Blog – Page 1222 – Cyber Mike

New Malware Technique Could Exploit Windows UI Framework to Evade EDR Tools

A newly devised technique leverages a Windows accessibility framework called UI Automation (UIA) to perform a wide range of malicious activities without tipping off endpoint detection and response (EDR) solutions.
“To exploit this technique, a user must be convinced to run a program that uses UI Automation,” Akamai security researcher Tomer Peled said in a report shared with The Hacker News. “

Krispy Kreme cyberattack impacts online orders and operations

US doughnut chain Krispy Kreme suffered a cyberattack in November that impacted portions of its business operations, including placing online orders. […]

Microsoft MFA AuthQuake Flaw Enabled Unlimited Brute-Force Attempts Without Alerts

Cybersecurity researchers have flagged a “critical” security vulnerability in Microsoft’s multi-factor authentication (MFA) implementation that allows an attacker to trivially sidestep the protection and gain unauthorized access to a victim’s account.
“The bypass was simple: it took around an hour to execute, required no user interaction and did not generate any notification or provide the

Now on Demand: Inside a Hacker’s Playbook – How Cybercriminals Use Deepfakes

This eye-opening session that pulls back the curtain on how bad actors exploit social engineering tactics, like deepfake technology and Business Email Compromise (BEC).

The post Now on Demand: Inside a Hacker’s Playbook – How Cybercriminals Use Deepfakes appeared first on SecurityWeek.

ZLoader Malware Returns With DNS Tunneling to Stealthily Mask C2 Comms

Cybersecurity researchers have discovered a new version of the ZLoader malware that employs a Domain Name System (DNS) tunnel for command-and-control (C2) communications, indicating that the threat actors are continuing to refine the tool after resurfacing a year ago.
“Zloader 2.9.4.0 adds notable improvements including a custom DNS tunnel protocol for C2 communications and an interactive shell

Cyber News

New Malware Technique Could Exploit Windows UI Framework to Evade EDR Tools

Krispy Kreme cyberattack impacts online orders and operations

Microsoft MFA AuthQuake Flaw Enabled Unlimited Brute-Force Attempts Without Alerts

Now on Demand: Inside a Hacker’s Playbook – How Cybercriminals Use Deepfakes

ZLoader Malware Returns With DNS Tunneling to Stealthily Mask C2 Comms

Atlassian, Splunk Patch High-Severity Vulnerabilities

Cleo Vulnerability Exploitation Linked to Termite Ransomware Group

Google’s Willow Chip Signals the Urgency of Post-Quantum Cryptography Migration

446,000 Impacted by Center for Vein Restoration Data Breach

ICS Patch Tuesday: Security Advisories Released by Siemens, Schneider, CISA, Others