Exploit / PoCcritical

Microsoft Warns of Widescale Credential Stealing Attacks by Russian Hackers

The Hacker Newsby @TheHackersNewsJun 27, 2023 · 14:11 UTC (Jun 27, 2023)2 min read1 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2020-12641 CVE-2020-35730 CVE-2021-44026 CVE-2023-23397

Tags: cve-2020-12641 cve-2020-35730 cve-2021-44026 cve-2023-23397 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-12641	Command Injection RCE in Roundcube Webmail (CVE-2020-12641)	9.8	84%	KEVPoC	May 4, 2020 KEV Jun 22, 2023
CVE-2020-35730	Cross-Site Scripting in Roundcube Webmail Plain-Text Email Link Handling	6.1	33%	KEV	Dec 28, 2020 KEV Jun 22, 2023
CVE-2021-44026	SQL Injection in Roundcube Webmail via Search Parameters	9.8	70%	KEV	Nov 19, 2021 KEV Jun 22, 2023
CVE-2023-23397	Zero-Click Elevation of Privilege in Microsoft Outlook (Forced NTLM Credential Leak)	9.8	97%	KEV	Mar 14, 2023 KEV Mar 14, 2023

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Jun 26, 2023 Cyber Threat / Password Security Microsoft has disclosed that it's detected a spike in credential-stealing attacks conducted by the Russian state-affiliated hacker group known as Midnight Blizzard.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.