zero-day exploit Archives - ThreatsHub Cybersecurity News

Analyzing attacks that exploit the CVE-2021-40444 MSHTML vulnerability

September 15, 2021 TH Author CVE-2021-40444, Cybersecurity, Microsoft security intelligence, Microsoft Threat Intelligence Center (MSTIC), MSHTML, zero-day exploit

This blog details our in-depth analysis of the attacks that used the CVE-2021-40444, provides detection details and investigation guidance for Microsoft 365 Defender customers, and lists mitigation steps for hardening networks against this and similar attacks.
The post Analyzing attacks that exploit the CVE-2021-40444 MSHTML vulnerability appeared first on Microsoft Security Blog. READ MORE HERE…

Microsoft Secure

Protecting customers from a private-sector offensive actor using 0-day exploits and DevilsTongue malware

July 15, 2021 TH Author Cybersecurity, DevilsTongue, Microsoft security intelligence, Microsoft Threat Intelligence Center (MSTIC), private-sector offensive actor (PSOA), zero-day exploit

The Microsoft Threat Intelligence Center (MSTIC) alongside the Microsoft Security Response Center (MSRC) has uncovered a private-sector offensive actor, or PSOA, that we are calling SOURGUM in possession of now-patched, Windows 0-day exploits (CVE-2021-31979 and CVE-2021-33771).
The post Protecting customers from a private-sector offensive actor using 0-day exploits and DevilsTongue malware appeared first on Microsoft Security Blog. READ MORE HERE…

Microsoft Secure

Taking apart a double zero-day sample discovered in joint hunt with ESET

July 2, 2018 TH Author Advanced hunting, CVE-2018-4990, CVE-2018-8120, Cybersecurity, elevation of privilege (EoP), Exploit, Reflective DLL loading, Security Intelligence, Security Response, Windows, Windows 10, Windows Defender ATP, zero-day exploit

In late March 2018, I analyzed an interesting PDF sample found by ESET senior malware researcherAnton Cherepanov. The sample was initially reported to Microsoft as a potential exploit for an unknown Windows kernel vulnerability. During my investigation in parallel with ESET researchers, I was surprised to discover two new zero-day exploits in the same PDF. Read more READ MORE HERE…