April 2023 – Page 3

VMware fixes critical zero-day exploit chain used at Pwn2Own

VMware has released security updates to address zero-day vulnerabilities that could be chained to gain code execution systems running unpatched versions of the company’s Workstation and Fusion software hypervisors. […]

25 Apr

Windows 10 KB5025297 preview update released with 10 fixes

Microsoft has released the optional KB5025297 Preview cumulative update for Windows 10 22H2, with eighteen fixes or changes. […]

25 Apr

Windows 11 KB5025305 adds prioritized Windows updates setting

Microsoft has released the optional April 2023 non-security cumulative updates for all editions of Windows 11 22H2 with a new option to prioritize non-security and feature Windows updates. […]

25 Apr

New SLP bug can lead to massive 2,200x DDoS amplification attacks

A new reflective Denial-of-Service (DoS) amplification vulnerability in the Service Location Protocol (SLP) allows threat actors to launch massive denial-of-service attacks with 2,200X amplification. […]

25 Apr

Google Authenticator now backs up your 2FA codes to the cloud

The Google Authenticator app has received a critical update for Android and iOS that allows users to back up their two-factor authentication one-time passwords (OTPs) to their Google Accounts and have multi-device support. […]

24 Apr

Exploit released for PaperCut flaw abused to hijack servers, patch now

Attackers are exploiting severe vulnerabilities in the widely-used PaperCut MF/NG print management software to install Atera remote management software to take over servers. […]

24 Apr

KuCoin’s Twitter account hacked to promote crypto scam

KuCoin’s Twitter account was hacked, allowing attackers to promote a fake giveaway scam that led to the theft of over $22.6K in cryptocurrency. […]

24 Apr

APC warns of critical unauthenticated RCE flaws in UPS software

APC’s Easy UPS Online Monitoring Software is vulnerable to unauthenticated arbitrary remote code execution, allowing hackers to take over devices and, in a worst-case scenario, disabling its functionality altogether. […]

24 Apr

Microsoft 365 search outage affects Outlook, Teams, and SharePoint

Microsoft is investigating an ongoing issue preventing some customers from using the search functionality across multiple Microsoft 365 services. […]

24 Apr

Yellow Pages Canada confirms cyber attack as Black Basta leaks data

Yellow Pages Group, a Canadian directory publisher has confirmed to BleepingComputer that it has been hit by a cyber attack. Black Basta ransomware and extortion gang claims responsibility for the attack and has posted sensitive documents and data over the weekend. […]

Month: April 2023

VMware fixes critical zero-day exploit chain used at Pwn2Own

Windows 10 KB5025297 preview update released with 10 fixes

Windows 11 KB5025305 adds prioritized Windows updates setting

New SLP bug can lead to massive 2,200x DDoS amplification attacks

Google Authenticator now backs up your 2FA codes to the cloud

Exploit released for PaperCut flaw abused to hijack servers, patch now

KuCoin’s Twitter account hacked to promote crypto scam

APC warns of critical unauthenticated RCE flaws in UPS software

Microsoft 365 search outage affects Outlook, Teams, and SharePoint

Yellow Pages Canada confirms cyber attack as Black Basta leaks data