Researchers have uncovered malware samples that are targeting a local privilege escalation flaw in Windows Installer.
Attackers exploiting the CVE-2021-40444 Windows flaw used infrastructure also known to be associated with a ransomware group.
Microsoft has released an emergency patch for the PrintNightmare CVE-2021-34527 vulnerability in Windows.
The Transparent Tribe APT has evolved its lures, expanded its victimology and added a new malware family to its arsenal.
The newly disclosed Moriya rootkit has been used since at least 2018 in a campaign targeting large regional diplomatic organizations in Asia and Africa.