ContentmenuClose InearlyApril2024,wedecidedtotakeacloserlookattheWindowsDWMCoreLibraryElevationofPrivilegeVulnerabilityCVE-2023-36033,whichwaspreviouslydiscoveredasazero-dayexploitedinthewild.Whilesearchingforsamplesrelatedtothisexploitandattacksthatusedit,wefoundacuriousdocumentuploadedtoVirusTotalonApril1,2024.Thisdocumentcaughtourattentionbecaus...

Adobe documents multiple code execution flaws in a wide range of products, including the widely deployed Adobe Acrobat and Reader software. The post Adobe Patches Critical Flaws in Reader, Acrobat appeared first on SecurityWeek. Original link(Originally posted by Ryan Naraine)

SAP has released 14 new and three updated security notes on its May 2024 Security Patch Day. The post SAP Patches Critical Vulnerabilities in CX Commerce, NetWeaver appeared first on SecurityWeek. Original link(Originally posted by Ionut Arghire)

VMware has patched three vulnerabilities exploited earlier this year at the Pwn2Own hacking competition. The post VMware Patches Vulnerabilities Exploited at Pwn2Own 2024 appeared first on SecurityWeek. Original link(Originally posted by Eduard Kovacs)

Ron Reiter was a childhood hacker in Israel. He was recruited into the IDF’s elite Unit 8200 for his military service. Now he is CTO and co-founder of cybersecurity firm Sentra. The post Hacker Conversations: Ron Reiter, and the Making of a Professional Hacker appeared first on SecurityWeek. Original link(Originally posted by Kevin Townsend)

Threat actors are using DNS tunneling to track victims’ interaction with spam and to scan network infrastructures. The post Attackers Use DNS Tunneling to Track Victim Activity, Scan Networks appeared first on SecurityWeek. Original link(Originally posted by Ionut Arghire)

Google has patched CVE-2024-4761, the second exploited vulnerability addressed by the company within one week. The post Google Patches Second Chrome Zero-Day in One Week appeared first on SecurityWeek. Original link(Originally posted by Eduard Kovacs)

ContentmenuClose Incidentresponseanalystreport2023 Asaninformationsecuritycompany,ourservicesincludeincidentresponseandinvestigation,andmalwareanalysis.OurcustomerbasespansRussia,Europe,Asia,SouthandNorthAmerica,AfricaandtheMiddleEast.OurannualIncidentResponseReportpresentsanonymizedstatisticsonthecyberattacksweinvestigatedin2023.Alldataisderivedfr...

The City of Helsinki says usernames, email addresses, and personal information was stolen in a recent cyberattack. The post Student, Personnel Information Stolen in City of Helsinki Cyberattack appeared first on SecurityWeek. Original link(Originally posted by Ionut Arghire)

MITRE announced the public availability of the EMB3D threat model for embedded devices used in critical infrastructure. The post MITRE EMB3D Threat Model Officially Released appeared first on SecurityWeek. Original link(Originally posted by Eduard Kovacs)