Blog – Page 2 – Biswajit Pradhan

Windows 11 KB5040527 update fixes Windows Backup failures

Vulnerability / Biswajit Pradhan / Leave a Comment

Microsoft has released the optional KB5040527 preview cumulative update for Windows 11 23H2 and 22H2, which includes fixes for Windows Backup and upgrade failures. The July 2024 non-security preview update fixes an issue that sometimes caused Windows backups to fail on devices with an Extensible Firmware Interface (EFI) system partition (ESP). It also addresses a known Windows […]

Windows 11 KB5040527 update fixes Windows Backup failures Read More »

Critical ServiceNow RCE flaws actively exploited to steal credentials

Vulnerability / Biswajit Pradhan / Leave a Comment

Threat actors are chaining together ServiceNow flaws using publicly available exploits to breach government agencies and private firms in data theft attacks. This malicious activity was reported by Resecurity, which, after monitoring it for a week, identified multiple victims, including government agencies, data centers, energy providers, and software development firms. Although the vendor released security updates

Critical ServiceNow RCE flaws actively exploited to steal credentials Read More »

PKfail Secure Boot bypass lets attackers install UEFI malware

Vulnerability / Biswajit Pradhan / Leave a Comment

Hundreds of UEFI products from 10 vendors are susceptible to compromise due to a critical firmware supply-chain issue known as PKfail, which allows attackers to bypass Secure Boot and install malware. As the Binarly Research Team found, affected devices use a test Secure Boot “master key”—also known as Platform Key (PK)—generated by American Megatrends International

PKfail Secure Boot bypass lets attackers install UEFI malware Read More »

FBI, CISA, and Partners Release Advisory Highlighting North Korean Cyber Espionage Activity

Vulnerability / Biswajit Pradhan / Leave a Comment

Today, CISA—in partnership with the Federal Bureau of Investigation (FBI)—released a joint Cybersecurity Advisory, North Korea State-Sponsored Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs. The advisory was coauthored with the following organizations: U.S. Cyber National Mission Force (CNMF); U.S. Department of Defense Cyber Crime Center (DC3); U.S. National Security Agency

FBI, CISA, and Partners Release Advisory Highlighting North Korean Cyber Espionage Activity Read More »

Siemens SICAM Products | CISA

Vulnerability / Biswajit Pradhan / Leave a Comment

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens’ ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack

Siemens SICAM Products | CISA Read More »

North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs

Vulnerability / Biswajit Pradhan / Leave a Comment

The U.S. Federal Bureau of Investigation (FBI) and the following authoring partners are releasing this Cybersecurity Advisory to highlight cyber espionage activity associated with the Democratic People’s Republic of Korea (DPRK)’s Reconnaissance General Bureau (RGB) 3rd Bureau based in Pyongyang and Sinuiju: The RGB 3rd Bureau includes a DPRK (aka North Korean) state-sponsored cyber group

North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs Read More »

CISA Releases Two Industrial Control Systems Advisories

Vulnerability / Biswajit Pradhan / Leave a Comment

CISA released two Industrial Control Systems (ICS) advisories on July 25, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisories for technical details and mitigations. This content is being syndicated from Source link for documentation purpose. If

CISA Releases Two Industrial Control Systems Advisories Read More »

Positron Broadcast Signal Processor | CISA

Vulnerability / Biswajit Pradhan / Leave a Comment

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available Vendor: Positron S.R.L Equipment: Broadcast Signal Processor TRA7005 Vulnerability: Authentication Bypass Using an Alternate Path or Channel 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to bypass authentication and access unauthorized protected areas of the

Positron Broadcast Signal Processor | CISA Read More »

Why Multivendor Cybersecurity Stacks Are Increasingly Obsolete

Vulnerability / Biswajit Pradhan / Leave a Comment

Once upon a time, I.T. security teams depended on hodgepodges of different cybersecurity solutions from various vendors. However, these multivendor tech stacks became prohibitively costly and complex to integrate and manage, creating gaps for threat actors to exploit. In a webinar for MSP and SME leaders, Cynet experts will explain how these challenges are driving

Why Multivendor Cybersecurity Stacks Are Increasingly Obsolete Read More »

BreachForums v1 database leak is an OPSEC test for hackers

Vulnerability / Biswajit Pradhan / Leave a Comment

The entire database for the notorious BreachForums v1 hacking forum was released on Telegram Tuesday night, exposing a treasure trove of data, including members’ information, private messages, cryptocurrency addresses, and every post on the forum. This data comes from a database backup allegedly sold by Conor Fitzpatrick, aka Pompompurin. In 2022, after the RaidForums hacking

BreachForums v1 database leak is an OPSEC test for hackers Read More »