🐛 COMMON VULNERABILITIES AND EXPOSURES 2[−]
30 JunCVE-2023-21808 .NET and Visual Studio Remote Code Execution VulnerabilityTo address a known issue when after installing the February 14, 2023, security updates for .NET Framework and .NET, users may have experienced issues with how WPF-based applications render XPS documents, Microsoft has released the June 2023 security updates for .NET Framework and…MSRC.MICROSOFT.COM
30 JunCVE-2022-41089 .NET Framework Remote Code Execution VulnerabilityTo address a known issue when after installing the December 13, 2022, updates for .NET Framework and .NET, users may have experienced issues with how WPF-based applications render XPS documents, Microsoft has released the June 2023 security updates for .NET Framework and for .NET…MSRC.MICROSOFT.COM
⚠️ VULNERABILITY DISCLOSURE 1[−]
30 JunMalvertising Used as Entry Vector for BlackCat, Actors Also Leverage SpyBoy TerminatorWe found that malicious actors used malvertising to distribute malware via cloned webpages of legitimate organizations. The distribution involved a webpage of the well-known application WinSCP, an open-source Windows application for file transfer. We were able to identify that th…TRENDMICRO.COM
📢 SECURITY ADVISORIES 1[−]
🔥 INCIDENT REPORTING 3[−]
30 JunCyber Security Today, Week in Review for Friday, June 30, 2023This episode features a discussion on the Suncor cyber attack, the costs of the Indigo ransomware attack and the value of SIEMsCYBERSECURITYTODAY.LIBSYN.COM
30 JunCyber Security Today, June 30, 2023 - Good news and bad news about ransomwareThis episode reports on a new information-stealing malware, crooks cloning voices for virtual kidnapping and moreCYBERSECURITYTODAY.LIBSYN.COM
30 JunDecrypted: Akira Ransomware - Avast Threat Labssubmitted by IllNess to securitynews 10 points | 1 comments https://decoded.avast.io/threatresearch/decrypted-akira-ransomware/ Researchers for Avast have developed a decryptor for the Akira ransomware and released it for public download. The Akira ransomware appeared in March 20…DECODED.AVAST.IO
📡 INFOSEC NEWS 6[−]
30 JunInvestigator, API Yourself: Deploying Microsoft Graph on the trail of an attackerTwo clients, two threat hunts – any connection? Using Microsoft’s cloud-security API to parse piles of disparate data leads to fascinating findingsSOPHOS.COM
30 JunIOTW: US Patent and Trademark Office suffers years-long data leakThe addresses of thousands of trademark applicants may have been accessed by malicious actorsCSHUB.COM
30 JunAI is Here: How Should CISOs Respond?AI tools are spreading rapidly and CISOs need to be ready.F5.COM
30 JunThe good, the bad and the ugly of AI – Week in security with Tony AnscombeThe growing use of synthetic media and the difficulties in distinguishing between real and fake content raise a slew of legal and ethical questionsWELIVESECURITY.COM
30 JunAI is Here: How Should CISOs Respond?AI tools are spreading rapidly and CISOs need to be ready.F5.COM
30 JunAI is Here: How Should CISOs Respond?AI tools are spreading rapidly and CISOs need to be ready.F5.COM