Privilege Escalation

IT security under attack blog series: Instant domain persistence by registering a rogue domain controller

IT security under attack blog series: Instant domain persistence by registering a rogue domain controller

| | Active Directory, Cybersecurity, IT Security, Log360, Privilege Escalation, security breaches
In this blog in the IT security under attack series, we will learn about an advanced Active Directory (AD) domain controller (DC) attack to obtain persistence in AD environments. Dubbed DCShadow, this ...
ManageEngine Blog
Password spray attack on Active Directory users

Is IT security under attack?

| | Active Directory, Azure Active Directory, Cyber Security, cyberattacks, IT Security, Log360, Privilege Escalation, security breach, Windows security
From credential theft to network vulnerability exploitation and ransomware incidents on highly secure organizations, the year 2020 has been surprisingly rough on IT security. In the wake of the COVID-19 pandemic, companies around the ...
ManageEngine Blog
DCsync attack on Active Directory (AD)

Advanced Active Directory attacks: Simulating domain controller behavior

| | Active Directory, Cybersecurity, Domain Controller, Endpoint security, Insider Attacks, IT Security, password attacks, Privilege Escalation, security breach
There was a time when cyberattacks on identity and authentication infrastructures [like Active Directory (AD)] were immensely challenging to perform. A lot of forethought had to be put into devising a plan ...
ManageEngine Blog
phishing attack

Attackers Host Phishing Pages on Azure

| | Azure Blob Storage, Cisco WebEx, firmware update, Microsoft Azure, office 365, Phishing, Privilege Escalation, Remote Code Execution, small business router
Researchers have recently seen phishing attacks against Office 365 users wherein fake log-in pages were hosted on Microsoft Azure to give them more credibility. According to researchers from security firm EdgeWave, the ...
Security Boulevard
Zero-day Threats Detection

New Shlayer Malware Variant Targeting Macs

| | Gatekeeper bypass, macOS malware, Microsoft Exchange, Patch Tuesday, Privilege Escalation, security update, Shlayer, trojan program
Security researchers have found a new variant of a trojan program dubbed Shlayer that infects Mac computers and disables the macOS Gatekeeper security agent. Shlayer was discovered a year ago by researchers ...
Security Boulevard
insider threat

Serious Vulnerability Found in Lifesize Business Videoconferencing Devices

| | command injection, default credentials, device hacking, firmware, Lifesize, Privilege Escalation, videoconferencing
A security researcher from security firm Trustwave has found a vulnerability that could allow hackers to take over videoconferencing devices made by Lifesize. Some of the affected products have reached end-of-sale or ...
Security Boulevard
HR data

FaceTime Group Chat Disabled Due to Snooping Bug

| | FaceTime, microphone hacking, Microsoft Exchange, privacy violation, Privilege Escalation
Apple has disabled the group chat feature in its FaceTime video calling app after a bug was discovered that allows callers to remotely turn on the microphones on the recipients’ devices. The ...
Security Boulevard
SSD Advisory – SME Server Unauthenticated XSS To Privileged Remote Code Execution

SSD Advisory – SME Server Unauthenticated XSS To Privileged Remote Code Execution

| | cross-site scripting, Privilege Escalation, Remote Code Execution, SecuriTeam Secure Disclosure
Vulnerabilities Summary The following advisory describes a vulnerability in SME Server 9.2, which lets an unauthenticated attackers perform XSS attack that leads to remote code execution as root. SME Server is a ...
SecuriTeam Blogs
virus

Researcher Drops Third Windows Zero-Day Exploit in Four Months

| | APT10, cyberespionage, MsiAdvertiseProduct, Privilege Escalation, SandboxEscaper, Windows vulnerability, Zero-day Exploit
A security researcher who uses the online handle SandboxEscaper has published proof-of-concept exploit code for an unpatched vulnerability in Windows. The flaw is located in the “MsiAdvertiseProduct” function, which, according to Microsoft’s ...
Security Boulevard
Barracuda Networks ATO Attacks

Business Email Compromise Gang Targeted 50,000 Company Executives

| | business email compromise, compute node, container orchestration, Kubernetes, London Blue, Phishing, Privilege Escalation
A Nigerian gang with members based in the U.K. is perpetrating a business email compromise operation aimed squarely at executives at companies with locations worldwide. The gang has compiled a target list ...
Security Boulevard
Load more