Cybersecurity News - Page 344

In order to compromise websites to host malware the attackers used a total of five C&C servers and a slew of RCE and EoP vulnerabilities.

Given the severity of the flaw, the WordPress security team has decided to push forced update to all sites running Loginizer on WordPress 3.7 and higher.

Many of organizations attacked by Muddy Water have been also targeted by the relatively new PowGoop malware.

Microsoft said 120 of the 128 servers identified as Trickbot infrastructure around the world were eliminated.

All of the listed CVEs are already publicly known and have patches available.

The vulnerability is described as a heap buffer overflow bug in Freetype rendering engine.

In the observed attack the hackers escalated privileges using ZeroLogon less than 2 hours after the initial phish.

NCSC said that Russian activity involved reconnaissance operations and that the targets included the Games’ organisers, logistics services and sponsors.

The indictment said the hackers deployed “some of the world’s most destructive malware to date” in their attacks.

If exploited, CVE-2020-16952 could allow an attacker to run arbitrary code in the context of the local administrator on affected installations of SharePoint server.