This article shows how to integrate an ANY.RUN analysis VM into a local OpenVPN network to test CVE-2024-21413, verify a PoC that causes silent download/execution and an SMB-based NTLM hash leak, and collect IOCs. It also demonstrates using Impacket’s smbserve…
The US is spearheading the first United Nations resolution on artificial intelligence, aimed at ensuring the new technology is “safe, secure and trustworthy” and that all countries have equal access.
The post US Spearheads First UN Resolution on Artificial Intelligence appeared first on SecurityWeek….
Just because Google has put in the work to quantum-proof Chrome doesn’t mean post-quantum security is all set….
Two sentences: Malvertising campaigns on Google Ads promoted fake pages mimicking Blender 3D and other software to deliver stealers such as RedLine and Rhadamanthys. The dropper uses a pre-installer and a multi-stage loader that downloads, decrypts, and execut…
Mobile scams targeting phone users through smishing and voice phishing are widespread, with attackers impersonating banks, agencies, delivery services, and even celebrities to coax victims into investing, sharing personal data, or installing malicious apps. Ah…
CVE-2024-21412: DarkGate Operators Exploit Microsoft Windows SmartScreen Bypass in Zero-Day Campaign
In addition to our Water Hydra APT zero day analysis, the Zero Day Initiative (ZDI) observed a DarkGate campaign which we discovered in mid-January 2024 where DarkGate operators exploited CVE-2024-21412….
A number of software brands are being impersonated with malicious ads and fake sites to distribute malware….
Brave has seen a sharp increase in users installing its privacy-focused Brave Browser on iPhones after Apple introduced changes to adhere to the new European Digital Markets Act. […]…
Microsoft has disclosed fewer flaws and zero-days in the first three months of 2024 compared with the first quarter of the prior four years….
A prolific but previously hidden threat actor turns public vulnerabilities into working exploits before companies have time to patch….
Stanford University says the personal information of 27,000 individuals was stolen in a ransomware attack impacting its Department of Public Safety (SUDPS) network. […]…
Microsoft has released the KB5035853 cumulative update for Windows 11 23H3 and 22H2, with 21 fixes and changes, including fixing a bug causing 0x800F0922 errors when installing updates. […]…
In a concerning development, a threat actor has purportedly obtained and is now offering for sale the database of Trezor, a reputable brand known for its hardware cryptocurrency wallets accessible through Trezor.io. These wallets are designed to provide users with a secure and convenient way to stor…
Microsoft has released the KB5035845 cumulative update for Windows 10 21H2 and Windows 10 22H2, which includes nine new changes and fixes. […]…
Today is Microsoft’s March 2024 Patch Tuesday, and security updates have been released for 60 vulnerabilities, including eighteen remote code execution flaws. […]…