New 0-Day Attack Targeting Windows Users With Microsoft Office Documents

Cybercrime , Forensics , Fraud Management & Cybercrime Prodaft: APT Group Uses ‘Unprecedented Malware Detection Sandbox’ Prajeet Nair (@prajeetspeaks) • March 22, 2021     SolarWinds attack timeline (Source: Prodaft) Swiss cybersecurity firm Prodaft says it has accessed several servers used by an advanced persistent threat group tied to the SolarWinds supply chain attack. These…

Cybersecurity Executive Order 2021: What It Means for Cloud and SaaS Security | IT Security News 14. June 2021 This article has been indexed from The Hacker News In response to malicious actors targeting US federal IT systems and their supply chain, the President released the “Executive Order on Improving the Nation’s Cybersecurity (Executive Order).”Although directed…

Technical details have emerged on a serious vulnerability in Microsoft Exchange Server dubbed ProxyToken that does not require authentication to access emails from a target account. An attacker can exploit the vulnerability by crafting a request to web services within the Exchange Control Panel (ECP) application and steal messages from a victim’s inbox. Delegation confusion…

Executive Summary Informations Name CVE-2021-22326 First vendor Publication 2021-06-30 Vendor Cve Last vendor Modification 2021-06-30 Security-Database Scoring CVSS v3 Cvss vector : N/A Overall CVSS Score NA Base Score NA Environmental Score NA impact SubScore NA Temporal Score NA Exploitabality Sub Score NA   Calculate full CVSS 3.0 Vectors scores Security-Database Scoring CVSS v2 Cvss…

JERUSALEM — The last time the centrifuges crashed at Iran’s underground nuclear fuel-production center at Natanz, more than a decade ago, the sabotage was the result of a joint Israeli-American cyberattack intended to slow Tehran’s progress toward nuclear weapons and force a diplomatic negotiation. When they crashed again this weekend, the White House asserted that…

TSA tightens cyber rules for pipelines By Adam Mazmanian Jul 21, 2021 A new directive issued by the Transportation Security Administration requires fuel pipeline operators to institute mitigation and recovery measures to protect against ransomware attacks and other known cybersecurity threats. This is the second directive issued by TSA in the wake of…