https://blog.dansec.red/vendors/tvt/Recent content in TVT on DanSec DailyHugoen-gbWed, 09 Apr 2025 00:00:00 +0000https://blog.dansec.red/posts/2025-04-09-cybersecurity-news/Wed, 09 Apr 2025 00:00:00 +0000https://blog.dansec.red/posts/2025-04-09-cybersecurity-news/<h2 id="sourceforge-used-to-distribute-miner-and-clipbanker-trojan">SourceForge Used to Distribute Miner and ClipBanker Trojan</h2> <ul> <li>Malicious actors distributing a miner and the ClipBanker Trojan via SourceForge.</li> <li>Unconventional persistence techniques utilized by attackers.</li> </ul> <h2 id="microsoft-releases-security-fixes-for-126-flaws">Microsoft Releases Security Fixes for 126 Flaws</h2> <ul> <li>Microsoft patches 126 flaws affecting its software products.</li> <li>One vulnerability actively exploited in the wild addressed.</li> </ul> <h2 id="adobe-patches-11-critical-coldfusion-flaws">Adobe Patches 11 Critical ColdFusion Flaws</h2> <ul> <li>Adobe releases security updates to fix critical-severity bugs in ColdFusion.</li> <li>Multiple vulnerabilities discovered in versions 2025, 2023, and 2021.</li> </ul> <h2 id="fortinet-urges-upgrades-to-patch-critical-admin-password-change-flaw">Fortinet Urges Upgrades to Patch Critical Admin Password Change Flaw</h2> <ul> <li>Critical security flaw impacting FortiSwitch addressed by security updates.</li> <li>Vulnerability could permit unauthorized password changes.</li> </ul> <h2 id="amazon-ec2-ssm-agent-flaw-patched-after-privilege-escalation">Amazon EC2 SSM Agent Flaw Patched After Privilege Escalation</h2> <ul> <li>Security flaw in Amazon EC2 Simple Systems Manager (SSM) Agent disclosed and patched.</li> <li>Exploitation could allow attackers to achieve privilege escalation.</li> </ul> <h2 id="cyber-attacks-targeting-ukraine-with-information-stealing-malware">Cyber Attacks Targeting Ukraine with Information-Stealing Malware</h2> <ul> <li>Ukrainian institutions targeted with information-stealing malware.</li> <li>Cyber attacks aim at military entities.</li> </ul> <h2 id="fake-microsoft-office-add-ins-pushing-malware-via-sourceforge">Fake Microsoft Office add-ins Pushing Malware via SourceForge</h2> <ul> <li>Threat actors distributing fake Microsoft add-ins via SourceForge.</li> <li>Malware installation for cryptocurrency mining and theft purposes.</li> </ul> <h2 id="ransomware-gang-exploits-windows-common-log-file-system-zero-day">Ransomware Gang Exploits Windows Common Log File System Zero-Day</h2> <ul> <li>RansomEXX ransomware gang exploiting Windows CLFS zero-day flaw.</li> <li>Gain SYSTEM privileges on victims&rsquo; systems.</li> </ul> <h2 id="new-mirai-botnet-behind-surge-in-tvt-dvr-exploitation">New Mirai Botnet Behind Surge in TVT DVR Exploitation</h2> <ul> <li>Significant spike in exploitation attempts targeting TVT NVMS9000 DVRs detected.</li> <li>Over 2,500 unique IPs scanning for vulnerable devices.</li> </ul> <h2 id="aws-introduces-ml-kem-to-secure-tls-from-quantum-threats">AWS Introduces ML-KEM to Secure TLS from Quantum Threats</h2> <ul> <li>Amazon Web Services adds ML-KEM post-quantum key encapsulation mechanism to key services.</li> <li>Enhances security against quantum threats.</li> </ul> <h2 id="microsoft-patch-tuesday-addresses-exploited-zero-day-and-134-flaws">Microsoft Patch Tuesday Addresses Exploited Zero-Day and 134 Flaws</h2> <ul> <li>Security updates for 134 flaws, including one actively exploited zero-day vulnerability.</li> <li>Ransomware campaign exploiting one of the flaws with victims in the US and other countries.</li> </ul>