GreyKeep Security
Expert security for an evolving digital age
This is the GreyKeep Security Malware Roundup for August 21, 2023. Here’s a summary of what’s in this week’s edition:
Organizations
| CyberPower Dataprobe Microsoft Apple Citrix | Adobe U.S. Military Taiwan South Korea Latin Americans |
Targets
| CyberPower DCIM Dataprobe iBoot PDU Windows Microsoft OWA Powershell Gallery MacOS Linux | Android Citrix NetScaler Adobe Commerce/Magento 2 Ivacy VPN GitLab IoT Zulip |
Your daily dose of relevant cybersecurity advisories, industry news, and product updates for August 17, 2023.
Microsoft has enabled a fix for a kernel disclosure vulnerability (CVE-2023-32019) that it had disabled in previous Windows updates. The vulnerability, discovered by Mateusz Jurczyk of Google Project Zero, allows an attacker to access the memory of privileged processes to obtain potentially sensitive information.
Microsoft previously provided instructions for administrators to enable the fix by manually editing the Windows registry, noting the “resolution described in this article introduces a potential breaking change.” The warning led to uncertainty for many administrators who held out on deploying the fix out of concern that it would interfere with their Windows installations.
Microsoft has enabled the fix by default in Windows updates wince August 8, 2023.
Your daily dose of relevant cybersecurity advisories, industry news, and product updates for Tuesday, August 15, 2023.
This is the GreyKeep Security Malware Roundup for August 11, 2023. Here’s a summary of what’s in this week’s edition:
Organizations
| Microsoft Apple Intel Salesforce Citrix | Barracuda CloudFlare TETRA CODESYS Zyxel |
Targets
| Intel AMD Linux MacOS Windows Windows Defender Microsoft 365 | .NET Visual Studio Power Platform Kubernetes Redis Rust PaperCut |