https://gitlab.com/email_bug/outlook_email_auth_bypass Outlook Desktop Description Two bugs in outlook makes it possible for the attacker to make the email to appear to be coming from an arbitrary email address or even no email (which in outlook signifies that it is from the same organization): display name and from email are in same visual element , there is no isolation between them, thus an authenticated piece of information(from email) can be manipulated by an arbitrary

Tracked as CVE-2023-3519 and patched last week, the critical-severity bug can be exploited to execute arbitrary code remotely, without authentication, on vulnerable appliances that are configured as a gateway or AAA virtual server. Last week, CISA warned that attacks exploiting the flaw have been seen since June 2023, in at least one case targeting a critical infrastructure organization. On Friday, Bishop Fox warned of a new way to exploit the vulnerability, one that can be u

Ransomware recovery company Coveware believes the Cl0p ransomware gang could earn as much as $100 million from the MOVEit hack, which has impacted hundreds of organizations. In a ransomware monetization report published on Friday, Coveware said the percentage of victims that paid a ransom in the second quarter of 2023 fell to a record low of 34%. The company noted that the chances of cybercriminals getting paid in the case of attacks that only involve data theft without the

A timeline of the #MOVEit #cyberattack June 1: MOVEit’s vulnerability is flagged by cyber security researchers and the US government....