Software

Patch Tuesday THIS Tuesday

Microsoft has just released an out-of-cycle security patch to address a vulnerability in Windows’ handling of animated cursor [ANI] files that allows hackers to inject malicious code into vulnerable systems. The release is rated ‘Critical’ and has been brought forward from the scheduled ‘Patch Tuesday’ update on 10 April because Microsoft believes there’s an increased risk of attack to its customers.

Those of you running Kaspersky Lab products will be pleased to know that we have been detecting this vulnerability since 30 March. So far we’ve seen 10 new modifications of this exploit represented by more than 60 samples.

Patch Tuesday THIS Tuesday

Your email address will not be published. Required fields are marked *

 

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Reports

Crypto wasted: BlueNoroff’s ghost mirage of funding and jobs

Kaspersky GReAT experts dive deep into the BlueNoroff APT’s GhostCall and GhostHire campaigns. Extensive research detailing multiple malware chains targeting macOS, including a stealer suite, fake Zoom and Microsoft Teams clients and ChatGPT-enhanced images.

Mem3nt0 mori – The Hacking Team is back!

Kaspersky researchers discovered previously unidentified commercial Dante spyware developed by Memento Labs (formerly Hacking Team) and linked it to the ForumTroll APT attacks.

Mysterious Elephant: a growing threat

Kaspersky GReAT experts describe the latest Mysterious Elephant APT activity. The threat actor exfiltrates data related to WhatsApp and employs tools such as BabShell and MemLoader HidenDesk.