Exploit Archives - ThreatsHub Cybersecurity News

Microsoft works with researchers to detect and protect against new RDP exploits

November 7, 2019 TH Author bluekeep, CVE-2019-0708, Cybersecurity, Endpoint security, Exploit, Microsoft security intelligence, Remote Desktop Protocol (RDP), Security Intelligence, Security Response

The new exploit attacks show that BlueKeep will be a threat as long as systems remain unpatched, credential hygiene is not achieved, and overall security posture is not kept in check.
The post Microsoft works with researchers to detect and protect against new RDP exploits appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

A case study in industry collaboration: Poisoned RDP vulnerability disclosure and response

August 7, 2019 TH Author CVE-2019-0887, Cybersecurity, Endpoint security, Event Tracing for Windows (ETW), Exploit, Microsoft Defender Advanced Threat Protection, Microsoft security intelligence, Remote Desktop Protocol (RDP), Security Response, Vulnerability, Windows Security

Through a cross-company, cross-continent collaboration, we discovered a vulnerability, secured customers, and developed fix, all while learning important lessons that we can share with the industry.
The post A case study in industry collaboration: Poisoned RDP vulnerability disclosure and response appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

Taking apart a double zero-day sample discovered in joint hunt with ESET

July 2, 2018 TH Author Advanced hunting, CVE-2018-4990, CVE-2018-8120, Cybersecurity, elevation of privilege (EoP), Exploit, Reflective DLL loading, Security Intelligence, Security Response, Windows, Windows 10, Windows Defender ATP, zero-day exploit

In late March 2018, I analyzed an interesting PDF sample found by ESET senior malware researcherAnton Cherepanov. The sample was initially reported to Microsoft as a potential exploit for an unknown Windows kernel vulnerability. During my investigation in parallel with ESET researchers, I was surprised to discover two new zero-day exploits in the same PDF. Read more READ MORE HERE…

Threatpost

Researchers Warn of Microsoft Zero-Day RCE Bug

June 1, 2018 TH Author arbitrary code, Exploit, JScript, Microsoft, Microsoft vulnerability, Vulnerabilities, Web Security, Windows, zdi

A Microsoft Windows vulnerability enables remote attackers to execute arbitrary code – and there’s no patch yet. READ MORE HERE…