advisories Archive - Windows Management Experts https://windowsmanagementexperts.com/advisory/ Tue, 14 Apr 2026 15:50:17 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://windowsmanagementexperts.com/wp-content/uploads/2022/10/cropped-WME_Final-PNG-e1666541503477-32x32.png advisories Archive - Windows Management Experts https://windowsmanagementexperts.com/advisory/ 32 32 WME Security Briefing 04 August 2025 https://windowsmanagementexperts.com/advisory/wme-security-briefing-04-august-2025/ https://windowsmanagementexperts.com/advisory/wme-security-briefing-04-august-2025/#respond Mon, 04 Aug 2025 15:45:19 +0000 https://windowsmanagementexperts.com/?p=29825 1. NightEagle APT Exploits Zero-Day in Microsoft Exchange to Target Chinese Defense and Tech Sectors Overview A new advanced persistent threat group, dubbed NightEagle (also called APT-Q-95), is being linked to a string of attacks. These attacks are targeting Microsoft Exchange Servers. The group is said to have been active since 2023 and recently came […]

The post WME Security Briefing 04 August 2025 appeared first on Windows Management Experts.

]]> https://windowsmanagementexperts.com/advisory/wme-security-briefing-04-august-2025/feed/ 0 WME Security Briefing 09 June 2025 https://windowsmanagementexperts.com/advisory/wme-security-briefing-09-june-2025/ https://windowsmanagementexperts.com/advisory/wme-security-briefing-09-june-2025/#respond Mon, 09 Jun 2025 19:18:39 +0000 https://windowsmanagementexperts.com/?p=29442 1. Hackers Exploit TikTok Videos to Spread Vidar and StealC Malware Via ClickFix Technique Overview Cybercriminals just recently adapted the ClickFix social engineering technique. It’s a technique that helps with  spreading malwares, Vidar and StealC, as it uses TikTok videos for its malicious working. Its method relies on tricking users into executing malicious PowerShell commands. […]

The post WME Security Briefing 09 June 2025 appeared first on Windows Management Experts.

]]> https://windowsmanagementexperts.com/advisory/wme-security-briefing-09-june-2025/feed/ 0 WME Security Briefing 13 February 2025 https://windowsmanagementexperts.com/advisory/wme-security-briefing-13-feb-2025/ https://windowsmanagementexperts.com/advisory/wme-security-briefing-13-feb-2025/#respond Thu, 13 Feb 2025 19:44:10 +0000 https://windowsmanagementexperts.com/?p=28327 DragonRank Targets IIS Servers with BadIIS Malware for SEO Fraud and Gambling Redirects Overview Reports assert there has been a brand new wave of cyberattacks attacking Asian Internet Information Services (IIS). The attackers are suspected to be Chinese-speaking as they have been identified with the name, DragonRank. They are using BadIIS malware to manipulate SEO […]

The post WME Security Briefing 13 February 2025 appeared first on Windows Management Experts.

]]> https://windowsmanagementexperts.com/advisory/wme-security-briefing-13-feb-2025/feed/ 0 WME Security Briefing 06 January 2025 https://windowsmanagementexperts.com/advisory/wme-security-briefing-06-jan-2025/ https://windowsmanagementexperts.com/advisory/wme-security-briefing-06-jan-2025/#respond Mon, 06 Jan 2025 19:34:26 +0000 https://windowsmanagementexperts.com/?p=28137 Evolving Strategies for Managing Expanding Attack Surfaces Overview As remote work gained incredible traction and an already-existing digital transformation accelerated, the domain of attack surface management, as previously understood, has changed profoundly. Modern infrastructures are normally spread over multiple endpoints, cloud services and third-party applications, which makes it difficult to get a sense of what is going […]

The post WME Security Briefing 06 January 2025 appeared first on Windows Management Experts.

]]> https://windowsmanagementexperts.com/advisory/wme-security-briefing-06-jan-2025/feed/ 0 WME Security Briefing 28 November 2024 https://windowsmanagementexperts.com/advisory/wme-security-briefing-28-nov-2024/ https://windowsmanagementexperts.com/advisory/wme-security-briefing-28-nov-2024/#respond Thu, 28 Nov 2024 13:14:29 +0000 https://windowsmanagementexperts.com/?p=27875 Palo Alto Networks Warns of Potential RCE Vulnerability in PAN-OS Management Interface Overview Palo Alto Network has disclosed a potential RCE vulnerability in the PAN-OS management interface. Information is still scarce on this particular vulnerability, but we are monitoring it closely to see if someone demonstrates otherwise. PAN-OS is a core part of network management […]

The post WME Security Briefing 28 November 2024 appeared first on Windows Management Experts.

