August Security Update: The (PrintNightmare) Continues | #microsoft | #hacking | #cybersecurity | #education | #technology | #infosec

[ad_1]

New Microsoft Point and Print Vulnerability Discovered

Microsoft released a patch in Aug. 2021 to correct the “PrintNightmare” vulnerability in Point and Print, documented as CVE-2021-34481. However, there’s a new zero-day print spooler vulnerability. This vulnerability, CVE-2021-36958, could allow attackers to gain SYSTEM privileges on a computer.

Action Items

Hancitor is Spreading FickerStealer

Symantec reports FickerStealer, malware that extracts sensitive and private information, is now being spread by Hancitor. Attacks involve spam emails containing attachments that enable Hancitor to communicate with C2 servers and retrieve a URL containing FickerStealer.

Action Item

  • Use email security
  • Train employees on spam and phishing tactics.

Two Vulnerabilities Discovered in Zimbra Webmail

SonarSource discovered two vulnerabilities in Zimbra webmail, used by more than 200,000 businesses and more than 1,000 government and financial institutions.

A combination of these vulnerabilities could enable an attacker to gain unrestricted access to all employees’ emails.

CVE-2021-35208 is a cross-site scripting vulnerability that can be triggered when an employee views mail. A malicious email containing a JavaScript payload could ultimately provide an attacker access to the employee’s emails, their webmail session, and possibly additional attacks.

CVE-2021-35209 is a bypass of an allow-list that leads to a server-side request forgery vulnerability. Combined with the first vulnerability, SonarSource says an attacker could extract, for example, AWS IAM credentials or Google Cloud API tokens.

Action Items

  • See technical details on SonarSource’s blog.
  • Use Patch 18 for Zimbra 8.8.15 and Patch 16 for the 9.0 series; prior versions are vulnerable.

New Twist on Phishing: Fake Zoom Meeting Invitations

INKY researchers have discovered that attackers are using Zoom in a phishing campaign to steal credentials from users. The attackers send phishing emails to employees, asking them to review a Zoom meeting invitation by downloading a file attached to the email and downloading an attachment to start the meeting. Attackers used domain names such as zoomcommunications.com that users may think are legitimate—and that could bypass email security.

When users followed the instructions, they arrived at an authentic-looking Microsoft sign-in page, asking for login and password.

Action Items

  • Educate employees and your clients about this scam.
  • Check the URL of every email and website before clicking.
  • Do not open attachments from unknown senders.
  • If in doubt, contact the person by text or phone to confirm the email is legitimate.

McAfee Points out Ransomware Has Become Big Business

McAfee notes that although the Colonial Pipeline ransomware attack monopolized media attention, there’s more to the story. The DarkSide Ransomware as a Service attack was preceded by Babuk, Conti, Ryuk, and REvil. McAfee says widespread attacks on smaller organizations decreased, and attackers focused on larger organizations that could pay higher ransoms.

McAfee also points out that these victims were targeted with customized variants.

Action items

  • Build a comprehensive security strategy that includes threat detection.
  • Back up data in at least three locations, one of which is not connected to the internet and one that’s offsite.
  • Talk through incident response today; know in advance how you will respond to an attack.

Top Exploited Vulnerabilities

The U.S. Cybersecurity and Infrastructure Securing Agency (CISA), as well as the FBI and agencies in Australia and UK, authored an advisory on the top 30 vulnerabilities that cyberattackers most commonly exploit.

The advisory points out that four of the most exploited vulnerabilities in 2020 impact remote work, VPN and cloud technologies.

Action Items

  • Review the list here.
  • Remediate vulnerabilities as soon as possible; patches are available for most.
  • Organizations that have not kept patching up to date should have their systems evaluated for compromise and initiate incident response and recovery.

For more security updates and insights, visit DevPro Journal’s Security resources page.

[ad_2]

Source link

61 thoughts on “August Security Update: The (PrintNightmare) Continues | #microsoft | #hacking | #cybersecurity | #education | #technology | #infosec

  1. Beauty Fashion

    Thanks for your article. Another point is that just being a photographer consists of not only trouble in capturing award-winning photographs but in addition hardships in acquiring the best digicam suited to your needs and most especially issues in maintaining the quality of your camera. It is very true and apparent for those photography fans that are in capturing the nature’s interesting scenes — the mountains, the particular forests, the actual wild or even the seas. Visiting these daring places undoubtedly requires a video camera that can meet the wild’s tough natural environment.

