Vulnerabilities Archives

Microsoft release fix for Exchange NTLM relay vulnerability

The February 2019 Exchange Quarterly updates (https://blogs.technet.microsoft.com/exchange/2019/02/12/released-february-2019-quarterly-exchange-updates/) from Microsoft includes a fix for the NTLM relay vulnerability we reported last week. The fix changes the way Exchange Web Services operates in order to remove the ability for a man in the middle attack to capture and replay the authentication traffic and so escalate their privileges […]

Microsoft release fix for Exchange NTLM relay vulnerability Read More »

Microsoft warns Exchange vulnerable to NTLM relay attacks

News, Vulnerabilities / secureteampstg

Microsoft has recently issued a security advisory following the discovery of an NTLM relay attack vector against on-premises Exchange servers. An attacker who is able to intercept the NTLM authentication in an NTLM relay attack, is able to discover the Exchange Server’s credentials and potentially elevate their privileges to a Domain Administrator. This would allow

Microsoft warns Exchange vulnerable to NTLM relay attacks Read More »

Serious vulnerabilities found in RDP protocol

News, Vulnerabilities / secureteampstg

The Remote Desktop Protocol (RDP) is a favoured tool for many systems administrators, as it allows a connection to be made to another computer on your network and see the screen and use the mouse and keyboard as if you were physically sat in front of it. This means that for many, if not most,

Serious vulnerabilities found in RDP protocol Read More »

Critical vulnerabilities affect Cisco WAN VPN Routers and Small Business Switches

News, Uncategorized, Vulnerabilities / secureteampstg

Remote access attacks allow authentication bypass and remote code execution Cisco has just released urgent patches for their RV320 and RV325 WAN VPN routers. The patches resolve two critical vulnerabilities in the router’s firmware: CVE-2019-1653 – allows a remote attacker to get sensitive device configuration details without a password (including the hashed passwords for all

Critical vulnerabilities affect Cisco WAN VPN Routers and Small Business Switches Read More »

Extensive DNS hijack attacks prompt urgent action

News, Vulnerabilities / secureteampstg

A wave of DNS hijack attacks has been sweeping across Europe, the Middle-East and America according to recently published reports from FireEye and Cisco. While the attacks are creative and sophisticated, the root attack vector is often a simple credential compromise to the DNS control panel of an organisation’s domain name registrar. The scale of

Extensive DNS hijack attacks prompt urgent action Read More »

Vulnerability in Wifi Chip used in Microsoft, Samsung and Sony devices allows zero click remote code execution

News, Vulnerabilities / secureteampstg

Security research firm Embedi has recently published a report on the Marvell Avastar Wifi chip used in many devices including Microsoft Surface and Surface Pro, Samsung Chromebooks and some Samsung phones and the Sony Playstation 4 to name but a few. The flaw in Marvell’s implementation of the ThreadX operating system running on the Wifi

Vulnerability in Wifi Chip used in Microsoft, Samsung and Sony devices allows zero click remote code execution Read More »

Chromecast design flaw exposes digital signage screens to takeover

News, Vulnerabilities / secureteampstg

A recent publicity stunt promoting YouTube scoundrel pewdiepie has brought attention to a design flaw in Google Chromecast devices and smartTVs that embed the Chromecast technology. By default, the Chromecast device will attempt to use Universal Plug and Play if it is enabled on the network router in order to open a port on the

Chromecast design flaw exposes digital signage screens to takeover Read More »

New Phishing techniques avoid detection with fake web fonts

News, Vulnerabilities / secureteampstg

Endpoints and security gateway appliances use a variety of techniques to attempt to identify Phishing websites that are trying to steal login credentials from unsuspecting users. A typical phishing website may appear to the average human to be a login page for a well-known service, such as Gmail, Dropbox or your cloud-hosted ERP system. Users

New Phishing techniques avoid detection with fake web fonts Read More »

Server IPMI remote management cards used as ransomware attack vector

News, Vulnerabilities / secureteampstg

Many servers make use of Intel’s Intelligent Platform Management Interface (IPMI) cards. These allow system administrators to access and remotely manage the server; including, changing BIOS settings, rebooting the server and providing an out-of-band login to the local system console. The IPMI can be built into the motherboard or can be added later and is supported

Server IPMI remote management cards used as ransomware attack vector Read More »

Death by PowerPoint and other vulnerabilities

News, Vulnerabilities / secureteampstg

Microsoft’s December 2018 patch Tuesday release includes fixes for several critical vulnerabilities including one in PowerPoint which affects all versions since PowerPoint 2010. The PowerPoint bug (CVE-2018-8628) would allow an attacker to create a specially-crafted file, which when opened by PowerPoint, would enable the attacker to run arbitrary code as the logged-in user. According to

Death by PowerPoint and other vulnerabilities Read More »

Vulnerabilities

Microsoft release fix for Exchange NTLM relay vulnerability

Microsoft warns Exchange vulnerable to NTLM relay attacks

Serious vulnerabilities found in RDP protocol

Critical vulnerabilities affect Cisco WAN VPN Routers and Small Business Switches

Extensive DNS hijack attacks prompt urgent action

Vulnerability in Wifi Chip used in Microsoft, Samsung and Sony devices allows zero click remote code execution

Chromecast design flaw exposes digital signage screens to takeover

New Phishing techniques avoid detection with fake web fonts

Server IPMI remote management cards used as ransomware attack vector

Death by PowerPoint and other vulnerabilities

Our Address

Talk to us

Office Hours

Company Number

VAT Registration Number

Penetration Testing

Risk & Compliance Services

Quick Links

information. secured.

Head Office Address

Opening Hours

Stay in Touch