Search: “smb”

162 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 319 Ransomware 318 Malware 166 Exploit / PoC 113 Industry 94 Threat actor 54 Data breach 42 Policy & legal 39 Phishing & fraud 13 Advisory 13 AI tools & infra 10 AI safety & security 8 Tools 8 Research 5

SeverityAll critical 534 high 382 medium 162 low 91 info 41

Apple Updates Everything, (Mon, Sep 14th)

Apple patched a record 261 vulnerabilities across iOS 27, macOS Golden Gate 27, watchOS 27, and other platforms, with none flagged as exploited.

Apple's annual OS update shipped iOS/iPadOS 27, macOS Golden Gate 27, tvOS 27, watchOS 27, and visionOS 27 plus bug-fix releases for the 26 and 15 branches, fixing a record 261 vulnerabilities. Notable issues include multiple kernel flaws allowing root privilege escalation (CVE-2026-43689, CVE-2026-43691, CVE-2026-43698, CVE-2026-43786), remote code execution in CUPS (CVE-2026-43692), kernel memory corruption via malicious NFS servers (CVE-2026-43686, CVE-2026-43687), and WebKit memory corruption from crafted web content (CVE-2026-43715). No vulnerabilities are labeled as actively exploited, and Apple does not assign per-CVE severities. Users report iOS 26.7 being downloaded when iOS 27 is intended, and tools like Little Snitch and BlockBlock need updates before upgrading to macOS 27.

SANS Internet Storm CenterSep 14, 18:33 UTC · 1d agoVulnerability CVE-2022-3437 CVE-2026-20683 CVE-2026-28899+27 CVEs

Stealing Windows credentials using Google Chrome

Help Net SecurityMay 15, 00:00 UTC · May 15, 2017Vulnerability

Beware! Hackers Can Steal Your Windows Password Remotely Using Chrome

The Hacker NewsMay 17, 10:14 UTC · May 17, 2017Vulnerability

CVE-2018-0950 flaw in Microsoft Outlook could be exploited to steal Windows Passwords

Security AffairsApr 12, 16:31 UTC · Apr 12, 2018Vulnerability CVE-2018-0950

Update on Snort and ClamAV for ms08

Cisco TalosOct 28, 18:43 UTC · Oct 28, 2008Exploit / PoC

Most SMB devices run Windows versions that are expired or will expire by January 2020

Help Net SecurityJul 9, 00:00 UTC · Jul 9, 2019Vulnerability

36% of orgs expose insecure FTP protocol to the internet, and some still use Telnet

Help Net SecurityAug 10, 00:00 UTC · Aug 10, 2022Data breach

Flaw in Microsoft Outlook Lets Hackers Easily Steal Your Windows Password

The Hacker NewsApr 12, 07:29 UTC · Apr 12, 2018Vulnerability CVE-2018-0950

'Illusion Gap' attack method bypasses Windows Defender and executes malware

Security AffairsOct 1, 13:20 UTC · Oct 1, 2017Malware1

Prometei, a new modular crypto

Security AffairsJul 23, 06:10 UTC · Jul 23, 2020Vulnerability

Rule Release for today

Cisco TalosApr 8, 22:03 UTC · Apr 8, 2009Vulnerability

83% of SMB owners have no cash put aside to deal with the fallout from a cyber attack

Help Net SecuritySep 19, 00:00 UTC · Sep 19, 2018Vulnerability

Are SMBs driving the adoption of security automation by enterprises?

Help Net SecurityJun 19, 11:54 UTC · Jun 19, 2018Malware

Microsoft Patches RoguePlanet Defender Flaw That Can Grant SYSTEM Privileges

The Hacker NewsJul 11, 13:49 UTC · Jul 11, 2026Vulnerability CVE-2026-50656 CVE-2026-33825 CVE-2026-45498+1 CVEs1

Experts detailed Microsoft Outlook flaw that can leak NTLM v2 hashed passwords

Security AffairsJan 29, 18:26 UTC · Jan 29, 2024Vulnerability CVE-2023-356361

Datto introduces networking solutions for MSP and SMB markets

Help Net SecurityJan 25, 00:00 UTC · Jan 25, 2023Malware

How to use weaponized PDF documents to steal Windows credentials

Security AffairsApr 28, 12:40 UTC · Apr 28, 2018Exploit / PoC

SMB security: The evolving role of SaaS and IT outsourcing

Help Net SecurityOct 24, 00:00 UTC · Oct 24, 2016Malware

Another severe flaw in Signal desktop app lets hackers steal your chats in plaintext

The Hacker NewsMay 15, 00:00 UTC · May 15, 2018Exploit / PoC CVE-2018-10994 CVE-2018-11101

USN-8729-1: Linux kernel vulnerabilities

Ubuntu issued USN-8729-1 fixing Linux kernel vulnerabilities across ARM, Bluetooth, GPU, SCSI, SMB, and Azure MANA subsystems.

