MATLOCK.CA
161Articles
9Categories
2024-02-13Date
🚨
CISA Adds Two Known Exploited Vulnerabilities to CatalogCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog , based on evidence of active exploitation. CVE-2024-21412 Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability CVE-2024-21351 Microsoft Windows SmartScreen Security F…
KEVCISA.GOV — Tue, 13 Feb 24 1
🐛
Ivanti Vulnerability Exploited to Install 'DSLog' Backdoor on 670+ IT Infrastructures
THEHACKERNEWS.COM — 13 Feb 2024
🐛
Alert: CISA Warns of Active 'Roundcube' Email Attacks - Patch Now
KEVTHEHACKERNEWS.COM — 13 Feb 2024
🐛
ISC Releases Security Advisories for BIND 9
CISA.GOV — Tue, 13 Feb 24 1
🐛
CVE-2024-20667 Azure DevOps Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2023-50387 MITRE: CVE-2023-50387 DNSSEC verification complexity can be exploited to exhaust CPU resources and stall DNS resolvers
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21327 Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21329 Azure Connected Machine Agent Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21338 Windows Kernel Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21340 Windows Kernel Information Disclosure Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21349 Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21350 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21351 Windows SmartScreen Security Feature Bypass Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21352 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21354 Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21357 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21358 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21360 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21361 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21366 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21369 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21371 Windows Kernel Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21372 Windows OLE Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21375 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21379 Microsoft Word Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21381 Microsoft Azure Active Directory B2C Spoofing Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21386 .NET Denial of Service Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21389 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21393 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21394 Dynamics 365 Field Service Spoofing Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21396 Dynamics 365 Sales Spoofing Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21401 Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21402 Microsoft Outlook Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21404 .NET Denial of Service Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21413 Microsoft Outlook Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21420 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-20673 Microsoft Office Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-20679 Azure Stack Hub Spoofing Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21304 Trusted Compute Base Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21315 Microsoft Defender for Endpoint Protection Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-20695 Skype for Business Information Disclosure Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21328 Dynamics 365 Sales Spoofing Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-20684 Windows Hyper-V Denial of Service Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21339 Windows USB Generic Parent Driver Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21341 Windows Kernel Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21342 Windows DNS Client Denial of Service Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21343 Windows Network Address Translation (NAT) Denial of Service Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21344 Windows Network Address Translation (NAT) Denial of Service Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21345 Windows Kernel Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21346 Win32k Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21347 Microsoft ODBC Driver Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21348 Internet Connection Sharing (ICS) Denial of Service Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21353 Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21355 Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21356 Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21359 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21362 Windows Kernel Security Feature Bypass Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21363 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21364 Microsoft Azure Site Recovery Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21365 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21367 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21368 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21370 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21374 Microsoft Teams for Android Information Disclosure
