Category: Uncategorized

Written by Rafael Silva

CVE-2022-26503

CVE-2022-26503 https://ift.tt/rxuMTK4 CVE-2022-26503 KB ID: 4289 Product: Veeam Agent for Microsoft Windows | 2.0 | 2.1 | 2.2 | 3.0.2 | 4.0 | 5.0 Published: 2022-03-12 Last Modified: 2022-03-12 Challenge Vulnerability (CVE-2022-26503) in Veeam Agent for Microsoft Windows allows local privilege escalation. An attacker who successfully exploited this vulnerability could run arbitrary code with LOCAL SYSTEM privileges. […]

Written by Rafael Silva

CVE-2022-26500 | CVE-2022-26501

CVE-2022-26500 | CVE-2022-26501 https://ift.tt/uyJM8oh CVE-2022-26500 | CVE-2022-26501 KB ID: 4288 Product: Veeam Backup & Replication | 9.5 | 10 | 11 Published: 2022-03-12 Last Modified: 2022-03-12 Challenge Multiple vulnerabilities (CVE-2022-26500, CVE-2022-26501) in Veeam Backup & Replication allow executing malicious code remotely without authentication. This may lead to gaining control over the target system. Severity: critical […]

Written by Rafael Silva

CVE-2022-26504

CVE-2022-26504 https://ift.tt/qLi10Ef CVE-2022-26504 KB ID: 4290 Product: Veeam Backup & Replication | 9.5 | 10 | 11 Published: 2022-03-12 Last Modified: 2022-03-12 Challenge Vulnerability (CVE-2022-26504) in Veeam Backup & Replication component used for Microsoft System Center Virtual Machine Manager (SCVMM) integration allows domain users to execute malicious code remotely. This may lead to gaining control […]

Written by Rafael Silva

Blunting RDP brute-force attacks with rate limiting

Blunting RDP brute-force attacks with rate limiting https://ift.tt/Xk8Rvsn Thanks to the Malwarebytes Threat Intelligence Team for the information they provided for this article. Not long ago, guessing a Windows Remote Desktop Protocol (RDP) password successfully was widely regarded as ransomware operators’ number one choice for breaching a target. It attracted a lot of press coverage […]

Written by Rafael Silva

Exchange 2016/2019: Implementing DKIM

Exchange 2016/2019: Implementing DKIM https://ift.tt/6lGmOrp In some of my articles, I have made mention of implementing SPF, DMARC and DKIM records for your Exchange environment but many ask the question on how do you setup DKIM for Exchange 2016 or Exchange 2019? (Applies to 2013 as well). There are a couple of steps involved to […]

Written by Rafael Silva

Security baselines guide – Windows security

Security baselines guide – Windows security https://ift.tt/kNX127Y Security baselines Article 02/09/2022 3 minutes to read Using security baselines in your organization Microsoft is dedicated to providing its customers with secure operating systems, such as Windows and Windows Server, and secure apps, such as Microsoft 365 apps for enterprise and Microsoft Edge. In addition to the […]

Written by Rafael Silva

Microsoft March 2022 Patch Tuesday: 71 vulnerabilities fixed

Microsoft March 2022 Patch Tuesday: 71 vulnerabilities fixed https://ift.tt/EQZ8DpP Microsoft has released 71 security fixes for software, including 41 patches for Microsoft Windows vulnerabilities, five vulnerabilities in Microsoft Office and two in Microsoft Exchange.  Three of the vulnerabilities are rated critical — CVE-2022-22006, CVE-2022-24501 and CVE-2022-23277 — while the rest are rated important. In the […]

Written by Rafael Silva

March 2022 Patch Tuesday: Microsoft Releases 92 Vulnerabilities with 3 Critical; Adobe Releases 3 Advisories, 6 Vulnerabilities with 5 Critical.

March 2022 Patch Tuesday: Microsoft Releases 92 Vulnerabilities with 3 Critical; Adobe Releases 3 Advisories, 6 Vulnerabilities with 5 Critical. https://ift.tt/6zT1Y8C Microsoft Patch Tuesday Summary  Microsoft has fixed 92 vulnerabilities, including 21 Microsoft Edge vulnerabilities, in the March 2022 update, with three (3) classified as Critical as they allow Remote Code Execution (RCE). This month’s Patch […]