編號CVE-2020-17087的Windows核心的pool-based緩衝溢位漏洞,可和Chrome瀏覽器Freetype零時差漏洞串聯起來,讓惡意程式突破沙箱而在Windows執行,已出現實際攻擊行動.

Windows TCP/IP、Outlook以及Hyper-V都含有遠端程式攻擊漏洞.

有用戶反映編號KB4571756版本的Windows 10更新,會導致電腦無法啟動Windows Subsystems for Linux 2 (WSL2)

藏匿在Microsoft Exchange伺服器的CVE-2020-16875漏洞,允許駭客以系統權限自遠端執行任意程式。由於之前類似的漏洞很快就成為駭客的攻擊目標,ZDI建議企業應優先修補CVE-2020-16875.



Source link

Is your business effected by Cyber Crime?

If a cyber crime or cyber attack happens to you, you need to respond quickly. Cyber crime in its several formats such as online identity theft, financial fraud, stalking, bullying, hacking, e-mail fraud, email spoofing, invoice fraud, email scams, banking scam, CEO fraud. Cyber fraud can lead to major disruption and financial disasters. Contact Digitpol’s hotlines or respond to us online.

Digitpol’s Cyber Crime Investigation Unit provides investigative support to victims of cyber crimes. Digitpol is available 24/7. https://digitpol.com/cybercrime-investigation/

Europe +31558448040
UK +44 20 8089 9944
ASIA +85239733884