Krebs on Security

JULY 14, 2020

Top of the heap this month in terms of outright scariness is CVE-2020-1350 , which concerns a remotely exploitable bug in more or less all versions of Windows Server that attackers could use to install malicious software simply by sending a specially crafted DNS request.

DNS 295

DNS Backups Software System Administration 295

Malwarebytes

JULY 14, 2021

Looking at the urgency levels Microsoft has assigned to them, system administrators have their work cut out for them once again: 13 criticial patches 103 important patches. CVE-2021-33771 Windows Kernel Elevation of Privilege Vulnerability for Windows Server 2012, Server 2016, Windows 8.1, and Windows 10. Exchange Server.

DNS 102

DNS Media System Administration Engineering 102

eSecurity Planet

MARCH 25, 2022

Between 2016 and 2018, the malware strain SamSam made brute force RDP attacks an integral part of its attacks on several public organizations. By exploiting weak server vulnerabilities, the Iran-based hackers were able to gain access, move laterally, encrypt IT systems, and demand ransom payment.

VPN 120

VPN Software Authentication Encryption 120

Security Affairs

APRIL 1, 2019

But if we go on the Akamai blog we can still find a reference to Elknot posted on April 4, 2016 on a topic referred to “ BillGates ”, another DDoS malware whose “ attack vectors available within the toolkit include: ICMP flood, TCP flood, UDP flood, SYN flood, HTTP Flood (Layer7) and DNS reflection floods. O"]); // for persistence.

DDOS 110

DDOS Malware Encryption Penetration Testing 110

Krebs on Security

APRIL 2, 2019

As first detailed by KrebsOnSecurity in July 2016 , Orcus is the brainchild of John “Armada” Rezvesz , a Toronto resident who until recently maintained and sold the RAT under the company name Orcus Technologies. An advertisement for Orcus RAT. In an “official press release” posted to pastebin.com on Mar.

Advertising 230

Advertising Malware Marketing Software 230

eSecurity Planet

DECEMBER 3, 2021

Longtime network and system administrator Jack Daniel is a technology community activist, mentor, and storyteller. — Matthew Green (@matthew_d_green) February 17, 2016. " — Paul Asadoorian (@securityweekly) June 7, 2016. Denial-of-Suez attack. Jack Daniel | @jack_daniel. Katie Moussouris | @k8em0.

Accountability 139

Accountability Cybersecurity Penetration Testing InfoSec 139