Lava Kafle’s Post

Critical security issues, associated with System credentials leak and Local Private Key Leak, have been discovered in Gnome Remote Desktop in Linux distributions. GNOME desktop manager was equipped with a new feature which allowed remote users to create graphical sessions on the system by configuring the system daemon. This daemon runs as a dedicated “gnome-remote-desktop” and also provides a D-bus interface on the D-bus system bus. These features have been introduced in GNOME remote desktop version 46 along with several other system services. However, some of the new system services were discovered with some critical security issues in which one of them was associated with System credentials leak and Local Private Key Leak... #informationsecurity #cybersecurity #security #infosec #linux #vulnerability #gnome #dataleak #alert

read login .

On December 10, 2024, Microsoft disclosed a critical vulnerability in its Windows Remote Desktop Services, tracked as CVE-2024-49115. This security flaw allows attackers to execute remote code on affected systems, posing a severe threat to confidentiality, integrity, and availability. The vulnerability has been classified as critical, with a CVSS score of 8.1. #Windows #RDP #vulnerabilities #security

🚨 Windows Security Alert: Critical Flaw in Remote Registry! 🛡️ A major Elevation of Privilege (EoP) vulnerability has been discovered in the Windows Remote Registry client. Here's what you need to know: ## Vulnerability Details • Identifier: CVE-2024-43532 • CVSS Score: 8.8 (Critical) • Impact: Enables NTLM authentication relay ## Exploitation Mechanism • Uses a fallback mechanism in the WinReg client • Exploits obsolete transport protocols • Allows interception of authentication metadata ## Potential Risks • Identity spoofing within a domain • Unauthorized access to critical systems • Creation of persistent administrator accounts ## Recommended Actions • Immediately apply the October 2024 patch • Strengthen network activity monitoring • Update authentication policies 🔍 This discovery underscores the crucial importance of proactive patch management and continuous vulnerability monitoring. #cybersecurity #cybersécurité #vulnerability #WindowsSecurity #VulnerabilityManagement #CyberThreat #InfoSec #PatchManagement #CyberRisk #ITSecurity #NTLMRelay #PrivilegeEscalation #CyberAttack For more technical details, visit: https://lnkd.in/eYwB2xEG

Critical Vulnerability in Windows Remote Desktop Services Microsoft disclosed a critical vulnerability (CVE-2024-49115) in Windows Remote Desktop Services that allows attackers to execute remote code on affected systems. #cybersecurity #infosec #WindowsServer #RDP #patchtuesday #vulnerability https://lnkd.in/gQdRBB2y

Windows Remote Registry Client EoP Flaw Exposes Systems to Relay Attacks: A critical elevation of privilege (EoP) vulnerability, identified as CVE-2024-43532, has been discovered in the Windows Remote Registry client. This vulnerability potentially allows attackers to relay NTLM authentication and gain unauthorized access to Windows systems. It carries a high CVSS score of 8.8 and affects all unpatched Windows versions. Akamai researcher Stiv Kupchik uncovered the […] The post Windows Remote Registry Client EoP Flaw Exposes Systems to Relay Attacks appeared first on Cyber Security News. #CyberSecurity #InfoSec

🚀 Why Automate Endpoint Management? 🚀 Manual patching, inconsistent updates, and vulnerability gaps are challenges every IT team faces. Automox automates endpoint management across Windows, macOS, and Linux, delivering: ✅ Faster Vulnerability Remediation: Critical patches applied in hours, not weeks. ✅ Improved Efficiency: IT teams save time and focus on strategic tasks. ✅ Better Security: 74% of companies using automation experience fewer security breaches. ✅ Cost Savings: Automation cuts operational costs by up to 50%. As cyber threats evolve, automation is the key to staying secure and efficient💡 🔑 Fun fact: 73% of IT leaders are embracing automation to reduce downtime and improve security. #CyberSecurity #Automation #EndpointManagement #Automox #ITefficiency #PatchManagement

On December 10, 2024, #Microsoft disclosed a critical vulnerability in its Windows Remote Desktop Services, tracked as CVE-2024-49115. This security flaw allows attackers to execute remote code on affected systems, posing a severe threat to confidentiality, integrity, and availability. The vulnerability has been classified as critical, with a CVSS score of 8.1. #cybersecurity #windows #rdp #vulnerabilities #patched

Atlassian Sourcetree For Mac & Windows Flaw Let Attackers Execute Remote Code A critical security vulnerability has been discovered in Atlassian’s popular version control client, Sourcetree, affecting both Mac and Windows versions. The flaw, identified as CVE-2024-21697, allows unauthenticated attackers to execute arbitrary code remotely, posing a significant risk to users. The vulnerability, which carries a high severity rating with a CVSS score of 8.8, was introduced in Sourcetree for Mac version 4.2.8 and Sourcetree for Windows version 3.4.19. This remote code execution (RCE) flaw has the potential to compromise the confidentiality, integrity, and availability of affected systems. Security researchers have warned that successful exploitation of this vulnerability could grant attackers complete control over the targeted systems. Atlassian, the company behind Sourcetree, has responded swiftly to the security threat. They have released patches to address the vulnerability and are strongly urging all users to update their software immediately. Stay Connected to Sidharth Sharma, CPA, CISA, CISM, CFE, CDPSE for content related to Cyber Security. #CyberSecurity #JPMC #Technology #InfoSec #DataProtection #DataPrivacy #ThreatIntelligence #CyberThreats #NetworkSecurity #CyberDefense #SecurityAwareness #ITSecurity #SecuritySolutions #CyberResilience #DigitalSecurity #SecurityBestPractices #CyberRisk #SecurityOperations 

Protect your vital data and apps with the solid security controls in Windows 11. Many layers of security cover crucial data and maintain integrity, while privacy features ensure application security. Explore more in this @Microsoft eBook 📖 via us at, R.B.Hall Associates, LLC. Tech solutions made simple.