vulneribility

This month, Microsoft has fixed 75 vulnerabilities, including 7 criticals and also 3 zero-days. CVE-2022-26925 – Windows LSA Spoofing Vulnerability This vulnerability allows an unauthenticated attacker to force a domain controller to authenticate against another server using NTLM. The threat actor would need to be in the logical network path between the target and the

This month, Microsoft has fixed 119 vulnerabilities, including 10 criticals and also 2 zero-days. CVE-2022-24521 and CVE-2022-26904 are “only” privilege escalation vulnerabilities but combined with other bugs they might allow an attacker to code execution at the SYSTEM level. Due to exploitation of the first one is already detected and the second one is rated