.Net, SMB and Windows - CTO Universe

Microsoft’s November 2024 Patch Tuesday Addresses 87 CVEs (CVE-2024-43451, CVE-2024-49039)

Tenable

NOVEMBER 12, 2024

Important CVE-2024-43451 | NTLM Hash Disclosure Spoofing Vulnerability CVE-2024-43451 is a NTLM hash spoofing vulnerability in Microsoft Windows. Important CVE-2024-43451 | NTLM Hash Disclosure Spoofing Vulnerability CVE-2024-43451 is a NTLM hash spoofing vulnerability in Microsoft Windows. It was assigned a CVSSv3 score of 6.5

Windows

Windows Software Review Azure Systems Review

A Hitchhiker?s Guide to Windows Containers

Linux Academy

MAY 15, 2020

This article will give you the full lowdown on Windows Containers, to prepare you to do just that. Why Windows? First, I want to acknowledge that there is a big difference between Linux and Windows containers. So why do we even need Windows containers? Each running container is isolated inside a Hyper-V VM.

Windows

Windows Linux Azure SMB

Microsoft’s September 2024 Patch Tuesday Addresses 79 CVEs (CVE-2024-43491)

Tenable

SEPTEMBER 10, 2024

Critical CVE-2024-43491 | Microsoft Windows Update Remote Code Execution Vulnerability CVE-2024-43491 is a RCE vulnerability in Microsoft Windows Update affecting Optional Components on Windows 10, version 1507 (Windows 10 Enterprise 2015 LTSB and Windows 10 IoT Enterprise 2015 LTSB). Advanced Services ASP.NET 4.6

Windows

Windows Azure Authentication SMB

Webinars

How to Achieve High-Accuracy Results When Using LLMs

MORE WEBINARS

Microsoft’s March 2022 Patch Tuesday Addresses 71 CVEs (CVE-2022-23277, CVE-2022-24508)

Tenable

MARCH 8, 2022

This month’s update includes patches for: NET and Visual Studio. Microsoft Windows ALPC. Microsoft Windows Codecs Library. Role: Windows Hyper-V. Tablet Windows User Interface. Windows Ancillary Function Driver for WinSock. Windows CD-ROM Driver. Windows Cloud Files Mini Filter Driver.

Windows

Windows Authentication SMB .Net

TechCrunch+ roundup: AI ethics investor survey, B2B SaaS KPIs, don’t frown on down rounds

TechCrunch

MAY 5, 2023

.” In his latest TC+ article, Paris Heymann (partner, Index Ventures), shares formulas for calculating Gross Dollar Retention and Net Dollar Retention, two KPIs that provide deep insights into the health of your business. For context, he also included GDR and NDR benchmarks for enterprise and SMB.

B2B

B2B Survey SMB Case Study

Microsoft’s April 2022 Patch Tuesday Addresses 117 CVEs (CVE-2022-24521)

Tenable

APRIL 12, 2022

This month’s update includes patches for: NET Framework. Microsoft Windows ALPC. Microsoft Windows Codecs Library. Microsoft Windows Media Foundation. Role: Windows Hyper-V. Windows Ancillary Function Driver for WinSock. Windows App Store. Windows AppX Package Manager. Windows Defender.

Windows

Windows Systems Review Software Review SMB

Zoom Patches Multiple Flaws and Responds to Security and Privacy Concerns

Tenable

APRIL 3, 2020

Zoom Windows client: UNC path injection. On April 1, Zoom announced a fix for a flaw in the Windows client. In a tweet, _g0dmode noted that the Zoom client “allows you to post links such as x.x.x.xxyz to attempt to capture Net-NTLM hashes.”. Mitch (@_g0dmode) March 23, 2020. pic.twitter.com/gjWXas7TMO.

Software Review

Software Review Windows Meeting .Net

Microsoft’s May 2021 Patch Tuesday Addresses 55 CVEs (CVE-2021-31166)

Tenable

MAY 11, 2021

This month's Patch Tuesday release includes fixes for: NET Core & Visual Studio. Microsoft Windows Codecs Library. Microsoft Windows IrDA. Windows Container Isolation FS Filter Driver. Windows Container Manager Service. Windows Cryptographic Services. Windows CSC Service. Windows Desktop Bridge.

Windows

Windows SMB Wireless .Net

Microsoft’s June 2022 Patch Tuesday Addresses 55 CVEs (CVE-2022-30190)

Tenable

JUNE 14, 2022

This month’s update includes patches for: NET and Visual Studio. Microsoft Windows ALPC. Microsoft Windows Codecs Library. Role: Windows Hyper-V. Windows Ancillary Function Driver for WinSock. Windows App Store. Windows Autopilot. Windows Container Isolation FS Filter Driver. Windows Defender.