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21376 Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21377 Windows DNS Information Disclosure Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21378 Microsoft Outlook Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21380 Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21384 Microsoft Office OneNote Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21391 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21395 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21397 Microsoft Azure File Sync Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21403 Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21405 Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21406 Windows Printing Service Spoofing Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21410 Microsoft Exchange Server Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
CVE-2024-21412 Internet Shortcut Files Security Feature Bypass Vulnerability
MSRC.MICROSOFT.COM — 13 Feb 2024
🐛
SmartScreen Vulnerability: CVE-2024-21412 Facts and Fixes
TRENDMICRO.COM — 13 Feb 2024
🐛
CVE-2024-21412: Water Hydra Targets Traders with Microsoft Defender SmartScreen Zero-Day
TRENDMICRO.COM — 13 Feb 2024
🐛
Attackers target new Ivanti XXE vulnerability days after patch
KEVCSOONLINE.COM — 13 Feb 2024
⚠️
Blueprint for Threat Intel to Detection Flow (Part 7)
MEDIUM.COM — 13 Feb 2024
⚠️
Critical Patches Issued for Microsoft Products, February 13, 2024
CISECURITY.ORG — 13 Feb 2024
⚠️
Prudential Financial breached in data theft cyberattack
BLEEPINGCOMPUTER.COM — 13 Feb 2024
⚠️
Hackers used new Windows Defender zero-day to drop DarkMe malware
KEVBLEEPINGCOMPUTER.COM — 13 Feb 2024
⚠️
Microsoft February 2024 Patch Tuesday fixes 2 zero-days, 73 flaws
KEVBLEEPINGCOMPUTER.COM — 13 Feb 2024
⚠️
SiCat: Open-Source Exploit Finder
HELPNETSECURITY.COM — 13 Feb 2024
⚠️
Hackers Exploit Ivanti SSRF Flaw to Deploy New DSLog Backdoor
BLEEPINGCOMPUTER.COM — 13 Feb 2024
⚠️
Microsoft Confirms Windows Exploits Bypassing Security Features
SECURITYWEEK.COM — 13 Feb 2024
⚠️
Ivanti Vulnerability Exploited to Deliver New ‘DSLog’ Backdoor
SECURITYWEEK.COM — 13 Feb 2024
⚠️
Fat Patch Tuesday, February 2024 Edition
KREBSONSECURITY.COM — 13 Feb 2024
⚠️
Microsoft February 2024 Patch Tuesday, (Tue, Feb 13th)
ISC.SANS.EDU — 13 Feb 2024
⚠️
Microsoft Releases Security Updates for Multiple Products
CISA.GOV — Tue, 13 Feb 24 1
⚠️
CISA Releases One Industrial Control Systems Advisory
CISA.GOV — Tue, 13 Feb 24 1
⚠️
Adobe Releases Security Updates for Multiple Products
CISA.GOV — Tue, 13 Feb 24 1
⚠️
Seal Security wants to make open source vulnerability remediation easy
TECHCRUNCH.COM — 13 Feb 2024
⚠️
Ivanti Vuln Exploited To Deliver New DSLog Backdoor
PACKETSTORMSECURITY.COM — 13 Feb 2024
⚠️
Infosys Subsidiary Named As Source Of Bank of America Data Leak
PACKETSTORMSECURITY.COM — 13 Feb 2024
⚠️
AI adoption in security taking off amid budget, trust, and skill-based issues
CSOONLINE.COM — 13 Feb 2024
⚠️
How to strengthen your Kubernetes defenses
CSOONLINE.COM — 13 Feb 2024
⚠️
A changing world requires CISOs to rethink cyber preparedness
CSOONLINE.COM — 13 Feb 2024
⚠️
High-profile incidents put spotlight on non-production system security
CSOONLINE.COM — 13 Feb 2024
⚠️
Proactive Compliance, Improving Cybersecurity Culture, and Hiring The Right Skills - BSW #338
YOUTUBE.COM — 2024-02-13
⚠️
Creating Code Security Through Better Visibility - Christien Rioux - ASW #273
YOUTUBE.COM — 2024-02-13
⚠️
The Ultimate OSINT Collection
START.ME — 13 Feb 2024
⚠️
CISA, FBI warn of China-linked hackers pre-positioning for ‘destructive cyberattacks against US critical infrastructure’
THERECORD.MEDIA — 13 Feb 2024
⚠️
Free Rhysida ransomware recovery tool published
THEREGISTER.COM — 13 Feb 2024
📋
Patch Tuesday: Adobe Warns of Critical Flaws in Widely Deployed Software
SECURITYWEEK.COM — 13 Feb 2024
📋
ICS Patch Tuesday: Siemens Addresses 270 Vulnerabilities
SECURITYWEEK.COM — 13 Feb 2024
📢
News alert: Kiteworks named as a founding member of NIST’s new AI safety consortium – ‘AISIC’
LASTWATCHDOG.COM — 13 Feb 2024
📢
Data residency: What is it and why it is important?
SECURITYINTELLIGENCE.COM — 13 Feb 2024
📢
Raspberry Pi Pico cracks BitLocker in under a minute
THEREGISTER.COM — 13 Feb 2024
🔥
Integris Health says data breach impacts 2.4 million patients
BLEEPINGCOMPUTER.COM — 13 Feb 2024
🔥
Jet Engine Dealer to Major Airlines Discloses ‘Unauthorized Activity’
THEREGISTER.COM — 13 Feb 2024
🔥
Bank of America Warns Customers of Data Breach After Vendor Hack
BLEEPINGCOMPUTER.COM — 13 Feb 2024
🔥
French Healthcare Payments Processor Breaches Affect Half of Population
SECURITYWEEK.COM — 13 Feb 2024
🔥
Willis Lease Finance Corp Discloses Cyberattack
SECURITYWEEK.COM — 13 Feb 2024
🔥
Bank of America Customer Data Stolen in Data Breach
SECURITYWEEK.COM — 13 Feb 2024
🔥
Midnight Blizzard and Cloudflare-Atlassian Cybersecurity Incidents: What to Know
THEHACKERNEWS.COM — 13 Feb 2024
🔥
DarkGate Malware opens RaaS For Financially Motivated Hackers
GBHACKERS.COM — 13 Feb 2024
🔥
DNA Testing: What Happens If Your Genetic Data Is Hacked?
