Vulnerabilityhigh
IT threat evolution Q2 2019
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-8120 | Local Privilege Escalation in Microsoft Win32k (Windows 7 / Server 2008) | 7.0 | 73% | KEVRansomwarePoC | KEV |
From the original article
13 min read at securelist.com
In March, we published the results of our investigation into a sophisticated supply-chain attack involving the ASUS Live Update Utility , used to deliver BIOS, UEFI and software updates to ASUS laptops and desktops. The attackers added a backdoor to the utility and then distributed it to users through official channels. ASUS was not the only company used by the attackers.
By @Securelist · securelist.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.