Microsoft Windows RRAS Service MIBEntryGet Overflow

This Metasploit module exploits an overflow in the Windows Routing and Remote Access Service (RRAS) to execute code as SYSTEM. The RRAS DCERPC endpoint is accessible to unauthenticated users via SMBv1 browser named pipe on Windows Server 2003 and Windows XP hosts; however, this module targets Windows Server 2003 only. Since the service is hosted […]

The Week in Ransomware – March 5th 2021 – Targeting service providers

This week we have seen ransomware attacks targeting online service providers and MSPs to not only encrypt the victim but also cause significant outages for their customers. […] BleepingComputer

Ransomware Hits Dental Data Backup Service Offering Ransomware Protection

THIS WEEK IN THE IRONIC NEWS: DDS Safe, an online cloud-based data backup system that hundreds of dental practice offices across the United States are using to safeguard medical records and other information of their patients from ransomware attacks has been hit with ransomware. Provided by two Wisconsin-based companies, Digital Dental Record and PerCSoft, the […]

Cisco addresses CVE-2019-12643 critical flaw in virtual Service Container for IOS XE

Cisco released security updates for Cisco IOS XE operating system to address a critical vulnerability that could be exploited by a remote attacker to bypass authentication. Cisco released security updates for Cisco IOS XE OS to address a critical flaw, tracked as CVE-2019-12643, that could be exploited by a remote attacker to bypass authentication. “On […]

Ninth Circuit Vacates District Court Orders in Transgender Service Ban Case

On June 14, the U.S. Court of Appeals for the Ninth Circuit issued a ruling in Karnoski v. Trump, one of the cases challenging the Trump administration’s ban on military service by transgender individuals. In a per curiam opinion, the three-judge panel (1) vacated the district court’s order striking the defendants’ motion to dissolve a […]

Next Page »