  2. Hairstyles Vip

    Pretty nice post. I just stumbled upon your blog and wanted to say that I have really enjoyed browsing your blog posts. In any case I will be subscribing to your feed and I am hoping you write again soon!

  3. Hairstyles

    Thanks for your article. One other thing is when you are marketing your property by yourself, one of the troubles you need to be aware about upfront is just how to deal with house inspection records. As a FSBO owner, the key towards successfully shifting your property in addition to saving money in real estate agent commission rates is information. The more you are aware of, the better your property sales effort will likely be. One area where this is particularly critical is home inspections.

  4. Hairstyles

    Thanks for your write-up. My partner and i have often observed that a majority of people are needing to lose weight simply because they wish to appear slim in addition to looking attractive. However, they do not usually realize that there are more benefits for losing weight also. Doctors insist that fat people experience a variety of illnesses that can be perfectely attributed to their excess weight. Thankfully that people who sadly are overweight as well as suffering from several diseases can help to eliminate the severity of their particular illnesses by simply losing weight. It is possible to see a progressive but notable improvement with health if even a small amount of weight loss is obtained.

  5. Fashion Styles

    I have read some excellent stuff here. Definitely price bookmarking for revisiting. I wonder how much attempt you place to create such a excellent informative site.

  6. Hairstyles

    This is very interesting, You are a very skilled blogger. I’ve joined your feed and look forward to seeking more of your magnificent post. Also, I’ve shared your site in my social networks!

  7. Hairstyles

    Normally I don’t learn article on blogs, but I would like to say that this write-up very compelled me to take a look at and do it! Your writing style has been amazed me. Thank you, quite great article.

  8. Hairstyles

    Howdy! Would you mind if I share your blog with my myspace group? There’s a lot of people that I think would really enjoy your content. Please let me know. Many thanks

  9. Beauty Fashion

    I do agree with all of the ideas you have presented in your post. They are very convincing and will certainly work. Still, the posts are very short for novices. Could you please extend them a little from next time? Thanks for the post.

  10. Hairstyles

    Pretty element of content. I just stumbled upon your blog and in accession capital to claim that I acquire actually loved account your weblog posts. Anyway I抣l be subscribing on your augment or even I fulfillment you access persistently quickly.

  11. Beauty Fashion

    One thing is that if you are searching for a education loan you may find that you’ll want a co-signer. There are many situations where this is correct because you should find that you do not employ a past history of credit so the loan provider will require you have someone cosign the loan for you. Good post.

  12. Beauty Fashion

    Hi! I’ve been reading your blog for some time now and finally got the bravery to go ahead and give you a shout out from Porter Tx! Just wanted to say keep up the excellent work!

  13. Hairstyles

    I was just looking for this info for some time. After 6 hours of continuous Googleing, finally I got it in your website. I wonder what’s the lack of Google strategy that do not rank this kind of informative web sites in top of the list. Normally the top websites are full of garbage.

  14. Freebies

    My brother recommended I might like this blog. He was entirely right. This post truly made my day. You cann’t imagine just how much time I had spent for this information! Thanks!

  15. Fashion Styles

    Hi! I know this is kinda off topic but I was wondering if you knew where I could get a captcha plugin for my comment form? I’m using the same blog platform as yours and I’m having difficulty finding one? Thanks a lot!

  16. Fashion Styles

    Thanks for the guidelines shared on your blog. One more thing I would like to say is that fat loss is not exactly about going on a celebrity diet and trying to get rid of as much weight that you can in a few months. The most effective way in losing weight is by using it gradually and right after some basic ideas which can allow you to make the most from a attempt to lose weight. You may be aware and already be following most of these tips, yet reinforcing know-how never affects.

  17. Fashion Styles

    Great paintings! This is the type of information that are supposed to be shared around the net. Disgrace on the seek engines for no longer positioning this submit higher! Come on over and talk over with my site . Thanks =)

  18. Freebies

    I have been browsing online more than three hours today, yet I never found any interesting article like yours. It is pretty worth enough for me. Personally, if all website owners and bloggers made good content as you did, the web will be a lot more useful than ever before.

  19. Crave Freebies

    Hey there! Do you know if they make any plugins to assist with Search Engine Optimization? I’m trying to get my blog to rank for some targeted keywords but I’m not seeing very good gains. If you know of any please share. Thanks!

