MicrosoftSecurity

Office VBA + AMSI: Parting the veil on malicious macros

Credit to Author: Microsoft Secure Blog Staff| Date: Wed, 12 Sep 2018 16:02:43 +0000

As part of our continued efforts to tackle entire classes of threats, Office 365 client applications now integrate with Antimalware Scan Interface (AMSI), enabling antivirus and other security solutions to scan macros and other scripts at runtime to check for malicious behavior. Macro-based threats have always been a prevalent entry point for malware, but we

Read more

The post Office VBA + AMSI: Parting the veil on malicious macros appeared first on Microsoft Secure.

Read More
MalwareBytesSecurity

The many faces of omnichannel fraud

Credit to Author: Jovi Umawing| Date: Wed, 12 Sep 2018 15:00:00 +0000

There’s a new kind of fraud out there, and it’s after organizations that have embraced omnichannel, a strategy that focuses on improved user experience. We take a look at what omnichannel is, the kinds of fraud that can affect businesses using this approach, and how they can protect themselves—and their clients.

Categories:

Tags:

(Read more…)

The post The many faces of omnichannel fraud appeared first on Malwarebytes Labs.

Read More
QuickHealSecurity

CVE-2018-8440 – Task Scheduler ALPC Zero-Day Exploit in the Wild

Credit to Author: Sameer Patil| Date: Wed, 12 Sep 2018 13:30:14 +0000

The recent zero-day vulnerability CVE-2018-8440 in Windows Task Scheduler enables attackers to perform a privilege elevation on targeted machines. Microsoft has released a security advisory CVE-2018-8440 on September 11, 2018 to address this issue. According to Microsoft, successful exploitation of this vulnerability could run arbitrary code in the security context…

Read More
IndependentKrebs

Patch Tuesday, September 2018 Edition

Credit to Author: BrianKrebs| Date: Tue, 11 Sep 2018 20:35:27 +0000

Adobe and Microsoft today each released patches to fix serious security holes in their software. Adobe pushed out a new version of its beleaguered Flash Player browser plugin. Redmond issued updates to address at least 61 distinct vulnerabilities in Microsoft Windows and related programs, including several flaws that were publicly detailed prior to today and one “zero-day” bug in Windows that is already being actively exploited by attackers.

Read More