Security News > 2018 > May > Zero-Day Attack Exploits Windows via Malicious Word Doc
2018-05-09 12:03
Microsoft Patches Flaw, Warns It Could Be Exploited via Websites, MalvertisingSecurity alert: Microsoft has issued updates to fix 67 unique flaws in its products. One vulnerability in Windows VBScript engine is already being actively exploited in the wild via malicious Word documents, and could also be employed for attacks via websites and malvertising, Microsoft warns.
News URL
https://www.inforisktoday.com/zero-day-attack-exploits-windows-via-malicious-word-doc-a-10993
Related news
- APTs have been using zero-day Windows shortcut exploit for eight years (ZDI-CAN-25373) (source)
- EncryptHub linked to MMC zero-day attacks on Windows systems (source)
- Zero-Day Alert: Google Releases Chrome Patch for Exploit Used in Russian Espionage Attacks (source)
- EncryptHub Exploits Windows Zero-Day to Deploy Rhadamanthys and StealC Malware (source)
- PipeMagic Trojan Exploits Windows Zero-Day Vulnerability to Deploy Ransomware (source)
- Craft CMS RCE exploit chain used in zero-day attacks to steal data (source)
- ⚡ THN Weekly Recap: Alerts on Zero-Day Exploits, AI Breaches, and Crypto Heists (source)
- Hackers Exploit Paragon Partition Manager Driver Vulnerability in Ransomware Attacks (source)
- Hackers Exploit AWS Misconfigurations to Launch Phishing Attacks via SES and WorkMail (source)
- Broadcom fixes three VMware zero-days exploited in attacks (source)