Hot Topics

PrintNightmare

1,460-Day Old Known Vulnerability Catches Microsoft Off Guard

1,460-Day Old Known Vulnerability Catches Microsoft Off Guard

| | AI, Artificial Intelligence, Azurescape, Cybereason Defense Platform, Cybereason XDR Platform, EDR, Endpoint Controls, endpoint detection and response, Endpoint Protection Platform, Exploits, Hafnium, Lior Blog, machine learning, Microsoft, Microsoft Exchange, Microsoft Hypertext Markup Language, MSHTML, Next Generation Antivirus, ngav, PrintNightmare, SolarWinds Attacks, Unified Endpoint Security, Vulnerabilities, vulnerability, XDR, zero-day
Vulnerabilities are a fact of life. I started my career in cybersecurity finding and exploiting those vulnerabilities to conduct nation-state offensive operations. I understand the simple reality that there is no such ...
Blog
Threat Analysis Report: PrintNightmare and Magniber Ransomware

Threat Analysis Report: PrintNightmare and Magniber Ransomware

| | CVE-2021-34481, CVE-2021-34527, cyberattack, Cybereason Defense Platform, Cybereason XDR Platform, EDR, Endpoint Controls, endpoint detection and response, Endpoint Protection Platform, enterprise security, EPP, Exploits, Extended Detection and Response, Incident Response, Magniber Ransomware, Malware, managed detection and response, managed security services provider, mdr, Microsoft, MITRE ATT&CK Framework, Multi-Stage Ransomware, PrintNightmare, RansomOps, Ransomware, rce, research, Threat Analysis Report, Unified Endpoint Security, Vulnerabilities, vulnerability
The Cybereason Global Security Operations Center (GSOC) issues Cybereason Threat Analysis reports to inform on impacting threats. The Threat Analysis reports investigate these threats and provide practical recommendations for protecting against them ...
Blog
Microsoft Zero-Day-of-the-Month Club

Microsoft Zero-Day-of-the-Month Club

| | cyberattack, Exploits, Hafnium, Internet Explorer, Lior Blog, Microsoft, Microsoft Exchange, MSHTML, PrintNightmare, SolarWinds Attacks, Vulnerabilities, vulnerability, zero-day
When it comes to zero day attacks against Microsoft products, I often feel like Bill Murray’s character in the movie Groundhog Day. It seems like I keep waking up to the same ...
Blog
Microsoft Patch Tuesday, August 2021 Edition

Microsoft Patch Tuesday, August 2021 Edition

| | AskWoody.com, CVE-2021-26424, CVE-2021-34481, CVE-2021-34535, CVE-2021-36936, CVE-2021-36948, Dustin Childs, Immersive Labs, Kevin Breen, Patch Tuesday August 2021, PrintNightmare, SANS Internet Storm Center, Time to Patch, Trend Micro Zero Day Initiative, Windows Update Medic
Microsoft today released software updates to plug at least 44 security vulnerabilities in its Windows operating systems and related products. The software giant warned that attackers already are pouncing on one of ...
Krebs on Security
Microsoft Patch Tuesday, July 2021 Edition

Microsoft Patch Tuesday, July 2021 Edition

| | Automox, Chad McNaughton, CVE-2021-31979, CVE-2021-33771, CVE-2021-34448, CVE-2021-34458, CVE-2021-34473, CVE-2021-34494, CVE-2021-34523, CVE-2021-34527, Microsoft Patch Tuesday July 2021, PrintNightmare, Satnam Narang, Security Tools, Tenable, Time to Patch, Windows updates
Microsoft today released updates to patch at least 116 security holes in its Windows operating systems and related software. A half of dozen of the vulnerabilities addressed today are under active attack, ...
Krebs on Security
Kaseya Ransomware Attack, PrintNightmare Zero-day, Kaspersky Password Manager Vulnerability

Kaseya Ransomware Attack, PrintNightmare Zero-day, Kaspersky Password Manager Vulnerability

| | Cybersecurity, Digital Privacy, Episodes, Infosec, Kaseya, Password Generator, passwords, Podcast, PrintNightmare, Privacy, Ransomware, REvil ransomware, security, supply chain, technology, Weekly Edition, zero-day
Details on the Kaseya supply-chain and REvil ransomware attack, a new zero-day exploit called “PrintNightmare” affects all Windows versions before June, and how randomly generated passwords in a popular password manager were ...
The Shared Security Show
PrintNightmare, SMB3 encryption, and your network

PrintNightmare, SMB3 encryption, and your network

| | Corelight Labs, CVE-2021-1675, CVE-2021-34527, DCE/RPC, dll, encryption, NDR, network detection response, Network Security, PrintNightmare, SMB3, Zeek
By Yacin Nadji and Ben Reardon, Corelight Security Researchers CVE-2021-1675, also tracked in CVE-2021-34527, is a remote code execution vulnerability that targets the Windows Print Spooler service. In a nutshell, there is ...
Bright Ideas Blog
Microsoft Issues Emergency Patch for Windows Flaw

Microsoft Issues Emergency Patch for Windows Flaw

| | CVE-2021-34527, KB5004945, Latest Warnings, PrintNightmare, Satnam Narang, Security Tools, Tenable, Time to Patch
Microsoft on Tuesday issued an emergency software update to quash a security bug that's been dubbed "PrintNightmare," a critical vulnerability in all supported versions of Windows that is actively being exploited. The ...
Krebs on Security

Patch now! Emergency fix for PrintNightmare released by Microsoft

| | cisa, Exploits and vulnerabilities, Microsoft, patch, PrintNightmare, update, workaround
Microsoft has issued out-of-band updates for the remote code execution PrintNightmare vulnerability. Categories: Exploits and vulnerabilities Tags: cisamicrosoftpatchprintnightmareupdateworkaround (Read more...) The post Patch now! Emergency fix for PrintNightmare released by Microsoft appeared ...
Malwarebytes Labs

Secure Guardrails