SecureTeam

September Patch Tuesday fixes Critical and Zero Day vulnerabilities

The September Patch Tuesday security bundle from Microsoft fixes 60 vulnerabilities including some rated as Critical and a zero-day vulnerability under active attack affecting Microsoft Office. Microsoft Security updates for September Microsoft MSHTML Remote Code Execution Vulnerability (CVE-2021-40444) was publicised in early September when Microsoft warned Office 365 customers about the vulnerability. The flaw was […]

September Patch Tuesday fixes Critical and Zero Day vulnerabilities Read More »

Critical patches released for Netgear Switches

News, Vulnerabilities / Ian Reynolds

Netgear has published patches for 20 of its managed smart switches to fix three vulnerabilities that can lead to the switch being taken over by an attacker potentially giving them control over your network. With names like Demons Cries, Draconian Fear and Seventh Inferno, the vulnerabilities were addressed in patches released by Netgear on 3rd

Critical patches released for Netgear Switches Read More »

Microsoft warns Office 365 targeted by zero-day RCE

News, Vulnerabilities / Ian Reynolds

A zero-day Remote Code Execution attack targeting Office 365 and Office 2019 users has prompted Microsoft to issue a security advisory with a workaround to protect your network until a patch is available. According to the security advisory released by Microsoft: Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects

Microsoft warns Office 365 targeted by zero-day RCE Read More »

Yet another Exchange Server vulnerability

News, Vulnerabilities / Ian Reynolds

Details have emerged of (another) Exchange Server vulnerability, called ProxyToken, which allows an attacker to reconfigure an Exchange server remotely without needing to know any passwords. Reported by the Zero Day Initiative the vulnerability affects Exchange server versions 2013 through 2019: With this vulnerability, an unauthenticated attacker can perform configuration actions on mailboxes belonging to

Yet another Exchange Server vulnerability Read More »

ProxyShell vulnerability hits Exchange Servers

News, Vulnerabilities / Ian Reynolds

ProxyShell can be exploited to achieve a Remote Code Execution without needing to know any usernames or passwords for the targeted Exchange Server – security vulnerabilities do not come any worse than this. ProxyShell is easier to exploit than the ProxyLogon attacks that hit the headlines earlier this year, prompting CISA to issue their first ever

ProxyShell vulnerability hits Exchange Servers Read More »

PrintNightmare vulnerabilities exploited in the wild

News, Vulnerabilities / Ian Reynolds

Cyber-criminals have been exploiting the Windows PrintNightmare vulnerability to attack networks around the world. PrintNightmare is the name given to a collection of vulnerabilities in the Windows Print Spooler. According to reports from Talos and CrowdStrike, several threat actors have now incorporated the PrintNightmare vulnerabilities into attacks on their victims networks. The PrintNightmare vulnerabilities were

PrintNightmare vulnerabilities exploited in the wild Read More »

VPN insecurity woes continue for Pulse Secure and Cisco

News, Vulnerabilities / Ian Reynolds

Cisco and Pulse Secure have both issued security advisories warning of critical Remote Code Execution vulnerabilities that affect some of their VPN servers. Pulse Secure Pulse Secure has shipped a patch to resolve several Remote Code Execution vulnerabilities in its Connect Secure VPN appliances. The August release addresses these issues and the vendor ‘strongly advises’

VPN insecurity woes continue for Pulse Secure and Cisco Read More »

SeriousSAM exposes Windows credentials

News, Vulnerabilities / Ian Reynolds

A flaw in all versions of Windows 10 and Server 2019 released since November 2018 leaves the Security Account Manager file which contains all the hashed credentials for the PC, open for any user to read. Microsoft has issued a security advisory to track their investigations, but no permanent solution has been released – although

SeriousSAM exposes Windows credentials Read More »

PetitPotam attack leaves Windows Domain Controllers Vulnerable

News, Vulnerabilities / Ian Reynolds

Microsoft has moved swiftly to publish mitigation advice for a new NTLM relay attack against Windows Domain controllers, dubbed PetitPotam. An NTLM relay attack can occur when an attacker inserts themselves between a valid client-server authentication request in a Windows Domain or tricks one system into trying to authenticate itself and so providing a copy

PetitPotam attack leaves Windows Domain Controllers Vulnerable Read More »

The PrintNightmare continues

News, Vulnerabilities / Ian Reynolds

Since the start of June there has been a confusing number of security vulnerabilities reported in the Windows Print Spooler. Let me explain what is going on. CVE-2021-1675 This is the vulnerability that caused some initial confusion – a Remote Code Execution vulnerability in the Windows Print Spooler. This is not the vulnerability known as

The PrintNightmare continues Read More »

Vulnerabilities

September Patch Tuesday fixes Critical and Zero Day vulnerabilities

Critical patches released for Netgear Switches

Microsoft warns Office 365 targeted by zero-day RCE

Yet another Exchange Server vulnerability

ProxyShell vulnerability hits Exchange Servers

PrintNightmare vulnerabilities exploited in the wild

VPN insecurity woes continue for Pulse Secure and Cisco

SeriousSAM exposes Windows credentials

PetitPotam attack leaves Windows Domain Controllers Vulnerable

The PrintNightmare continues

Our Address

Talk to us

Office Hours

Company Number

VAT Registration Number

Penetration Testing

Risk & Compliance Services

Quick Links

information. secured.

Head Office Address

Opening Hours

Stay in Touch