The Cybersecurity and Infrastructure Security Agency (CISA) has published an alert regarding the United States Computer Emergency Readiness Team (US-CERT) identifying vulnerabilities in Virtual Private Network (VPN) products. US-CERT, CISA Warn of Vuln in At Least 4 Major VPNs ( April 12, 2019) Furthermore, Microsoft stated in its breach notification email this incident only affected a limited number of its customer accounts, and those customers were notified in a separate email. However, this incident regarding the ability to access multiple accounts has only been reported on by Motherboard, and it is unclear if the source’s allegations are accurate, at the time of this writing.
The source also gave reporters details of the attack which those details were later shared again by the source along with screenshots and additional information.
In Addition, an unnamed source informed Motherboard reporters that in March 2019, “this abuse of a customer support portal” granted the actor the ability to access any Microsoft-owned email account except those that are corporate accounts. Data that the actor would have been able to collect consist of, at least, who the account communicated with and the email subject lines. The actor was then able to use that account to access Microsoft customer email information from Hotmail, MSN, and Outlook accounts. Microsoft has confirmed that an unknown threat actor (or threat group) was able to compromise one of its customer support agent’s accounts. Hackers Could Read Your Hotmail, MSN, and Outlook Emails by Abusing Microsoft Support ( April 14, 2019) Exploitation of CVE-2019-0232 could allow a threat actor the ability to execute an arbitrary command on a Windows server using an affected Tomcat version. The issue is the way that Java Runtime Environment (JRE) passes command line arguments to Windows. The RCE vulnerability is located in the “Common Gateway Interface” (CGI) Servlet when it is running on the Windows operating system if “enableCmdLineArguments” is enabled. The Apache Software Foundation’s open source Java servlet container “Apache Tomcat” has released new versions to address a Remote Code Execution (RCE) vulnerability, registered as “CVE-2019-0232.” The affected Tomcat versions are the following: 9.0.0M1 to 9.0.17, 8.5.0 to 8.5.39, 7.0.0 to 7.0.93. Apache Tomcat Patches Important Remote Code Execution Flaw ( April 15, 2019)
0 kommentar(er)
