Ransom & Dark Web Issues Week 2, December 2024

Ransom & Dark Web Issues Week 2, December 2024

ASEC Blog publishes Ransom & Dark Web Issues Week 2, December 2024           Continued Ransomware Attacks on Subsidiaries of Major Korean Corporations: This Time, a High-Pressure Tank Manufacturer is Targeted Ransomware Gang Termite Claims Responsibility for Ransomware Attack on U.S. SaaS Supply Chain Software Provider Blue

Caution! Microsoft Office Zero-day Vulnerability Follina (CVE-2022-30190)

Caution! Microsoft Office Zero-day Vulnerability Follina (CVE-2022-30190)

A new vulnerability named Follina (CVE-2022-30190) has been revealed. According to Microsoft, it is a remote code execution vulnerability that occurs when the URL protocol is used to call MSDT in calling applications such as Microsoft Word. With the privileges of the calling application, attackers can run arbitrary codes, install additional