Internet Security Week - Edition No. 102

In Edition No. 102 of Internet Security Week , vulnerability in Windows 10, new techniques used in malware, millennium bug, vulnerability in Linux and more.

News

Vulnerability in Windows 10 allows to obtain administrator privileges

In the first update package released by Microsoft this year for its products, the company corrected 97 vulnerabilities and six zero-day flaws. Of the total corrected failures, 41 were vulnerabilities of elevation of privileges.

By Juan Manuel Harán in We Live Security

Malware uses new techniques to create persistence in systems

An indicator that threat operators continually change tactics and update defensive techniques against detection could be confirmed by researchers from the Cyber Safety Company Sophos by tracking the group of hackers that operates Solarmarker, a thief of information and backdoor that has used stealthy Windows "registration" tricks on compromised systems.

In Ciso Advisor

“New Millennium Bug” and Trojan horses are the main threats of January

February has begun, and with that security companies, such as ISH TECHNOLOGY, begin to publicize their most detected threat reports during the previous month, in this case, January. And the first 2022 cycle in Brazil had as its main safety failure an attack very similar to the famous “Millennium Bug”.

By Dácio Castelo Branco in Canaltech

Wi-Fi 6 and 5G: new opportunities and more advantages

The 5G network, scheduled to start operating in the first quarter of 2022 in Brazilian capitals, brings with it the promise of a world of possibilities in internet access, with new opportunities and more advantages.

By Kelvin Zimmer in Lumiun Blog

If your passwords have these characteristics, it's time to change them!

Passwords are the first line of defense to protect all life online: emails, banks, purchases, social networks and numerous systems that process work, financial, family and personal information.

By Nathalia Sica in Kaspersky Daily

Microsoft blocked billions of brute strength and phishing attacks last year

Office 365 and Azure Active Directory (Azure AD) customers have been targeted by billions of phishing emails and successful brute force attacks last year by Microsoft.

By Sergiu Gatlan in Bleeping Computer

PWNKIT: New Vulnerability of Linux gives root access to the main distributions

Experts have discovered a vulnerability in Polkit, a component that controls systems with all the privileges present in most Linux distributions. This component features PKEXEC, a tool that makes a user without privilege can execute commands like another user with the maximum privileges.

By Juan Manuel Harán in We Live Security

More targeted sectors: finance, retail, dealerships

Trellix, a company that resulted from the merger of McAfee and Fireeye, today released its “Advanced Threat Research Report: January 2022”, containing an analysis of cyber criminals' behavior and activity and their threats in the third quarter of 2021.

In Ciso Advisor

1 in 4 Brazilian companies suffered cyber attacks in 12 months

Phishing, viruses, ransomware and vishing have been the most recurring cyber attacks in the last 12 months. And they reached 26% of Brazilian companies, according to the 1st National Information Security Buhunt Survey, conducted by the Bughunt platform.

By Roseli Andrion in Canaltech

Microsoft launches quarterly report on cyber threats

Microsoft has just launched Cyber Signals, a summary on intelligence of cyber threats based on the latest technology data and investigations. This content, which will be launched quarterly, gives a specialized perspective on the current threat scenario, focusing on tactics, techniques, and trends strategies used by actors of most sophisticated threats in the world.

In Microsoft News