article thumbnail

Microsoft warns of critical Windows DNS Server vulnerability that’s ‘wormable’

The Verge

Microsoft is warning of a 17-year-old critical Windows DNS Server vulnerability that the company has classified as “wormable.” Wormable vulnerabilities have the potential to spread via malware between vulnerable computers without user interaction,” explains Mechele?Gruhn Windows DNS Server is a core networking component.

Windows 131
article thumbnail

Malware distributors are switching to less suspicious file types

Network World

After aggressively using JavaScript email attachments to distribute malware for the past year, attackers are now switching to less suspicious file types to trick users. Last week, researchers from the Microsoft Malware Protection Center warned about a new wave of spam emails that carried malicious.LNK files inside ZIP archives.

Malware 60
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Lazarus APT Targeting Cryptocurrency, CISA Warns

SecureWorld News

The threat actors use social engineering to encourage individuals to download trojanized cryptocurrency applications on Windows or macOS operating systems. They use the apps to gain access to the victim's computer and install malware across the network environment, stealing private keys and exploiting other security gaps.

Malware 73
article thumbnail

Microsoft fixes 55 vulnerabilities, 3 exploited by Russian cyberspies

Network World

Fifteen of the vulnerabilities fixed in Microsoft's patch bundle for May are rated as critical and they affect Windows, Microsoft Office, Microsoft Edge, Internet Explorer, and the malware protection engine used in most of the company's anti-malware products.

article thumbnail

The Hacker Mind Podcast: Beyond MITRE ATT&CK

ForAllSecure

Vamosi: So ATT&CK started as a workshop exercise to document common tactics, techniques and procedures, TTPS, that advanced persistent threats used against Windows Enterprise environments, advanced persistent threats are just as they seem. These could be in the operating system, or it could be a third party that's been added.

Tools 40