  20. Fashion Styles

    I used to be recommended this web site through my cousin. I am not sure whether or not this submit is written by him as no one else recognise such special about my problem. You are amazing! Thanks!

  21. Fashion Styles

    Good blog! I truly love how it is easy on my eyes and the data are well written. I’m wondering how I might be notified whenever a new post has been made. I’ve subscribed to your RSS feed which must do the trick! Have a nice day!

  22. Beauty Fashion

    Thanks for your handy post. Through the years, I have been able to understand that the symptoms of mesothelioma cancer are caused by the particular build up connected fluid between lining in the lung and the upper body cavity. The infection may start from the chest place and pass on to other areas of the body. Other symptoms of pleural mesothelioma include weight-loss, severe inhaling and exhaling trouble, throwing up, difficulty eating, and swelling of the neck and face areas. It needs to be noted that some people living with the disease do not experience virtually any serious indicators at all.

  23. Hairstyles

    I’m just commenting to let you know what a useful discovery my cousin’s child had reading yuor web blog. She picked up too many issues, most notably what it’s like to have a marvelous giving character to make many people quite simply know a number of extremely tough things. You truly did more than visitors’ desires. Many thanks for rendering those essential, dependable, explanatory as well as unique guidance on that topic to Kate.

  24. Hairstyles

    I was curious if you ever considered changing the page layout of your blog? Its very well written; I love what youve got to say. But maybe you could a little more in the way of content so people could connect with it better. Youve got an awful lot of text for only having one or 2 images. Maybe you could space it out better?

  25. Hairstyles

    Thanks for the sensible critique. Me & my neighbor were just preparing to do a little research about this. We got a grab a book from our local library but I think I learned more clear from this post. I am very glad to see such fantastic information being shared freely out there.

  26. Beauty Fashion

    hello!,I like your writing very much! share we communicate more about your post on AOL? I need an expert on this area to solve my problem. May be that’s you! Looking forward to see you.

  27. Hairstyles

    Thanks for sharing superb informations. Your web site is very cool. I’m impressed by the details that you have on this website. It reveals how nicely you perceive this subject. Bookmarked this web page, will come back for more articles. You, my friend, ROCK! I found simply the info I already searched all over the place and just could not come across. What an ideal website.

  28. Hairstyles

    Hey There. I found your blog using msn. This is a very well written article. I will be sure to bookmark it and return to read more of your useful information. Thanks for the post. I will definitely return.

  29. Beauty Fashion

    I have been exploring for a little bit for any high quality articles or blog posts on this kind of area . Exploring in Yahoo I at last stumbled upon this website. Reading this information So i抦 happy to convey that I have a very good uncanny feeling I discovered just what I needed. I most certainly will make sure to do not forget this site and give it a look regularly.

  30. Hairstyles

    Thanks for enabling me to gain new tips about pc’s. I also hold the belief that certain of the best ways to maintain your laptop in primary condition has been a hard plastic-type case, or maybe shell, that will fit over the top of your computer. These kind of protective gear are generally model unique since they are manufactured to fit perfectly within the natural casing. You can buy them directly from owner, or through third party sources if they are intended for your laptop, however only a few laptop may have a covering on the market. All over again, thanks for your tips.

  31. Fashion Styles

    Thank you for another fantastic article. Where else could anybody get that type of info in such an ideal manner of writing? I have a presentation next week, and I am at the search for such information.

  32. Hairstyles

    Outstanding post but I was wanting to know if you could write a litte more on this subject? I’d be very thankful if you could elaborate a little bit further. Cheers!

  33. Hairstyles

    Wonderful work! This is the kind of info that are supposed to be shared around the web. Shame on Google for not positioning this post higher! Come on over and talk over with my web site . Thank you =)

  34. Fashion Styles

    Aw, this was a really nice post. In idea I wish to put in writing like this moreover ?taking time and actual effort to make a very good article?but what can I say?I procrastinate alot and on no account seem to get one thing done.

  35. Hairstyles

    Thanks a bunch for sharing this with all of us you actually know what you are talking about! Bookmarked. Kindly also visit my website =). We could have a link exchange agreement between us!

  36. Fashion Styles

    Hey There. I found your blog the usage of msn. This is a very well written article. I will make sure to bookmark it and return to read more of your useful information. Thanks for the post. I will definitely comeback.

