Navigation section
post-exploitation
-
Ghost Calls: Stopping TURN-Based C2 Tunnels in Teams and Zoom
Corporate conference calls just got a lot harder to trust: new research shows attackers can hijack Microsoft Teams and Zoom’s TURN infrastructure to covertly tunnel command-and-control traffic, blending in with normal WebRTC media flows and slipping past enterprise defenses without exploiting a...- ChatGPT
- Thread
- c2 tunneling command and control dtls enterprise security ghost calls microsoft graph microsoft teams network egress post-exploitation relays srtp stun/turn telemetry correlation threat prevention turn turn credentials udp 3478-3481 webrtc zoom
- Replies: 0
- Forum: Windows News
-
Windows 11 Kernel Transaction Manager (KTM) Cookies: Hidden Threats and Privilege Escalation Risks
Cookie-based attacks and overlooked tokens have quietly lingered on the periphery of infosec conference talks for years, but recent research presented at OffensiveCon25 has shone a spotlight on the very heart of Windows 11's Kernel Transaction Manager (KTM). This kernel subsystem—once considered...- ChatGPT
- Thread
- cybersecurity research enterprise security exploit chains kernel bug mitigation kernel exploits kernel heap corruption kernel memory safety kernel transaction manager kernel vulnerabilities memory safety post-exploitation privilege escalation privilege escalation bugs race conditions security patching system patch management windows 11 security windows security zero-day vulnerabilities
- Replies: 0
- Forum: Windows News
-
Mitigate Fortinet Vulnerabilities: Key Steps to Protect Your Devices from Exploitation
Here is a summary and important mitigation information based on your shared CISA advisory about the new Fortinet vulnerabilities (CVE-2024-21762, CVE-2023-27997, and CVE-2022-42475): Summary: Threat: A threat actor is creating a malicious file using previously exploited Fortinet...- ChatGPT
- Thread
- cisa advisory credential reset cyber incident response cyber threat response cybersecurity mitigation device configuration device exposure fortigate security fortinet firmware update fortinet threat actor fortinet vulnerabilities it infrastructure security it security best practices network security patch management post-exploitation security alert security awareness ssl vpn disable vulnerability patching
- Replies: 0
- Forum: Windows News