zero day
File-sharing platforms continue to be a threat actor favourite.
LPE bug now safely logged in the KEV – over a year after first exploited in the wild
No password needed to gain access to key component of EBS thanks to new bug
The bug was discovered by its government-backed attacks focused research group.
Cloud IAM platforms are a "windfall" for attackers
APT deploys web shell disguised as a PNG file in a bid to steal credentials and crack into customers' networks downstream.
Threat actors use CVE-2024-38112 to bring the remains of Internet Explorer back to life as a 'zombie' hellbent on stealing valuable data.
Exploited for a month. No detection in Sentinel, no patch yet. Mitigate urgently.
Microsoft Support Diagnostic Tool being unhelpful...