Author: Prithesh Durai

Impact and Fixes for Apache Log4J Zero-Day Vulnerability :

Impact and Fixes for Apache Log4J Zero-Day Vulnerability :

Apache Log4J vulnerability (CVE-2021-44228) commonly known as “Log4Shell,” is a zero-day vulnerability that was first discovered on December 9, has earned a CVSS score of 10 which is the highest possible severity level. Everything from the cloud to developer tools and security devices is affected by the Log4j vulnerability with warnings that it could provide

Read More
Microsoft has sent a warning to millions of Windows 10, Windows 11 users.

Microsoft has sent a warning to millions of Windows 10, Windows 11 users.

A new zero-day exploit has been discovered that affects all versions of Windows. Microsoft has also confirmed that all versions of windows have critical vulnerabilities which can turn into a serious threat that requires immediate action. The “zero-day” vulnerabilities known as CVE-2021-34484 which is been known for quite some time allow hackers and get control

Read More
Windows Server authentication issues triggered by new security upgrades

Windows Server authentication issues triggered by new security upgrades

User Experience: “After installing the November security updates, you might have authentication failures on servers relating to Kerberos Tickets acquired via S4u2self,” Microsoft explains on the Windows health dashboard. On Tuesday after installating of security patches provided during Patch Users on Windows Server Domain Controllers (DCs) may face authentication difficulties, according to Microsoft. With some

Read More
APT Used Commodity RATs to Take Advantage of a Geriatric Microsoft Bug – CVE-2017-11882

APT Used Commodity RATs to Take Advantage of a Geriatric Microsoft Bug – CVE-2017-11882

Threat actors are targeting entities in India and Afghanistan using malicious domains with political and government themes. A lone wolf threat actor is operating a crimeware campaign to get early access to high-value targets using a front company for future operations or monetary benefit. Malicious documents with dcRAT and QuasarRAT delivered CVE-2017-11882  for Windows CVE-2017-11882 

Read More