article thumbnail

3CX Desktop App for Windows and macOS Reportedly Compromised in Supply Chain Attack

Tenable

The information presented in this blog post was current as of March 29. On March 29, a post on the CrowdStrike subreddit revealed that the 3CX desktop app, a softphone client for both Windows and Mac, was compromised and trojanized. Additional changes made after publication can be tracked in the changelog below.

Windows 101
article thumbnail

CVE-2020-1350: Wormable Remote Code Execution Vulnerability in Windows DNS Server Disclosed (SIGRed)

Tenable

Researchers disclose a 17-year old wormable flaw in Windows DNS servers. On July 14, Microsoft patched a critical vulnerability in Windows Domain Name System (DNS) Server as part of Patch Tuesday for July 2020. According to the researchers, the vulnerability has persisted in Windows DNS Server for 17 years.

Windows 139
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Trending Sources

article thumbnail

Microsoft’s May 2024 Patch Tuesday Addresses 59 CVEs (CVE-2024-30051, CVE-2024-30040)

Tenable

Important CVE-2024-30051 | Windows DWM Core Library Elevation of Privilege Vulnerability CVE-2024-30051 is an EoP vulnerability in the DWM Core Library in Microsoft Windows. Discovery of this flaw is credited to several researchers at Google Threat Analysis Group, Google Mandiant and Kaspersky. and is rated as important.

Windows 114
article thumbnail

CVE-2021-34527: Microsoft Releases Out-of-Band Patch for PrintNightmare Vulnerability in Windows Print Spooler

Tenable

On July 6, Microsoft updated its advisory to announce the availability of out-of-band patches for a critical vulnerability in its Windows Print Spooler that researchers are calling PrintNightmare. This remote code execution (RCE) vulnerability affects all versions of Microsoft Windows. Description. CVE-2021-34527.

Windows 101
article thumbnail

Generative AI copilots are your productivity rocket boosters

CIO

Such stats sound great and are available in dozens of permutations from many researchers, analysts and pundits. GenAI: An Experiment Practical evidence from researchers and analysts remains scant, but LinkedIn is full of posts about LLM (Large Language Model) prompting experiments and best practices. And how might it work?

article thumbnail

CVE-2020-1472: 'Zerologon' Vulnerability in Netlogon Could Allow Attackers to Hijack Windows Domain Controller

Tenable

Security researchers reveal how the cryptographic authentication scheme in Netlogon can be exploited to take control of a Windows domain controller (DC). On September 11, researchers at Secura published a blog post for a critical vulnerability they’ve dubbed “Zerologon.” Tenable's August 2020 Patch Tuesday Blog.

Windows 115
article thumbnail

Deploying a Sitecore instance on a “local” Kubernetes (k8s) setup

Perficient

In this blog series I will be sharing the details my journey, my findings the mistakes/successes, and the final state of my discovery. So the idea was have a POC of a local environment on my Windows 10/11 PC, with full blown Kubernetes, running Sitecore. Also getting a windows node in operation was not a straight forward thing.

Windows 142