alt=The image shows a file explorer displaying itself, with the additional information of a Notepad++ plugin to execute malicious code.

2024-04-06 Post a Comment

Hackers Hijacked Notepad++ Plugin To Execute Malicious Code

ByGuru Baran: The AhnLab Security Intelligence Center (ASEC) has detected a sophisticated cyberattack targeting users of the popular text and code editor, Notepad++. Hackers have successfully manipulated a default plugin within the Notepad++ package, potentially compromising the security of countless systems. The plugin in question, “mimeTools.dll,” is a standard component of Notepad++ that provides encoding functionalities, such as Base64. It is automatically included and loaded when Notepad++ is run, which the […]

alt=Image: The top security software for 2020. Protect your data with advanced features. Shield against threats like XZ / liblzma backdoor.

Cyber security

2024-04-06 Post a Comment

500ms to midnight: XZ / liblzma backdoor

SAMIR BOUSSEADEN•MIKA AYENSON•JAKE KING: Elastic Security Labs is releasing an initial analysis of the XZ Utility backdoor, including YARA rules, osquery, and KQL searches to identify potential compromises. Key Takeaways On March 29, 2024, Andres Freund identified malicious commits to the command-line utility XZ, impacting versions 5.6.0 and 5.6.1 for Linux, and shared the information on the oss-security mailing list. Andres’ discovery was made after an increase of 500ms in latency was […]

alt=A diagram illustrating the process of hacking DHCP to gain elevated privileges on Windows.

Cyber security

2024-03-26 1 comment

DHCP Hacked To Escalate Privileges In Windows Domains

ByBalaji: Security researchers have uncovered a sophisticated method of exploiting the Dynamic Host Configuration Protocol (DHCP) administrators group to escalate privileges within Windows domains. This technique, dubbed “DHCP Coerce,” leverages legitimate privileges to compromise entire networks potentially. The vulnerability centers around the DHCP (Dynamic Host Configuration Protocol) service, which is essential for network administration. It automates the assignment of IP addresses, simplifying the management of network connections. However, this convenience […]

alt=. Cutting-edge technology featuring virtual reality and artificial intelligence.

Cyber security

2024-03-26 Post a Comment

Major CPU, Software Vendors Impacted by New GhostRace Attack

By Eduard Kovacs A team of researchers from IBM and the VU Amsterdam university in the Netherlands on Tuesday disclosed the details of a new type of data leakage attack impacting all major CPU makers, as well as some widely used software. The new attack, dubbed GhostRace, is related to what the researchers describe as speculative race conditions (SRCs). Such an attack could allow threat actors to obtain potentially sensitive information […]

Cyber security

2024-02-10 Post a Comment

Government hackers targeted iPhone owners with zero-days, Google says

Lorenzo Franceschi-Bicchierai@lorenzofb Government hackers last year exploited three unknown vulnerabilities in Apple’s iPhone operating system to target victims with spyware developed by a European startup, according to Google. On Tuesday, Google’s Threat Analysis Group, the company’s team that investigates nation-backed hacking, published a report analyzing several government campaigns conducted with hacking tools developed by several spyware and exploit sellers, including Barcelona-based startup Variston. In one of the campaigns, according to Google, government […]

Hackers Hijacked Notepad++ Plugin To Execute Malicious Code

Like this:

500ms to midnight: XZ / liblzma backdoor

Like this:

DHCP Hacked To Escalate Privileges In Windows Domains

Like this:

Major CPU, Software Vendors Impacted by New GhostRace Attack

Like this:

Government hackers targeted iPhone owners with zero-days, Google says

Like this:

Hackers Hijacked Notepad++ Plugin To Execute Malicious Code

Please Share this:

Like this:

500ms to midnight: XZ / liblzma backdoor

Please Share this:

Like this:

DHCP Hacked To Escalate Privileges In Windows Domains

Please Share this:

Like this:

Major CPU, Software Vendors Impacted by New GhostRace Attack

Please Share this:

Like this:

Government hackers targeted iPhone owners with zero-days, Google says

Please Share this:

Like this: