2012 and System Administration - Cyber Security Informer

Microsoft: 6 Zero-Days in March 2025 Patch Tuesday

Krebs on Security

MARCH 11, 2025

and Server 2012 R2. The final zero-day this month is CVE-2025-26633 , a weakness in the Microsoft Management Console , a component of Windows that gives system administrators a way to configure and monitor the system. As with the NTFS bugs, this one requires that the user mount a malicious virtual hard drive.

System Administration

System Administration Engineering Internet Internet

Adconion Execs Plead Guilty in Federal Anti-Spam Case

Krebs on Security

JUNE 10, 2022

For many years, Dye was a system administrator for Optinrealbig , a Colorado company that relentlessly pimped all manner of junk email, from mortgage leads and adult-related services to counterfeit products and Viagra. Adconion was acquired in June 2014 by Amobee , a Redwood City, Calif.

Government

Government Marketing Internet Internet

Critical Microsoft Windows Vulnerability found

CyberSecurity Insiders

JULY 7, 2021

Or else they are on the verge of getting hacked by cyber crooks that could then install programs, view or delete data or even create new user accounts of a PC without the knowledge of the user or the system administration if/when on network. .

System Administration

System Administration Cyber Attacks Engineering Accountability

Four in-the-wild exploits, 13 critical patches headline bumper Patch Tuesday

Malwarebytes

JULY 14, 2021

Looking at the urgency levels Microsoft has assigned to them, system administrators have their work cut out for them once again: 13 criticial patches 103 important patches. CVE-2021-33771 Windows Kernel Elevation of Privilege Vulnerability for Windows Server 2012, Server 2016, Windows 8.1, and Windows 10.

DNS

DNS Media System Administration Engineering

How Did Authorities Identify the Alleged Lockbit Boss?

Krebs on Security

MAY 13, 2024

Pin was active on Opensc around March 2012, and authored 13 posts that mostly concerned data encryption issues, or how to fix bugs in code. 2011 said he was a system administrator and C++ coder. “Cryptolockers made a lot of noise in the press, but lazy system administrators don’t make backups after that.

Ransomware

Ransomware Cybercrime Accountability Malware

Stealth Falcon’s undocumented backdoor uses Windows BITS to exfiltrate data

Security Affairs

SEPTEMBER 9, 2019

Stealth Falcon is a nation-state actor active since at least 2012, the group targeted political activists and journalists in the Middle East in past campaigns. The attacks have been conducted from 2012 until 2106, against Emirati journalists, activists, and dissidents.

Malware

Malware Advertising System Administration Spyware

Feds Warn About Critical Infrastructure Ransomware Attacks, Vulnerabilities

eSecurity Planet

FEBRUARY 15, 2022

or Windows Server (2008 R2 SP1, 2012 Gold) allows attackers to execute arbitrary code via crafted HTTP requests. With the shortlist of widely exploited vulnerabilities, system administrators and security teams can quickly identify and patch key vulnerabilities to prevent malicious actors from exploiting the weaknesses.

Ransomware

Ransomware Encryption Backups Accountability

Legendary Entertainment Relies on MVISION CNAPP Across Its Multicloud Environment

McAfee

NOVEMBER 10, 2021

Under the guidance of Dan Meacham, VP of Global Security and Corporate Operations and CSO/CISO, the multi-billion dollar organization transitioned from on-premises data centers to the cloud in 2012. MVISION CNAPP helps me keep my system administrators and developers accountable for what they are doing.

Data breaches

Data breaches Risk CSO Media

CSPM vs CWPP vs CIEM vs CNAPP: What’s the Difference?

eSecurity Planet

AUGUST 4, 2023

In 2012, Cloud Access Security Brokers (CASB) began to emerge to monitor user access of cloud services. To set up and administer access controls using CIEM systems, administrators and security teams may need specialized training. Lateral movement concerns are not addressed by CIEM.

Architecture

Architecture Risk Data breaches Threat Detection

Happy 10th anniversary & Kali's story.so far

Kali Linux

MARCH 28, 2023

Being a system administrator, a patch could contain a security update to stop a vulnerability. In information security (infosec) there is the need to be on the latest version. This is often because: Being a developer, you may need the latest feature which has just been added.

InfoSec

InfoSec Penetration Testing Architecture Software

Facebook May Have Gotten Hacked, and Maybe It’s Better We Don’t Know

Adam Levin

APRIL 8, 2019

Hundreds of millions of user passwords left exposed to Facebook employees: News recently broke that Facebook left the passwords of between 200 million and 600 million users unencrypted and available to the company’s 20,000 employees going back as far as 2012. Then there are the repercussions to the company’s stock price.

Hacking

Hacking Data privacy Artificial Intelligence System Administration

Five Eyes Intelligence agencies warn of popular hacking tools

Security Affairs

OCTOBER 12, 2018

To aid the work of network defenders and systems administrators, we also provide advice on limiting the effectiveness of these tools and detecting their use on a network.” The China Chopper is a tiny shell (4K) widely used in attacks in the wild since 2012, early this year the China-linked APT group Leviathan.

Hacking

Hacking Advertising System Administration Engineering

The Case Of Misleading Timestamps

SiteLock

OCTOBER 14, 2021

If we look at the history of this file, as viewed by our scans, the modify time has changed numerous times, ranging from 1995 to 2007 to 2012. Maarten Broekman has worked as a system administrator and systems engineer for over 25 years, primarily in the shared web-hosting space. Clearly, something was odd about this file.

Malware

Malware System Administration Engineering

Advanced threat predictions for 2023

SecureList

NOVEMBER 14, 2022

We encourage system administrators to immediately set up monitoring for these machines, due to the unlikelihood that patching (even in a timely fashion) will be sufficient to protect them. Mail servers have the double misfortune of harboring key intelligence of interest to APT actors and having the biggest attack surface imaginable.

Firmware

Firmware Surveillance Mobile Telecommunications

Cyber Security Informer

Microsoft: 6 Zero-Days in March 2025 Patch Tuesday

Adconion Execs Plead Guilty in Federal Anti-Spam Case

Trending Sources

Critical Microsoft Windows Vulnerability found

Four in-the-wild exploits, 13 critical patches headline bumper Patch Tuesday

How Did Authorities Identify the Alleged Lockbit Boss?

Stealth Falcon’s undocumented backdoor uses Windows BITS to exfiltrate data

Feds Warn About Critical Infrastructure Ransomware Attacks, Vulnerabilities

Legendary Entertainment Relies on MVISION CNAPP Across Its Multicloud Environment

CSPM vs CWPP vs CIEM vs CNAPP: What’s the Difference?

Happy 10th anniversary & Kali's story.so far

Facebook May Have Gotten Hacked, and Maybe It’s Better We Don’t Know

Five Eyes Intelligence agencies warn of popular hacking tools

The Case Of Misleading Timestamps

Advanced threat predictions for 2023

Stay Connected