Ubuntu released USN-8729-1 addressing several security issues discovered in the Linux kernel that could allow an attacker to compromise the system. Fixes span ARM32/ARM64/PowerPC architectures, Bluetooth, GPU, InfiniBand, and network drivers, plus the Microsoft Azure Network Adapter (MANA) driver. The update also corrects flaws in the SCSI and SPI subsystems, SMB and NTFS3 file systems, EFI core, and file systems infrastructure.

Ubuntu Security NoticesSep 7, 09:08 UTC · 9d agoAdvisory 6 sources

Exploring the Latest Mispadu Stealer Variant

Unit 42 found a new Mispadu infostealer variant targeting Mexican users via malicious .url files exploiting the SmartScreen CVE-2023-36025 bypass.

Unit 42 discovered a new variant of Mispadu Stealer, a Delphi-based banking trojan first reported in 2019, found while hunting for the Windows SmartScreen bypass CVE-2023-36025. The campaign uses crafted .url files referencing UNC network-share paths with an HTTP port (@80) that forces payload retrieval over WebDAV via rundll32.exe, avoiding SmartScreen warnings. Analyzed samples (~4 KB, compiled 2023-11-12) predate the CVE publication, and ZIP payloads were likely distributed as email attachments, primarily targeting users in Mexico.

Palo Alto Unit 42Aug 17, 11:46 UTC · Aug 17, 2026Malware in the wildCVE-2023-360251

Security Flaw in Styra's OPA Exposes NTLM Hashes to Remote Attackers

The Hacker NewsOct 23, 05:48 UTC · Oct 23, 2024Vulnerability CVE-2024-8260 CVE-2024-43532

When Pentest Tools Go Brutal: Red-Teaming Tool Being Abused by Malicious Actors

Palo Alto Unit 42Jun 5, 20:22 UTC · Jun 5, 2024AI safety & security

Warning: Thread Hijacking Attack Targets IT Networks, Stealing NTLM Hashes

The Hacker NewsMar 5, 15:52 UTC · Mar 5, 2024Malware

Necro Python bot now enhanced with new VMWare, server exploits

Security AffairsJun 4, 18:17 UTC · Jun 4, 2021Vulnerability CVE-2017-0144 CVE-2017-0147

Year-Old Samba flaw allows escaping from the share path definition

Security AffairsSep 5, 14:19 UTC · Sep 5, 2019Vulnerability CVE-2019-10197

Turla renews its arsenal with Topinambour

Kaspersky SecurelistJul 15, 10:00 UTC · Jul 15, 2019Threat actor1

Carbanak gang makes the headlines again, hackers refined intrusion tactics

Security AffairsOct 9, 21:08 UTC · Oct 9, 2017Exploit / PoC

Microsoft won't patch a 20-year

Security AffairsJul 31, 08:02 UTC · Jul 31, 2017Vulnerability

This CIA Tool Hacks Windows Computers Silently Over the Network

The Hacker NewsJun 2, 16:57 UTC · Jun 2, 2017Malware

#Vault7: CIA Pandemic implant turns file servers into malware infectors

Security AffairsJun 1, 20:37 UTC · Jun 1, 2017Malware

xHunt Campaign: Attacks on Kuwait Shipping and Transportation Organizations

xHunt deployed custom backdoors Hisoka, Killua, Gon, and EYE against Kuwait shipping and transportation organizations, using DNS tunneling and email-draft C2 channels.

Unit 42 observed the xHunt campaign targeting Kuwait transportation and shipping organizations between May and June 2019, installing backdoors named after characters from the anime Hunter x Hunter, including Hisoka, Killua, Sakabota, and Netero. The tools use HTTP and DNS tunneling for C2, and Hisoka v0.9 added an unusual email-based C2 channel that abuses Exchange Web Services with stolen credentials to exchange email drafts. The Gon tool provides port scanning, file transfer, screenshots, remote command execution, and RDP session creation, while EYE acts as a cleanup failsafe if a legitimate user logs in. Related activity targeting Kuwait between July and December 2018 was reported by IBM X-Force IRIS, suggesting the campaigns are likely related.

Palo Alto Unit 42Aug 17, 13:21 UTC · 29d agoThreat actor1