⚠️ VULNERABILITY DISCLOSURE 2[−]
14 OctCalls for Visual Studio security tweak fall on deaf earssubmitted by c0mmando to netsec 1 points | 0 comments https://www.theregister.com/2023/10/13/fresh_visual_studio_rce_exploit/ Perceived weaknesses in the security of Microsoft’s Visual Studio IDE are being raised once again this week with a fresh single-click exploit. Developed b…THEREGISTER.COM
14 OctAI algorithm detects MitM attacks on unmanned military vehiclesProfessors at the University of South Australia and Charles Sturt University have developed an algorithm to detect and intercept man-in-the-middle (MitM) attacks on unmanned military robots. [...]BLEEPINGCOMPUTER.COM
🔥 INCIDENT REPORTING 2[−]
14 OctKwik Trip IT Systems Outage Caused by Mysterious ‘Network Incident’The outages have affected various operations, such as new orders, payments, and access to support systems, leading to customer frustration and the posting of signs by employees.BLEEPINGCOMPUTER.COM
14 OctDarkGate malware spreads through compromised Skype accountsBetween July and September, DarkGate malware attacks have used compromised Skype accounts to infect targets through messages containing VBA loader script attachments. [...]BLEEPINGCOMPUTER.COM
🌐 CYBER THREAT LANDSCAPE 1[−]
14 Oct“EtherHiding” — Hiding Web2 Malicious Code in Web3 Smart ContractsA new malware campaign called "EtherHiding" has emerged, using BSC contracts to host parts of a malicious code chain. The campaign starts by hijacking WordPress sites and tricking users into downloading fake browser updates that are actually malware.LABS.GUARD.IO
📡 INFOSEC NEWS 3[−]
14 OctVoice Phishing Campaigns Using Access KeysThe phishing attack starts with an HTML file disguised as a voice message, which leads to the download of a file hosted on a disguised AWS URL. The attackers initially impersonate Zoom but later switch to spoofing Outlook and Teams login pages.COFENSE.COM
14 OctMicrosoft to Phase Out NTLM in Favor of Kerberos for Stronger AuthenticationMicrosoft has announced that it plans to eliminate NT LAN Manager (NTLM) in Windows 11 in the future, as it pivots to alternative methods for authentication and bolster security. "The focus is on strengthening the Kerberos authentication protocol, which has been the default since…THEHACKERNEWS.COM
14 OctUbuntu discovers 'hate speech' in release 23.10 — how to upgrade?Ubuntu, the most popular Linux distribution, has pulled its Desktop release 23.10 after its Ukrainian translations were discovered to contain hate speech. According to the Ubuntu project, a malicious contributor is behind anti-Semitic, homophobic, and xenophobic slurs that were i…BLEEPINGCOMPUTER.COM