December 2023 Patch Tuesday

December 2023 Patch Tuesday 34 flaws and one previously disclosed, unpatched vulnerability in AMD CPUs. The number of bugs in each vulnerability category is listed below: 10 Elevation of Privilege Vulnerabilities 8 Remote Code Execution Vulnerabilities 6 Information Disclosure Vulnerabilities 5 Denial of Service Vulnerabilities 5 Spoofing Vulnerabilities The total count of 34 flaws does … Read more

Malware Dropped Through a ZPAQ Archive

Malware Dropped Through a ZPAQ Archive   Ever seen a ZPAQ archives? This morning, my honeypot captured a phishing attempt which lured the potential victim to open a “ZPAQ” archive. This is not a common file format. This could be used by the attacker to bypass classic security controles. What Wikiepadia says about ZPAQ: ZPAQ … Read more

May 15th-Ongoing Facebook phishing campaign without a sender and (almost) without any links

Internet Storm Center, we often receive examples of current malspam and phishing e-mails from our readers. Most of them are fairly uninteresting, but some turn out to be notable for one reason or another. This was the case with several messages that Charlie, one of our readers, has submitted to us since the beginning of … Read more