Microsoft security advisory - Windows DNS Server Remote Code Execution Vulnerability (CVE 2020-1350) Security News & Discussion

---

• Microsoft security advisory - Windows DNS Server Remote Code Execution Vulnerability (CVE 2020-1350)
• SIGRed - Resolving Your Way into Domain Admin: Exploiting a 17 Year-old Bug in Windows DNS Servers - Check Point Research
• Trustwave write-up on the GoldenSpy and GoldenHelper malware in state-mandated VAT software for companies operating in China
• Secure Code Review Best Practices
• Social engineering with "hidden macros" in Excel
• How to prevent HTML email injection in Python web apps
• Mimecast Service Degradation - NA
• Multiple vulnerabilities found in CDATA OLTs
• Multiple vulnerabilities found in V-SOL OLTs
• Analyzing in the wild exploitation of CVE-2019-1367 by DarkHotel #APT and Magnitude EK. The exploit introduced a Write-What-Where bug that works in every version of JScript engine.
• Technical write up by researcher who found vulnerabilities in the Tenda AC15 AC1900 firmware 15.03.05.19 (5 CVEs issued - CMDi, XSS, CSRF, Hardcoded Telnet Password)

Microsoft security advisory - Windows DNS Server Remote Code Execution Vulnerability (CVE 2020-1350) Posted: 14 Jul 2020 10:15 AM PDT submitted by /u/eatsleepHACKrepeat [link] [comments]

SIGRed - Resolving Your Way into Domain Admin: Exploiting a 17 Year-old Bug in Windows DNS Servers - Check Point Research Posted: 14 Jul 2020 11:59 AM PDT submitted by /u/omriher [link] [comments]

Trustwave write-up on the GoldenSpy and GoldenHelper malware in state-mandated VAT software for companies operating in China Posted: 14 Jul 2020 09:24 AM PDT submitted by /u/Acct235095 [link] [comments]

Secure Code Review Best Practices Posted: 14 Jul 2020 08:50 AM PDT submitted by /u/jrkjared3 [link] [comments]

Social engineering with "hidden macros" in Excel Posted: 14 Jul 2020 12:11 PM PDT submitted by /u/TorchedXorph [link] [comments]

How to prevent HTML email injection in Python web apps Posted: 14 Jul 2020 11:02 AM PDT submitted by /u/pabloest [link] [comments]

Mimecast Service Degradation - NA Posted: 14 Jul 2020 12:39 PM PDT submitted by /u/thefinalep [link] [comments]

Multiple vulnerabilities found in CDATA OLTs Posted: 13 Jul 2020 07:46 PM PDT submitted by /u/PierreKimSec [link] [comments]

Multiple vulnerabilities found in V-SOL OLTs Posted: 13 Jul 2020 07:47 PM PDT submitted by /u/PierreKimSec [link] [comments]

Analyzing in the wild exploitation of CVE-2019-1367 by DarkHotel #APT and Magnitude EK. The exploit introduced a Write-What-Where bug that works in every version of JScript engine. Posted: 13 Jul 2020 10:14 AM PDT submitted by /u/eliya_confiant [link] [comments]

Technical write up by researcher who found vulnerabilities in the Tenda AC15 AC1900 firmware 15.03.05.19 (5 CVEs issued - CMDi, XSS, CSRF, Hardcoded Telnet Password) Posted: 13 Jul 2020 12:41 PM PDT submitted by /u/goopcat [link] [comments]

You are subscribed to email updates from /r/netsec - Information Security News & Discussion. To stop receiving these emails, you may unsubscribe now.	Email delivery powered by Google
Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States