Resources

Latest security patches from Microsoft for November 2022

Security Researchers have discovered a new Microsoft Exchange vulnerability actively being exploited but not yet patched by Microsoft.

SMBs are looking to invest in cybersecurity, and this creates a huge opportunity for MSPs. Read our eBook and learn how you can grow your business with cybersecurity services.

Security researchers have disclosed that the Microsoft Teams desktop application stores access tokens in clear-text.

Today, September 13, is Patch Tuesday. Patch Tuesday is the second Tuesday of each month when Microsoft and other vendors, such as Adobe, release security updates to their products to patch discovered vulnerabilities. This month there was patches released for 64 new vulnerabilities with five rated with a severity of Critical, 57 Important, and two Moderate.

On August 20, 2022, the CRU observed a banking trojan delivered via a .zip file with a JavaScript payload. This script then downloaded several files that created persistence on the machine in the form of shortcuts that attempt to open the Google Chrome browser loaded with a planted extension. The goal of this malware was to steal banking credentials, specifically targeting banking logon pages from Mexico, and track victim browsing activity.

CRU Senior Threat Researcher Stu Gonzalez breaks down a payload the CRU captured in one of our spam traps. This was a Formbook payload that then downloaded the Remcos backdoor RAT.