The blue screen of the death incident caused by the cybersecurity company CrowdStrike is still unfolding. Although the problematic update has been withdrawn, a large number of damaged Windows systems require IT administrators to...
Security researcher Janggggg has disclosed proof-of-concept (PoC) exploit code for three vulnerabilities (CVE-2024-38023, CVE-2024-38024, CVE-2024-38094) in Microsoft SharePoint Server. Although the researcher has not disclosed detailed technical information, the available PoC code is sufficient...
A security researcher has published a proof-of-concept (PoC) exploit code targeting a recent high-severity vulnerability (CVE-2024-30088) in Microsoft Windows. This critical flaw holds a risk severity score of 7.0 and impacts systems across the...
The French National Cybersecurity Agency (ANSSI) has issued a warning about the continued activity of the Nobelium intrusion set, also known as Midnight Blizzard. This group, believed to be linked to the Russian foreign...
Security researchers are raising the alarm as proof-of-concept (PoC) exploit code targeting a recently patched high-severity vulnerability (CVE-2024-26229) in Microsoft Windows has surfaced on GitHub. The vulnerability could allow attackers to gain SYSTEM privileges,...
A security researcher has published a proof-of-concept (PoC) exploit code targeting a recent important severity vulnerability (CVE-2024-30043) in Microsoft SharePoint Server. Rated with a CVSS score of 6.5, this vulnerability exposes sensitive information and...
The Cybersecurity and Infrastructure Security Agency (CISA) has sounded the alarm regarding active attacks targeting a vulnerability in Microsoft SharePoint Server (CVE-2023-24955). This flaw has now joined CISA’s Known Exploited Vulnerabilities (KEV) catalog, signaling...
A security researcher has published details and proof-of-concept (PoC) code for a Windows CVE-2023-36424 vulnerability that could be exploited to elevate privileges from a Medium Integrity Level to a High Integrity Level. With a...
Microsoft has confirmed a new, significant intrusion by the persistent Russia-based hacking group Midnight Blizzard (NOBELIUM). The threat actors leveraged information exfiltrated during a January cyberattack to gain recent, unauthorized access to Microsoft’s internal...
In an unprecedented turn of events, Microsoft’s security team has recently unearthed an insidious cyber attack, carried out by the notorious Russian state-sponsored actor known as Midnight Blizzard, or Nobelium. This incident was detected...
Recently, Cisco’s Talos intelligence group shed light on a critical vulnerability in Microsoft Excel, a ubiquitous tool in data management and analysis. The vulnerability tracked as CVE-2023-36041 and carrying a CVSS score of 7.8...
This year marks a significant milestone for Microsoft – the tenth anniversary of its Bug Bounty Program. Launched in 2013, this initiative has become a cornerstone of Microsoft’s cybersecurity strategy, awarding over $60 million...
The security of development tools is paramount. As software becomes more integrated with our daily lives, the importance of maintaining the security and integrity of the tools that craft it cannot be understated. This...
In the rapidly evolving landscape of cyber threats, zero-day vulnerabilities serve as hidden trapdoors, allowing cybercriminals a secret entrance. Microsoft, the tech behemoth, has recently turned the spotlight on two significant zero-day vulnerabilities, CVE-2023-4863...
As September rolls in, the tech community knows to brace themselves for Microsoft’s monthly security disclosures, a ritual known as Patch Tuesday. This month, the giant fixed 65 flaws, with two particularly treacherous zero-day...
Support Securityonline.info site. Thanks!
