CVE-2021-34386 – Alert Detail – Security Database

Microsoft has issued a security alert, warning its customers of the actively exploited ProxyShell vulnerabilities affecting multiple on-premises Microsoft Exchange versions. “This past week, security researchers discussed several ProxyShell vulnerabilities, including those which might be exploited on unpatched Exchange servers to deploy ransomware or conduct other post-exploitation activities,” the Microsoft Exchange team wrote in a…

Digital threat researchers at Citizen Lab have uncovered a new zero-click iMessage exploit used to deploy NSO Group’s Pegasus spyware on devices belonging to Bahraini activists. In total, nine Bahraini activists (including members of the Bahrain Center for Human Rights, Waad, Al Wefaq) had their iPhones hacked in a campaign partially orchestrated by a Pegasus operator linked with high confidence…

Business Continuity Management / Disaster Recovery , Fraud Management & Cybercrime , Governance & Risk Management 90 Days After Vulnerability ID Reserved, REvil Exploited Bug to Hit Kaseya Customers Mathew J. Schwartz (euroinfosec) • July 6, 2021     Kaseya’s vulnerability disclosure page on its website Ransomware-wielding criminals continue to hone their illicit business models,…

Cybercrime , Fraud Management & Cybercrime , Social Engineering Proofpoint Describes Campaign That Uses Conference as a Lure Doug Olenick (DougOlenick) • July 14, 2021     A spear-phishing letter sent by TA453 using University of London’s School of Oriental and African Studies letterhead to fool its victims (Source: Proofpoint) The Iranian advanced persistent threat…

Cybercrime , Cybercrime as-a-service , Email Security & Protection Attackers Co-Opted Malware for Data Exfiltration and Ransom, Group-IB Finds Akshaya Asokan (asokan_akshaya) • May 8, 2021     Attackers co-opted the Hancitor malware downloader and recently used it to deliver Cuba ransomware as part of an email spam campaign for data exfiltration and ransom extortion,…

3rd Party Risk Management , Business Continuity Management / Disaster Recovery , Critical Infrastructure Security Administration Official: Gathering Will Also Address Hiring More Security Pros Scott Ferguson (Ferguson_Writes) • August 25, 2021     Photo: Mike via Flickr/CC The Biden administration is hosting a White House meeting Wednesday with a number of technology, banking, insurance…