Microsoft stacks up 113 CVEs for January Patch Tuesday
Categories: X-ops
Tags: Patch Tuesday, Microsoft, Windows
Similar Posts
SK Telecom vows to take full responsibility for damage from recent data leak
Bys sOh Seok-min reports on how SK Telecom is attempting to reassure panicked customers following a significant data breach: SK Telecom Co., South Korea’s leading mobile carrier, vowed Sunday to take full responsibility for any damage to customers caused by a recent network hacking incident involving the potential leak of subscriber information. Earlier this month, the…
Little Rock Psychologist Indicted by Federal Grand Jury for Defrauding Medicare and Arkansas Blue Cross Blue Shield
Bys sFrom the U.S. Attorney’s Office, Eastern District of Arkansas: LITTLE ROCK—A Little Rock psychologist has been indicted for defrauding Medicare and Arkansas Blue Cross and Blue Shield (Blue Cross) and creating fictitious records to conceal her wrongdoing. Krameelah Banks, 48, of Little Rock, faces twenty-three counts of wire fraud, seven counts of making false……
France issues press statement about arrest of ShinyHunters members
Bys sFrench version. The English version is below. It’s interesting to note that IntelBroker was described as a British national who was arrested in France in February, 2025 and detained in pre-trial detention.
Transparent Tribe Targets Indian Govt With Weaponized Desktop Shortcuts via Phishing
Bys sThe advanced persistent threat (APT) actor known as Transparent Tribe has been observed targeting both Windows and BOSS (Bharat Operating System Solutions) Linux systems with malicious Desktop shortcut files in attacks targeting Indian Government entities. “Initial access is achieved through spear-phishing emails,” CYFIRMA said. “Linux BOSS environments are targeted via weaponized .desktop
NANOREMOTE Malware Uses Google Drive API for Hidden Control on Windows Systems
Bys sCybersecurity researchers have disclosed details of a new fully-featured Windows backdoor called NANOREMOTE that uses the Google Drive API for command-and-control (C2) purposes. According to a report from Elastic Security Labs, the malware shares code similarities with another implant codenamed FINALDRAFT (aka Squidoor) that employs Microsoft Graph API for C2. FINALDRAFT is attributed to a
Critical SimpleHelp Flaws Allow File Theft, Privilege Escalation, and RCE Attacks
Bys sCybersecurity researchers have disclosed multiple security flaws in SimpleHelp remote access software that could lead to information disclosure, privilege escalation, and remote code execution. Horizon3.ai researcher Naveen Sunkavally, in a technical report detailing the findings, said the “vulnerabilities are trivial to reverse and exploit.” The list of identified flaws is as follows –