Cybersecurity Newsletter - 10/17/2020
Ajishlal
Community Legend ✭✭✭✭✭
Microsoft Fixes RCE Flaws in Out-of-Band Windows Update
TYPE: VULNERABILITITES
Microsoft has issued out-of-band patches for two “important” severity vulnerabilities, which if exploited could allow for remote code execution.
One flaw (CVE-2020-17023) exists in Microsoft’s Visual Studio Code is a free source-code editor made by Microsoft for Windows, Linux and macOS. The other (CVE-2020-17022) is in the Microsoft Windows Codecs Library; the codecs module provides stream and file interfaces for transcoding data in Windows programs.
Massive New Phishing Campaigns Target Microsoft, Google Cloud Users
TYPE: CYBERCRIME
Researchers are warning of a series of massive phishing campaigns underway that are taking special aim at public cloud users. The campaigns are targeting accounts on Microsoft's Office 365 and Google's Gmail with tactics designed to provide a false sense of security or prey on curiosity about current events.