]]> https://windowsmanagementexperts.com/advisory/wme-security-briefing-28-nov-2024/feed/ 0 WME Security Briefing 21 November 2024 https://windowsmanagementexperts.com/advisory/wme-security-briefing-21-nov-2024/ https://windowsmanagementexperts.com/advisory/wme-security-briefing-21-nov-2024/#respond Thu, 21 Nov 2024 16:42:12 +0000 https://windowsmanagementexperts.com/?p=27840 New Android Malware ‘ToxicPanda’ Conducts Fraudulent Money Transfers Overview In the latest news, this Android banking malware, dubbed ToxicPanda, has been discovered, targeting 1,500+ Android devices. The malware is designed to assist with a type of fraud scheme known as on-device fraud (ODF), in which the malware effectively hijacks user accounts to carry out banking transactions without needing […]

The post WME Security Briefing 21 November 2024 appeared first on Windows Management Experts.

]]> https://windowsmanagementexperts.com/advisory/wme-security-briefing-21-nov-2024/feed/ 0 WME Security Briefing 18 November 2024 https://windowsmanagementexperts.com/advisory/wme-security-briefing-18-nov-2024/ https://windowsmanagementexperts.com/advisory/wme-security-briefing-18-nov-2024/#respond Mon, 18 Nov 2024 14:25:02 +0000 https://windowsmanagementexperts.com/?p=27822 New LightSpy Spyware Variant Poses Increased Threat to iPhone Users Overview Recent analysis reveals an enhanced version of the iOS spyware, LightSpy. It targets iPhones with advanced surveillance features and destructive capabilities. Basically, detected for the first time in 2020, LightSpy is a sophisticated spyware leveraging a modular structure to harvest a wide array of sensitive data […]

The post WME Security Briefing 18 November 2024 appeared first on Windows Management Experts.

]]> https://windowsmanagementexperts.com/advisory/wme-security-briefing-18-nov-2024/feed/ 0 WME Security Briefing 08 November 2024 https://windowsmanagementexperts.com/advisory/wme-security-briefing-08-nov-2024/ https://windowsmanagementexperts.com/advisory/wme-security-briefing-08-nov-2024/#respond Fri, 08 Nov 2024 17:05:33 +0000 https://windowsmanagementexperts.com/?p=27747 Evasive Panda Exploits CloudScout Toolset to Hijack Cloud Service Sessions in Taiwan Overview A recent cybersecurity report disclosed an advanced cyber espionage campaign conducted by the China-affiliated threat actor, Evasive Panda, deploying a novel malware toolset called CloudScout. The operation targets government and religious organizations in Taiwan, stealing session cookies ultimately to compromise cloud services. The CloudScout toolset operates alongside Evasive […]

The post WME Security Briefing 08 November 2024 appeared first on Windows Management Experts.

]]> https://windowsmanagementexperts.com/advisory/wme-security-briefing-08-nov-2024/feed/ 0 WME Security Briefing 30 October 2024 https://windowsmanagementexperts.com/advisory/wme-security-briefing-30-oct-2024/ https://windowsmanagementexperts.com/advisory/wme-security-briefing-30-oct-2024/#respond Tue, 29 Oct 2024 15:04:00 +0000 https://windowsmanagementexperts.com/?p=27672 Chinese Nation-State Hackers APT41 Target Gambling Industry for Financial Gain Overview The Gambling and Poker industry experienced a sophisticated cyber attack last month, orchestrated by the notorious Chinese nation-state group APT41 ( AKA Brass Typhoon, Earth Baku, Wicked Panda or Winnti). This extended operation, which spanned nearly nine months, was a beachhead to steal information of value […]

The post WME Security Briefing 30 October 2024 appeared first on Windows Management Experts.

]]> https://windowsmanagementexperts.com/advisory/wme-security-briefing-30-oct-2024/feed/ 0 WME Security Briefing 24 October 2024 https://windowsmanagementexperts.com/advisory/wme-security-briefing-24-oct-2024/ Thu, 24 Oct 2024 14:45:09 +0000 https://windowsmanagementexperts.com/?p=27655 Hackers Exploit EDRSilencer to Evade Security Detection Overview Threat actors have been observed abusing the EDRSilencer tool as part of their bypass techniques against endpoint detection and response (EDR) solutions to carry out attacks against targeted organizations successfully. EDRSilencer is an open-source utility created to disable selective EDR processes; by exploiting it, attackers can stealthily operate and […]

The post WME Security Briefing 24 October 2024 appeared first on Windows Management Experts.

]]>