/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 www.welivesecurity.com
PDF sample malicious and very powerful when vulnerabilities combined
| | gnn.vircom.in
Writable File in Lenovo's Windows Directory Enables a Stealthy AppLocker Bypass - GNN
2.7 parsecs away

Travel
| | [AI summary] A critical security vulnerability in Lenovo's preloaded Windows systems allows attackers to bypass AppLocker through a writable MFGSTAT.zip file using Alternate Data Streams.
| | www.huntress.com
Threat Advisory: Hackers Are Exploiting CVE-2021-40444 | Huntress
2.9 parsecs away

Travel
| | Huntress is monitoring a new threat against Windows OS and Microsoft Office products (CVE-2021-40444). The MSHTML engine is vulnerable to arbitrary code execution.
| | swordbytes.com
Overwolf 1-Click Remote Code Execution - CVE-2021-33501
1.7 parsecs away

Travel
| | SwordBytes researchers have identified an Unauthenticated Remote Code Execution (RCE) vulnerability in Overwolf's Client Application by abusing a Reflected Cross-Site Scripting (XSS) issue present in the "overwolfstore://" URL handler. This vulnerability allows remote unauthenticated attackers to execute arbitrary commands on the underlying operating system that hosts Overwolf's Client Application.
| | www.trendmicro.com
Ransomware Spotlight: Clop | Trend Micro (US)
10.3 parsecs away

Travel
| We take a closer look at the operations of Clop, a prolific ransomware family that has gained notoriety for its high-profile attacks. We review this ransomware group's constantly changing schemes and discuss how companies can shore up defenses against this threat.