El Martes de parches de Microsoft de abril de 2023 aborda 97 CVE (CVE-2023-28252)
Microsoft addresses 97 CVEs, including one that was exploited in the wild as a zero day.
Se reporta que la aplicación 3CX Desktop para Windows y macOS ha sido puesta en riesgo en ataque contra cadena de suministro
A softphone desktop application from 3CX, makers of a popular VoIP PBX solution used by over 600,000 organizations, has reportedly been trojanized as part of a supply chain attack
ChatGPT y GPT-4 de OpenAI son utilizados como señuelo en correos electrónicos de phishing, estafas de Twitter para promover tokens de OpenAI falsos
Hoping to cash in on the massive interest around OpenAI’s GPT-4 – ChatGPT’s new multimodal model – scammers have launched phishing campaigns via email and Twitter designed to steal cryptocurrency. Check out how they’re carrying out the scams and how you can avoid becoming a victim.
El Martes de parches de Microsoft de marzo de 2023 aborda 76 CVE (CVE-2023-23397)
Microsoft addresses 76 CVEs including two zero-days exploited in the wild, one of which was publicly disclosed.
El FBI y la la CISA (Agencia de Ciberseguridad y Seguridad de Infraestructura) dan a conocer una advertencia sobre el Royal Ransomware Group
The FBI and CISA have released a joint Cybersecurity Advisory discussing the Royal ransomware group.
Agencias surcoreanas y estadounidenses dan a conocer advertencia conjunta sobre ransomware norcoreano
Several South Korean and American agencies have released a joint cybersecurity advisory on North Korean state-sponsored ransomware operators.
El Martes de parches de febrero de 2023 de Microsoft aborda 75 CVE (CVE-2023-23376)
Microsoft addresses 75 CVEs including three zero-day vulnerabilities that were exploited in the wild.
ProxyNotShell, OWASSRF, TabShell: Coloque parches en sus Microsoft Exchange Servers Now
Several flaws in Microsoft Exchange Server disclosed over the last two years continue to be valuable exploits for attackers as part of ransomware and targeted attacks against organizations that have yet to patch their systems. Patching the flaws outlined below is strongly recommended.
Sandworm APT implementa el nuevo SwiftSlicer Wiper usando la directiva de grupo de Active Directory
Sandworm, the Russian-backed APT responsible for NotPetya in 2017, has recently attacked an Ukrainian organization using a new wiper, SwiftSlicer.
La actualización de parche crítico de Oracle para enero de 2023 aborda 183 CVE
Oracle addresses 183 CVEs in its first quarterly update of quarterly with 327 patches, including 71 critical updates.
El Martes de parches de Microsoft de enero de 2023 aborda 98 CVE (CVE-2023-21674)
Microsoft addresses 98 CVEs including a zero-day vulnerability that was exploited in the wild.
CVE-2022-47523: Vulnerabilidad de inyección de código SQL de Password Manager Pro, PAM360 y Access Manager Plus de ManageEngine
Zoho patches a newly disclosed high-severity SQL injection flaw in several ManageEngine products; attackers have historically targeted several ManageEngine products over the last three years.
Póngase en contacto con nuestro equipo de ventas