Tag: EN

Budget Cuts at CISA Could Affect Enterprise Cybersecurity

Politicians are suggesting massive cuts to CISA’s budget, threatening its missions to secure federal networks and help critical infrastructure operators fend off cyberattacks. This article has been indexed from Dark Reading Read the original article: Budget Cuts at CISA Could…

Lateral Movement: Abuse the Power of DCOM Excel Application

In this post, we will talk about an interesting lateral movement technique called ActivateMicrosoftApp() method within the distributed component object model (DCOM) Excel application. This technique is built upon Matt Nelson’s initial research on “Lateral Movement using Excel.Application and DCOM”. What…

Vulnerability Summary for the Week of October 23, 2023

  High Vulnerabilities Primary Vendor — Product Description Published CVSS Score Source & Patch Info projectworlds_pvt._limited — online_art_gallery   Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The ‘fnm’ parameter of the header.php resource does not…

UAE Cyber Council Warns of Google Chrome Vulnerability

The country has issued a recommendation to update after a high-risk vulnerability was disclosed last week in the browser. This article has been indexed from Dark Reading Read the original article: UAE Cyber Council Warns of Google Chrome Vulnerability

Boeing Breached by Ransomware, LockBit Gang Claims

LockBit gives Boeing a Nov. 2 deadline to pay the ransom, or have its sensitive documents leaked to the public, but it hasn’t given evidence of the compromise. This article has been indexed from Dark Reading Read the original article:…