Vulnerability

Ransomware attacks through Remote Access are on rise. Secure your system now!!

Once again ransomware attacks are on the rise and this can leave your systems vulnerable to critical data…

50 Million Facebook Accounts Hacked – Time to act before it’s too late!

The afternoon of September 28th 2018 brought in a wave of shock for 50 million Facebook users, when…

CVE-2018-4990 – Adobe Reader Double Free (Zero Day) vulnerability alert!

The recent zero-day vulnerability CVE-2018-4990 in Adobe Reader enables attackers to perform a Remote Code Execution on targeted…

CVE-2018-8174: Windows VBScript Engine Remote Code Execution Vulnerability – An advisory by Quick Heal Security Labs

The recent zero-day vulnerability in Windows VBScript Engine (CVE-2018-8174), enables attackers to perform a remote code execution on targeted machines….

Chinese, Russian hackers counting on Apache Struts vulnerabilities – a report by Quick Heal Security Labs

Apache Struts is an open-source CMS based on MVC framework for developing Java EE Web Applications. Apache Struts has been widely…

A massive security flaw discovered in Skype. Fix not coming anytime soon.

Quick Heal Security Labs has recently learned about a serious vulnerability in Skype’s update installer – that’s the…

Vulnerabilities found in Broadcom Wi-Fi adapter of Lenovo laptop chipsets

Lenovo recently released an advisory, warning customers about two critical Broadcom vulnerabilities which impact 25 models of its…

An analysis of an MS office document exploiting a zero-day flash player vulnerability (CVE-2018-4878)

Important update! Adobe Systems released a critical security update on 6.02.2017 to fix the vulnerability discussed in this…

Malspam campaigns exploiting recent MS Office vulnerability ‘CVE-2017-11882’ – An Analysis by Quick Heal Security Labs

No wonder malspam campaigns are a major medium to spread malware. Previously, we have written about such campaigns…

An emerging trend of DDE based Office malware – an analysis by Quick Heal Security Labs

For the past few years, we have been seeing macro-based attacks through Object Linking Embedding (OLE)/Microsoft Office files. But, presently, attackers are…