Security News > 2016 > May > Exploit kits are the greatest danger for Windows users (Help Net Security)
Exploit kits are how most malware gets on victims’ computers and, according to Microsoft, encounters with exploit kits increased by more than a third from 3Q15 to 4Q15. The second place on the list of exploits most commonly detected and blocked by Microsoft real-time antimalware products in 2H15 is the one for CVE-2010-2568, the Windows Shell Shortcut Icon Loading Vulnerability which was one of the four flaws used by the attackers who released the Stuxnet … More →
News URL
http://feedproxy.google.com/~r/HelpNetSecurity/~3/46Mah_2RcLw/
Related news
- Hackers exploit Windows SmartScreen flaw to drop DarkGate malware (source)
- Microsoft confirms memory leak in March Windows Server security update (source)
- GoFetch security exploit can't be disabled on M1 and M2 Apple chips (source)
- OpenAI's GPT-4 can exploit real vulnerabilities by reading security advisories (source)
- Rarest, strangest, form of Windows saved techie from moment of security madness (source)
- Microsoft: APT28 hackers exploit Windows flaw reported by NSA (source)
- Microsoft: APT28 hackers exploit Windows flaw reported by NSA (source)
- Russian hackers’ custom tool exploits old Windows Print Spooler flaw (CVE-2022-38028) (source)
- Prompt Hacking, Private GPTs, Zero-Day Exploits and Deepfakes: Report Reveals the Impact of AI on Cyber Security Landscape (source)
Related Vulnerability
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2010-07-22 | CVE-2010-2568 | Improper Input Validation vulnerability in Microsoft products Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arbitrary code via a crafted (1) .LNK or (2) .PIF shortcut file, which is not properly handled during icon display in Windows Explorer, as demonstrated in the wild in July 2010, and originally reported for malware that leverages CVE-2010-2772 in Siemens WinCC SCADA systems. | 0.0 |