Microsoft patches three exploited zero-days (CVE-2023-21715, CVE-2023-23376, CVE-2023-21823)
60
Search: “Microsoft Execution Containers”
1,219 stories
60
Patch Tuesday fixes four Microsoft zero
60
Exploring the Latest Mispadu Stealer Variant
Unit 42 found a new Mispadu infostealer variant targeting Mexican users via malicious .url files exploiting the SmartScreen CVE-2023-36025 bypass.
Unit 42 discovered a new variant of Mispadu Stealer, a Delphi-based banking trojan first reported in 2019, found while hunting for the Windows SmartScreen bypass CVE-2023-36025. The campaign uses crafted .url files referencing UNC network-share paths with an HTTP port (@80) that forces payload retrieval over WebDAV via rundll32.exe, avoiding SmartScreen warnings. Analyzed samples (~4 KB, compiled 2023-11-12) predate the CVE publication, and ZIP payloads were likely distributed as email attachments, primarily targeting users in Mexico.
45
60
First Microsoft Patch Tuesday zero-day of 2024 disclosed as part of group of 75 vulnerabilities
60
CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners
CISA added seven actively exploited vulnerabilities to its KEV catalog, including SonicWall SMA 1000 SSRF CVE-2026-83548, amid campaigns deploying reverse shells and crypto miners.
CISA's KEV additions cover flaws in SonicWall SMA 1000 (CVE-2026-83548, CVE-2026-83549), Sangoma Switchvox (CVE-2026-9586), JFrog Artifactory (CVE-2026-82329), Kludex Starlette (CVE-2026-48710), Kestra OSS (CVE-2026-49869) and Berri LiteLLM's MCP endpoint (CVE-2026-59822). SonicWall confirmed active exploitation of the SMA 1000 flaws, while Microsoft and Wiz reported attackers chaining LiteLLM flaws CVE-2026-42271 and CVE-2026-48710 to fingerprint hosts, steal provider API keys and deploy XMRig miners on AI infrastructure. Wiz linked exploitation of the LiteLLM chain to the Qilin ransomware group, and Microsoft detailed a Kestra compromise chain ending in cryptocurrency mining and data harvesting via exposed RAGFlow flaws.
85
60
Microsoft Issues March 2020 Updates to Patch 115 Security Flaws
60
60
60
Microsoft Patch Tuesday for August 2025 — Snort rules and prominent vulnerabilities
60
57
60
Microsoft Releases Patches for 74 New Vulnerabilities in August Update
60
Multiple ArtraDownloader Variants Used by BITTER to Target Pakistan
BITTER used three ArtraDownloader variants since 2015 to target Pakistan, China, and Saudi Arabia, deploying BitterRAT and exploiting CVE-2017-11882 in one wave.
Palo Alto Unit 42 documents ArtraDownloader, a previously unreported downloader family used by the suspected South Asian group BITTER, with three variants and roughly 80 unique samples dating back to February 2015. Between September 2018 and January 2019, BITTER used spearphishing documents hosted on compromised Pakistani websites to target Pakistan and, for the first time, Saudi Arabia; one RTF sample exploited the EQNEDT vulnerability CVE-2017-11882. The downloader retrieves BitterRAT over HTTP, uses simple registry keys for persistence, and byte-level string obfuscation. Infrastructure overlap with the previously reported MY24 InPage-exploit payload was also observed.
48
Latest Microsoft Windows Updates Patch Dozens of Security Flaws
60
Microsoft Patch Tuesday
60
April 2019 Patch Tuesday: Microsoft fixes two actively exploited bugs
60
Microsoft updated MSERT to detect web shells used in attacks against Microsoft Exchange installs
60
U.S. CISA adds Microsoft and Adobe flaws to its Known Exploited Vulnerabilities catalog
60
Microsoft Issues Updates for 96 Vulnerabilities You Need to Patch this Month
60
Microsoft Patches 5 Zero-Day Vulnerabilities Being Exploited in the Wild
60
Patch Tuesday: Microsoft fixes actively exploited Windows kernel vulnerability (CVE-2025-62215)
60
PaperCut Zero-Day Under Active Attack: Emergency Patch Released
PaperCut warns that a zero-day in NG and MF print management products is being actively exploited, shipping emergency patches with no CVE assigned yet.
PaperCut Software confirmed active exploitation of a zero-day affecting PaperCut NG and MF, with confirmed customer incidents, and released emergency patches on Friday ahead of technical details or a CVE assignment. The company urges customers to restrict web access to trusted IP addresses, disconnect application servers from the internet, and watch for indicators including tampered or truncated server.log files, database error strings, and suspicious activity involving pc-app.exe. The article recalls the May 2023 exploitation of CVE-2023-27350 and CVE-2023-27351 by the financially motivated Lace Tempest group, a Clop ransomware RaaS affiliate, though no attacker attribution has been given for the current campaign.
76
60
57
Microsoft releases lightest Patch Tuesday in three years, no zero
60
Microsoft's March Updates Fix 61 Vulnerabilities, Including Critical Hyper
60
Patch Tuesday: 80+ vulnerabilities fixed, one exploited in the wild
60
60
Microsoft Patch Tuesday for August 2022 — Snort rules and prominent vulnerabilities
60
Microsoft Issues Patches For Severe Flaws, Including Office Zero
60
60
60
60
Microsoft Patch Tuesday for November 2025 — Snort rules and prominent vulnerabilities
60
⚡ Weekly Recap: Apple 0-Days, WinRAR Exploit, LastPass Fines, .NET RCE, OAuth Scams & More
60
60
CVE-2022-30190 (Follina) vulnerability in MSDT: description and counteraction
60