KEEP IN TOUCH
Subscribe to our mailing list to get free tips on Data Protection and Cybersecurity updates weekly!
New Windows Zero-day With Public Exploit Lets You Become an Admin A security researcher has publicly disclosed an exploit for a new Windows zero-day local privilege elevation vulnerability that gives admin privileges in Windows 10, Windows 11, and Windows Server. BleepingComputer has tested the exploit and used it to open to command prompt with SYSTEM
Exploit Released for Microsoft Exchange RCE Bug, Patch Now Proof-of-concept exploit code has been released online over the weekend for an actively exploited high severity vulnerability impacting Microsoft Exchange servers. The security bug tracked as CVE-2021-42321 impacts on-premises Exchange Server 2016 and Exchange Server 2019 (including those used by customers in Exchange Hybrid mode) and was patched
UK Govt Warns Thousands of SMBs Their Online Stores Were Hacked The UK’s National Cyber Security Centre (NCSC) says it warned the owners of more than 4,000 online stores that their sites were compromised in Magecart attacks to steal customers’ payment info. In Magecart attacks (also known as web skimming, digital skimming, or e-Skimming), threat actors inject
US Govt Warns of Increased Ransomware Risks During Holidays The Cybersecurity and Infrastructure Security Agency (CISA) and the FBI warned critical infrastructure partners and public/private sector organizations not to let down their defenses against ransomware attacks during the holiday season. The two federal agencies’ warning was issued in the form of a joint advisory published Monday,