PACKETSTORMSECURITY.COM — 13 Feb 2024
🔥
Korean Eggheads Crack Rhysida Ransomware And Release Free Decryptor Tool
PACKETSTORMSECURITY.COM — 13 Feb 2024
🔥
Tool sprawl is hurting application security, US CSOs say
CSOONLINE.COM — 13 Feb 2024
🔥
Cyber Attacks Spike Suddenly Prior to Taiwan’s Election
VOANEWS.COM — 13 Feb 2024
🔥
Decrypted: Rhysida Ransomware - "we are now publicly releasing our decryptor for download to all victims of the Rhysida ransomware"
DECODED.AVAST.IO — 13 Feb 2024
🕵️
A Hacker’s Mind is Out in Paperback
SCHNEIER.COM — 2024-02-13
🕵️
Molly White Reviews Blockchain Book
SCHNEIER.COM — 2024-02-13
🕵️
200,000 Facebook Marketplace user records leaked on hacking forum
BLEEPINGCOMPUTER.COM — 13 Feb 2024
🕵️
5 Steps to Improve Your Security Posture in Microsoft Teams
BLEEPINGCOMPUTER.COM — 13 Feb 2024
🕵️
JFK Airport Taxi Hackers Sentenced to Prison
SECURITYWEEK.COM — 13 Feb 2024
🕵️
PikaBot Resurfaces with Streamlined Code and Deceptive Tactics
THEHACKERNEWS.COM — 13 Feb 2024
🕵️
ISC Stormcast For Tuesday, February 13th, 2024 https://isc.sans.edu/podcastdetail/8850, (Tue, Feb 13th)
ISC.SANS.EDU — 13 Feb 2024
🕵️
CyberheistNews Vol 14 #07 Social Engineering Masterstroke: How Deepfake CFO Duped a Firm out of $25 Million
KNOWBE4.COM — 13 Feb 2024
🕵️
Fileless Revenge RAT Abuses Legitimate Tools to Hide Malicious Activity
GBHACKERS.COM — 13 Feb 2024
🕵️
New Azure Hacking Campaign Steals Senior Executive Accounts
GBHACKERS.COM — 13 Feb 2024
🕵️
Turk Hack Team Attacked the World’s Largest Cooperative Finance
GBHACKERS.COM — 13 Feb 2024
🕵️
What Is Volt Typhoon And Why Is It The Defining Threat Of Our Generation?
PACKETSTORMSECURITY.COM — 13 Feb 2024
🕵️
LLMs & Security Tools, Shim Vuln, AI Threat Models, Configuration as Code with Pkl - ASW #273
YOUTUBE.COM — 2024-02-13
🕵️
Angry mobs, Azure, Avanti, Rhysida, Warzone, Flipper Zero, Josh Marpet, and More - SWN #362
YOUTUBE.COM — 2024-02-13
🕵️
Angry mobs, Azure, Avanti, Rhysida, Warzone, Flipper Zero, Josh Marpet, and More – SWN #362
YOUTUBE.COM — 2024-02-13
🕵️
The Business Side of AI - Edward Contreras - CSP #161
YOUTUBE.COM — 2024-02-13
🕵️
83% of Indian cybersecurity, IT workers impacted by burnout, fatigue: Report - Social News XYZ
SOCIALNEWS.XYZ — 13 Feb 2024
🕵️
ChatGPT Account Takeover via Wildcard Web Cache Deception
NOKLINE.GITHUB.IO — 13 Feb 2024
🕵️
PAPERWALL: Chinese Websites Posing as Local News Outlets Target Global Audiences with Pro-Beijing Content
CITIZENLAB.CA — 13 Feb 2024
🌐
Bumblebee malware attacks are back after 4-month break
BLEEPINGCOMPUTER.COM — 13 Feb 2024
🌐
Diving Into Glupteba's UEFI Bootkit
UNIT42.PALOALTONETWORKS.COM — 13 Feb 2024
🌐
Notorious Bumblebee Malware Re-emerges with New Attack Methods
INFOSECURITY-MAGAZINE.COM — 13 Feb 2024
🌐
Glupteba Botnet Evades Detection with Undocumented UEFI Bootkit
THEHACKERNEWS.COM — 13 Feb 2024
📡
Sophos Wins Top Employer Awards in British Columbia, Canada
SOPHOS.COM — 13 Feb 2024
📡
Windows 10 KB5034763 update released with new fixes, changes
BLEEPINGCOMPUTER.COM — 13 Feb 2024
📡
Windows 11 KB5034765 update released with Start Menu fixes
BLEEPINGCOMPUTER.COM — 13 Feb 2024
📡
Hackers steal $290 million in crypto from PlayDapp gaming platform
BLEEPINGCOMPUTER.COM — 13 Feb 2024
📡
Fertility tracker Glow fixes bug that exposed users’ personal data
TECHCRUNCH.COM — 13 Feb 2024
📡
Azure Account Takeover Campaign Targets Senior Execs
PACKETSTORMSECURITY.COM — 13 Feb 2024
📡
JFK Airport Taxi Hackers Sentenced To Prison
PACKETSTORMSECURITY.COM — 13 Feb 2024
📡
Your Mac Is Not Virus Proof. It Never Has Been.
PACKETSTORMSECURITY.COM — 13 Feb 2024
📡
Global Cybersecurity Trends: AI, Geopolitical Risks, and Zero Trust
TRENDMICRO.COM — 13 Feb 2024
📡
Global Cybersecurity Trends: AI, Geopolitical Risks, and Zero Trust
TRENDMICRO.COM — 13 Feb 2024
📡
Cyberthreats to marketing | Kaspersky official blog
KASPERSKY.COM — 13 Feb 2024
📡
PHP deserialization attacks and a new gadget chain in Laravel
QUARKSLAB.COM — 2024-02-13
📡
Deepfakes in the global election year of 2024: A weapon of mass deception?
WELIVESECURITY.COM — 13 Feb 2024
📡
Hackers mint 1.79 billion crypto tokens from PlayDapp gaming platform
BLEEPINGCOMPUTER.COM — 13 Feb 2024