zero day
APT deploys web shell disguised as a PNG file in a bid to steal credentials and crack into customers' networks downstream.
Threat actors use CVE-2024-38112 to bring the remains of Internet Explorer back to life as a 'zombie' hellbent on stealing valuable data.
Exploited for a month. No detection in Sentinel, no patch yet. Mitigate urgently.
Microsoft Support Diagnostic Tool being unhelpful...