New Windows Search zero-day Added to Microsoft Protocol Nightmare A new Windows Search zero-day vulnerability can be used to automatically open a search window containing remotely-hosted malware executables simply by launching a Word document. The security issue can be leveraged because Windows supports a URI protocol handler called ‘search-ms’ that allows Read more…
Windows MSDT zero-day Vulnerability Gets Free Unofficial Patch A free unofficial patch is now available to block ongoing attacks against Windows systems that target a critical zero-day vulnerability known as ‘Follina.’ The bug, now tracked as CVE-2022-30190 and described by Redmond as a Microsoft Windows Support Diagnostic Tool (MSDT) remote code execution flaw, impacts all Windows Read more…
Windows MSDT zero-day Now Exploited by Chinese APT Hackers Chinese-linked threat actors are now actively exploiting a Microsoft Office zero-day vulnerability (known as ‘Follina’) to execute malicious code remotely on Windows systems. Described by Microsoft as a remote code execution flaw in the Microsoft Windows Support Diagnostic Tool (MSDT) and tracked as CVE-2022-30190, Read more…
Microsoft Shares Mitigation for Office zero-day Exploited in Attacks Microsoft has shared mitigation measures to block attacks exploiting a newly discovered Microsoft Office zero-day flaw abused in the wild to execute malicious code remotely. The bug is a Microsoft Windows Support Diagnostic Tool (MSDT) remote code execution vulnerability reported by crazyman of Read more…
Penetration testing meaning Penetration testing is a type of ethical hacking also known as pen testing, security pen testing, and security testing. It refers to the deliberate initiation of simulated cyberattacks by “white hat” penetration testers employing tactics and tools meant to access or exploit computer systems, networks, websites, and Read more…
Google Quietly Bans Deepfake Training Projects on Colab Google has quietly banned deepfake projects on its Colaboratory (Colab) service, putting an end to the large-scale utilization of the platform’s resources for this purpose. Colab is an online computing resource that allows researchers to run Python code directly through the browser Read more…
New Microsoft Office zero-day Used in Attacks to Execute PowerShell Security researchers have discovered a new Microsoft Office zero-day vulnerability that is being used in attacks to execute malicious PowerShell commands via Microsoft Diagnostic Tool (MSDT) simply by opening a Word document. The vulnerability, which has yet to receive a Read more…
Spoof Email Meaning Email spoofing is a tactic employed in spam and phishing campaigns to deceive consumers into believing a communication originated from a person or organization they know or can trust. In spoofing attacks, the sender falsifies email headers such that client software shows the fake sender address, which Read more…
Microsoft: The New Windows 11 Features from Build 2022 During the Build 2022 developer conference, Microsoft announced a number of new features for Windows 11, including an improved Windows Subsystem for Android (WSA) and more. Microsoft is upgrading the Android OS within the subsystem to Android 12L and adding support Read more…
Microsoft Finds Severe Bugs in Android Apps from Large Mobile Providers Microsoft security researchers have found high severity vulnerabilities in a framework used by Android apps from multiple large international mobile service providers. The researchers found these vulnerabilities (tracked as CVE-2021-42598, CVE-2021-42599, CVE-2021-42600, and CVE-2021-42601) in a mobile framework owned by mce Systems exposing users to Read more…
Let us help you out.
Singapore
7 Temasek Boulevard
#12-07, Suntec Tower One
Singapore 038987
Thailand
The Royal Place 1
2, 2/399 Mahatlek Luang 1 Alley, Lumphini, Pathum Wan, Bangkok 10330, Thailand
Subscribe to our mailing list to get free tips on Data Protection and Data Privacy updates weekly!
Click one of our contacts below to chat on WhatsApp
