS #backdoor #botnets #Drivers #BYOVD #APT #XZ

Сrimeware and financial cyberthreats in 2025 – Source: securelist.com https://ciso2ciso.com/%D1%81rimeware-and-financial-cyberthreats-in-2025-source-securelist-com/ #Vulnerabilitiesandexploits #KasperskySecurityBulletin #rssfeedpostgeneratorecho #zerodayvulnerabilities #CyberSecurityNews #Financialmalware #Financialthreats #machinelearning #Mobilethreats #securelistcom #Trojanstealer #TrojanBanker #Grandoreiro #Hacktivists #predictions #opensource #ransomware #crimeware #backdoor #AI

The Crypto Game of Lazarus APT: Investors vs. Zero-days – Source: securelist.com https://ciso2ciso.com/the-crypto-game-of-lazarus-apt-investors-vs-zero-days-source-securelist-com/ #Vulnerabilitiesandexploits #rssfeedpostgeneratorecho #zerodayvulnerabilities #APT(Targetedattacks) #MalwareDescriptions #CyberSecurityNews #Financialthreats #securelistcom #GoogleChrome #OnlineGames #BlueNoroff #JavaScript #Microsoft #Lazarus #APT #SAS

Whispers from the Dark Web Cave. Cyberthreats in the Middle East – Source: securelist.com https://ciso2ciso.com/whispers-from-the-dark-web-cave-cyberthreats-in-the-middle-east-source-securelist-com/ #Vulnerabilitiesandexploits #rssfeedpostgeneratorecho #ThreatIntelligence #CyberSecurityNews #Financialthreats #securelistcom #Infostealers #TIandIRposts #Hacktivists #ransomware #crimeware #dataleaks #Darknet #Lockbit #RDP #SOC #VPN

A journey into forgotten Null Session and MS-RPC interfaces – Source: securelist.com https://ciso2ciso.com/a-journey-into-forgotten-null-session-and-ms-rpc-interfaces-source-securelist-com/ #Vulnerabilitiesandexploits #rssfeedpostgeneratorecho #Offensivecybersecurity #securityassessment #CyberSecurityNews #Cybersecurity #securelistcom #TIandIRposts #research #pentest #SOC

QakBot attacks with Windows zero-day (CVE-2024-30051) – Source: securelist.com https://ciso2ciso.com/qakbot-attacks-with-windows-zero-day-cve-2024-30051-source-securelist-com/ #Vulnerabilitiesandexploits #rssfeedpostgeneratorecho #zerodayvulnerabilities #CyberSecurityNews #MicrosoftWindows #vulnerabilities #securelistcom #Software #QakBot

Exploits and vulnerabilities in Q1 2024 – Source: securelist.com https://ciso2ciso.com/exploits-and-vulnerabilities-in-q1-2024-source-securelist-com/ #Vulnerabilitiesandexploits #rssfeedpostgeneratorecho #VulnerabilityStatistics #CyberSecurityNews #MicrosoftExchange #MicrosoftWindows #MicrosoftOffice #Targetedattacks #vulnerabilities #securelistcom #Publications #backdoor #browser #LINUX

A patched Windows attack surface is still exploitable – Source: securelist.com https://ciso2ciso.com/a-patched-windows-attack-surface-is-still-exploitable-source-securelist-com/ #Vulnerabilitiesandexploits #rssfeedpostgeneratorecho #CyberSecurityNews #MicrosoftWindows #vulnerabilities #securelistcom #TIandIRposts #SOC

Top 10 web application vulnerabilities in 2021–2023 – Source: securelist.com https://ciso2ciso.com/top-10-web-application-vulnerabilities-in-2021-2023-source-securelist-com/ #Vulnerabilitiesandexploits #rssfeedpostgeneratorecho #VulnerabilityStatistics #securityassessment #CyberSecurityNews #Securityservices #vulnerabilities #Cybersecurity #securelistcom #SQLinjection #passwords #research #XSS