Malwarecritical
Kaspersky Security Bulletin. Malware Evolution 2011
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2011-0609 | Unspecified Remote Code Execution Vulnerability in Adobe Flash Player | — | 64% | KEV | — KEV |
| CVE-2011-2462 | U3D Memory Corruption in Adobe Reader and Acrobat Enables Remote Code Execution | — | 89% | KEV | — KEV |
| CVE-2011-3402 | Remote Code Execution in Microsoft Windows Kernel TrueType Font Parser (win32k.sys) | — | 78% | KEV | — KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | hbgaryfederal.com | s hacker collective broke into HBGary Federal’s webserver – hbgaryfederal.com – through an SQL injection attack. They were able to extrac |
| ipv4 | 212.95.136.18 | e to identify the attacker as operating from the IP address 212.95.136.18 – in Tehran, Iran. But in terms of size this was nothing co |
From the original article
14 min read at securelist.com
With 2011 coming to its end, it makes sense to sit back and take a look at what’s been happening over the past 12 months in the IT Security world. If we had to summarize the year in a single word, I think it would have to be “explosive.” The multitude of incidents, stories, facts, new trends and intriguing actors is so big that it makes it very hard to come up with a Top-10 of security stories of 2011.
By @Securelist · securelist.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.