New Windows print spooler zero day exploitable via remote print servers Another zero day vulnerability in Windows Print Spooler can give a threat actor administrative privileges on a Windows machine through a remote server under the attacker’s control and the ‘Queue-Specific Files’ feature. Last month, a security researcher accidentally revealed a zero-day Windows print spooler … Read more
An Old Windows OS Component “BITS” Exploited to Evade Windows Firewall Windows XP, Background Intelligent Transfer Service (BITS) that is still in use today in Windows 10, component of Microsoft Windows, which makes use of idle network bandwidth to facilitate the asynchronous transfer of files between machines. This is achieved by creating a job a … Read more
Back in June, Microsoft released a fix for a vulnerability in the Windows operating system that enabled attackers to increase their permissions to kernel level on a compromised machine. The patch did not stick. The issue, which advanced hackers exploited as a zero-day in May, is still exploitable but by a different method as security … Read more