CYBERSECURITY BLOGS

Why did the hacker cross the road? To get to the other network. Introduction On September 9, 2022, Microsoft received a report from Andrea Pierini and Antonio Cocomazzi about Windows's local privilege escalation (LPE) vulnerability. This vulnerability could enable an attacker with limited privileges on a host to gain SYSTEM privileges and read/write any file on the system. Microsoft addressed the LocalPotato vulnerability in the January 2023 patch Tuesday, and a PoC was publi

IFEO Injection attack is a registry-based attack technique that almost guarantees a code execution as a logged-in user.

Windows 11's Secure Boot Defeated by BlackLotus bootkit Malware CVE-2022-21894