https://www.europesays.com/uk/17525/ Microsoft’s New Windows Update — 1 Billion Users Warned: Do Not Delete #CVE202521204 #inetpub #Microsoft #Technology #UK #UnitedKingdom #WhatDoesThisWindowsFolderDo #Windows10 #Windows11 #WindowsSecurity #WindowsSecurityUpdate #WindowsSecurityWarning #WindowsUpdateWarning
Microsoft's New 'inetpub' Folder: A Security Measure or a Cause for Concern?
A recent Windows security update has sparked confusion among users with the unexpected creation of an empty 'inetpub' folder. While Microsoft insists it’s a protective measure, the implications for de...
WhatsApp for Windows Spoofing Flaw Opens Door to Remote Malware Attacks
#WhatsApp #CyberSecurity #WindowsSecurity #CVE202530401 #Infosec #DataProtection #Meta #Vulnerability #RemoteCodeExecution
Critical Windows Zero-Day Vulnerability Exploited by RansomEXX Ransomware Gang
A newly discovered zero-day vulnerability in Windows' Common Log File System (CLFS) has been exploited by the RansomEXX ransomware gang, allowing attackers to gain SYSTEM privileges with minimal effor...
FIN7 *again*? Seriously, these guys just don't quit, do they? 
Heads up – they've cooked up an Anubis backdoor using Python. And nope, *it's not* the Android Trojan people know. It's pretty wild what this thing packs: we're talking remote shell capabilities, file uploads, messing with the registry... 
Basically, the keys to the kingdom!
And let me tell you from a pentester's perspective: Just relying on AV? That's *definitely* not gonna cut it anymore. We all know that, right?
Looks like they're slipping in through compromised SharePoint sites now? Yikes. The nasty part? A Python script decrypts the payload *directly in memory*, making it incredibly tough to spot! 
Plus, their command and control chats happen over a Base64-encoded TCP socket.
So, keep a *sharp eye* on those ZIP attachments! Double-check your SharePoint sites' integrity. You'll also want to monitor network traffic closely (especially that TCP activity!). And make sure your endpoint security is actually up to snuff – remember, they love finding ways to bypass defenses!
How are *you* tackling threats like this one? What are your go-to tools and strategies for defense? 
Let's share some knowledge!
Microsoft Addresses Critical Windows Kernel Zero-Day Exploit: What Developers Need to Know
A recently patched zero-day vulnerability in the Windows Win32 Kernel Subsystem has been exploited since March 2023. With potential impacts on both older and newer Windows versions, developers and org...
New Open-Source Tool Spotlight 
Mimikatz is a well-known open-source tool for extracting credentials from Windows systems. It can retrieve plaintext passwords, hash credentials, and even Kerberos tickets from memory. Used by both researchers and attackers, it highlights the importance of secure credential management in Active Directory environments. #CyberSecurity #WindowsSecurity
Project link on #GitHub 
https://github.com/gentilkiwi/mimikatz
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— 
P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 
Microsoft's Massive January Patch Tuesday: 161 Vulnerabilities Fixed, Including Three Active Zero-Days
In a historic move, Microsoft addresses a staggering 161 security vulnerabilities in its latest Patch Tuesday update, with three zero-day flaws already under active attack. This unprecedented release ...
Microsoft's January Update: A Crucial Step Against BYOVD Threats
In a critical move to bolster Windows security, Microsoft has rolled out the KB5049981 update, featuring an enhanced blocklist aimed at thwarting Bring Your Own Vulnerable Driver (BYOVD) attacks. This...
https://news.lavx.hu/article/microsoft-s-january-update-a-crucial-step-against-byovd-threats
CrowdStrike erklärt Ursache für Windows-Massenausfall: Ein Bug im "Content Validator" führte zur Freigabe fehlerhafter Updates. Millionen PCs waren betroffen. #CrowdStrike #WindowsSecurity #Ausfall #Crash #Bluescreen https://winfuture.de/news,144108.html?utm_source=Mastodon&utm_medium=ManualStatus&utm_campaign=SocialMedia
