PoC Exploit for Zero-Click Vulnerability Made Available to the Masses

August 27, 2024 at 05:06PM Security researcher “Ynwarcs” has disclosed a zero-click vulnerability in Windows TCP/IP, known as CVE-2024-38063, allowing remote code execution on systems with IPv6 enabled. The exploit affects Windows 10, 11, and Server, with an available proof-of-concept on GitHub. Users are urged to apply Microsoft’s latest security updates promptly. Meeting Notes Summary: … Read more

Russian Espionage Group Hammers Zero-Click Microsoft Outlook Bug

December 8, 2023 at 01:52PM The espionage group Fighting Ursa, also known as Forest Blizzard or Fancy Bear, has been targeting government agencies in NATO countries, the UAE, and Jordan. They are using a zero-click vulnerability in Microsoft Outlook to compromise systems. This APT has targeted at least 30 organizations and continues to pose a … Read more