Tag: privilege escalation

Multi-Stage ValleyRAT Targets Chinese Users with Advanced Tactics

Chinese-speaking users are the target of an ongoing campaign that distributes malware known as ValleyRAT. "ValleyRAT is a multi-stage malware that utilizes diverse techniques to...

Microsoft Issues Patches for 90 Flaws, Including 10 Critical Zero-Days

Microsoft on Tuesday shipped fixes to address a total of 90 security flaws, including 10 zero-days, of which six have come under active exploitation...

Windows Downgrade Attack Risks Exposing Patched Systems to Old Vulnerabilities

Microsoft said it is developing security updates to address two loopholes that it said could be abused to stage downgrade attacks against the Windows...

New Linux Kernel Exploit Technique ‘SLUBStick’ Discovered by Researchers

Cybersecurity researchers have shed light on a novel Linux kernel exploitation technique dubbed SLUBStick that could be exploited to elevate a limited heap vulnerability...

Akira Ransomware Gang Extorts $42 Million; Now Targets Linux Servers

Menace actors behind the Akira ransomware group have extorted roughly $42 million in illicit proceeds after breaching the networks of greater than 250 victims...

Hackers Exploit OpenMetadata Flaws to Mine Crypto on Kubernetes

Risk actors are actively exploiting vital vulnerabilities in OpenMetadata to achieve unauthorized entry to Kubernetes workloads and leverage them for cryptocurrency mining exercise. That is...

Muddled Libra Shifts Focus to SaaS and Cloud for Extortion and...

The menace actor often known as Muddled Libra has been noticed actively focusing on software-as-a-service (SaaS) purposes and cloud service supplier (CSP) environments in...

The Position of Simply-in-Time Privileged Entry in Safety Evolution

To reduce the chance of privilege misuse, a development within the privileged entry administration (PAM) resolution market entails implementing just-in-time (JIT) privileged entry. This...

Microsoft Fixes 149 Flaws in Big April Patch Launch, Zero-Days Included

Microsoft has launched safety updates for the month of April 2024 to remediate a file 149 flaws, two of which have come below energetic...

Microsoft Edge Bug Might Have Allowed Attackers to Silently Set up...

A now-patched safety flaw within the Microsoft Edge net browser might have been abused to put in arbitrary extensions on customers' methods and...

Most popular