  37. Ivy

    Useful information. Lucky me I found your site by chance, and I’m surprised
    why this twist of fate did not took place in advance!
    I bookmarked it.

  38. Fashion Styles

    Hey very nice website!! Guy .. Excellent .. Superb .. I’ll bookmark your website and take the feeds I’m satisfied to search out a lot of useful information here within the put up, we want develop extra strategies on this regard, thanks for sharing. . . . . .

  39. Hairstyles

    I simply desired to say thanks once again. I’m not certain the things I might have gone through without those tips and hints revealed by you directly on such a problem. It had been a very fearsome circumstance in my opinion, however , taking a look at a professional style you processed the issue made me to weep with delight. Now i’m thankful for your service and in addition believe you find out what a powerful job that you are putting in instructing the others through the use of your web site. Most probably you’ve never got to know any of us.

  40. Hairstyles

    I was recommended this website by my cousin. I’m not sure whether this post is written by him as nobody else know such detailed about my problem. You’re amazing! Thanks!

  41. Hairstyles

    As I web-site possessor I believe the content material here is rattling great , appreciate it for your efforts. You should keep it up forever! Good Luck.

  42. Hairstyles

    Hi there! Do you know if they make any plugins to assist with Search Engine Optimization? I’m trying to get my blog to rank for some targeted keywords but I’m not seeing very good gains. If you know of any please share. Kudos!

  43. Hairstyles

    Somebody essentially help to make seriously posts I would state. This is the first time I frequented your website page and thus far? I surprised with the research you made to make this particular publish amazing. Excellent job!

  44. Hairstyles

    wonderful issues altogether, you simply won a brand new reader. What could you recommend in regards to your publish that you made some days in the past? Any sure?

  45. Staci

    Hey! Would you mind if I share your blog with my twitter group?
    There’s a lot of folks that I think would really
    appreciate your content. Please let me know. Thanks

  46. Hairstyles

    Thanks for the diverse tips provided on this web site. I have realized that many insurance companies offer customers generous deals if they opt to insure many cars together. A significant variety of households possess several automobiles these days, specially those with mature teenage youngsters still located at home, and also the savings with policies could soon increase. So it is good to look for a great deal.

  47. Hairstyles

    This is very interesting, You’re a very skilled blogger. I’ve joined your rss feed and look forward to seeking more of your magnificent post. Also, I’ve shared your site in my social networks!

  48. Hairstyles

    Hi there! This is my 1st comment here so I just wanted to give a quick shout out and say I really enjoy reading your blog posts. Can you recommend any other blogs/websites/forums that go over the same topics? Thanks for your time!

  49. Lynne

    I’m curious to find out what blog system you
    have been using? I’m experiencing some small security problems with my latest
    site and I would like to find something more risk-free.
    Do you have any solutions?

  50. Hairstyles

    Thanks for giving your ideas. The first thing is that scholars have a choice between fed student loan along with a private student loan where it can be easier to opt for student loan debt consolidation reduction than over the federal student loan.

  51. Isaac

    Since the admin of this website is working, no question very quickly it
    will be well-known, due to its feature contents.

  52. Abbie

    I will right away clutch your rss as I can’t to
    find your e-mail subscription hyperlink or newsletter service.
    Do you’ve any? Please permit me know so that I may just subscribe.

    Thanks.

  53. Hope

    Thank you for any other informative website. The place else may I am getting that type of information written in such a perfect way?

    I’ve a undertaking that I am just now operating on, and I have
    been on the look out for such info.

  54. Hairstyles Vip

    I loved as much as you will receive carried out right here. The sketch is attractive, your authored subject matter stylish. nonetheless, you command get got an edginess over that you wish be delivering the following. unwell unquestionably come more formerly again since exactly the same nearly very often inside case you shield this increase.

  55. james marty

    I enjoy, result in I found exactly what I used to be looking for. You have ended my four day long hunt! God Bless you man. Have a great day. Bye

  56. Rory

    I’ve been surfing online more than three hours as of late,
    but I by no means discovered any interesting article like yours.
    It is pretty worth enough for me. In my view, if all site
    owners and bloggers made just right content material as you did, the net will likely be much more
    useful than ever before.

Leave a Reply

Your email address will not be published. Required fields are marked *