Windows

Windows Azure Internet SMB

Microsoft’s August 2022 Patch Tuesday Addresses 118 CVEs (CVE-2022-34713)

Tenable

AUGUST 9, 2022

This month’s update includes patches for: NET Core. Microsoft Windows Support Diagnostic Tool (MSDT). Role: Windows Fax Service. Role: Windows Hyper-V. Windows Bluetooth Service. Windows Canonical Display Driver. Windows Cloud Files Mini Filter Driver. Windows Defender Credential Guard.

SMB

SMB Azure Windows Disaster Recovery

Analyzing the Vulnerabilities Associated with the Top Malware Strains of 2021

Tenable

AUGUST 4, 2022

Windows SMB remote code execution (EternalBlue). NET Framework remote code execution. Windows Background Intelligent Transfer Service elevation of privilege. Windows Print Spooler remote code execution (PrintNightmare). Windows AppX installer spoofing vulnerability. CVE-2017-0144. CVE-2017-0199.

Malware

Malware Windows SMB Groups

Microsoft’s July 2021 Patch Tuesday Includes 116 CVEs (CVE-2021-31979, CVE-2021-33771)

Tenable

JULY 13, 2021

Microsoft Windows Codecs Library. Microsoft Windows DNS. Microsoft Windows Media Foundation. NET Runtime. Windows Active Directory. Windows Address Book. Windows AF_UNIX Socket Provider. Windows AppContainer. Windows AppContainer. Windows AppX Deployment Extensions. Windows Hello.

Windows

Windows Software Review Malware SMB

Cybersecurity Snapshot: 6 Things That Matter Right Now

Tenable

AUGUST 19, 2022

Windows SMB remote code execution (EternalBlue). NET Framework remote code execution. Windows Background Intelligent Transfer Service elevation of privilege. Windows Print Spooler remote code execution (PrintNightmare). Windows AppX installer spoofing vulnerability. CVE-2017-0144. CVE-2017-0199.

IoT

IoT Malware Windows Guidelines

MadoMiner Part 1 - Install

AlienVault

SEPTEMBER 24, 2018

2018 seems to be a time for highly profitable cryptominers that spread over SMB file-shares. During the execution of the Install module, MadoMiner makes use of several exploits: CVE-2017-9073, RDP vulnerability on Windows XP and Windows Server 2003. CVE-2017-0143, SMB exploit. CVE-2017-0146, SMB exploit.

Malware

Malware SMB .Net Architecture

ZombieBoy

AlienVault

JULY 18, 2018

ZombieBoy makes use of several exploits during execution: CVE-2017-9073, RDP vulnerability on Windows XP and Windows Server 2003. CVE-2017-0143, SMB exploit. CVE-2017-0146, SMB exploit. exe obtains the ip of the victim by connecting to ip[dot]3222[dot]net. Installation.

Malware

Malware SMB Analysis System

CTO Universe

Microsoft’s November 2024 Patch Tuesday Addresses 87 CVEs (CVE-2024-43451, CVE-2024-49039)

A Hitchhiker?s Guide to Windows Containers

Webinars

Trending Sources

Microsoft’s September 2024 Patch Tuesday Addresses 79 CVEs (CVE-2024-43491)

Webinars

Microsoft’s March 2022 Patch Tuesday Addresses 71 CVEs (CVE-2022-23277, CVE-2022-24508)

TechCrunch+ roundup: AI ethics investor survey, B2B SaaS KPIs, don’t frown on down rounds

Microsoft’s April 2022 Patch Tuesday Addresses 117 CVEs (CVE-2022-24521)

Zoom Patches Multiple Flaws and Responds to Security and Privacy Concerns

Microsoft’s May 2021 Patch Tuesday Addresses 55 CVEs (CVE-2021-31166)

Microsoft’s June 2022 Patch Tuesday Addresses 55 CVEs (CVE-2022-30190)

Microsoft’s August 2022 Patch Tuesday Addresses 118 CVEs (CVE-2022-34713)

Analyzing the Vulnerabilities Associated with the Top Malware Strains of 2021

Microsoft’s July 2021 Patch Tuesday Includes 116 CVEs (CVE-2021-31979, CVE-2021-33771)

Cybersecurity Snapshot: 6 Things That Matter Right Now

MadoMiner Part 1 - Install

ZombieBoy

Stay Connected