Threat Intelligence bulletins

Stay tuned to vulnerabilities and advisories from around the globe.

Home / Threat Intelligence bulletins

SECURITY GUIDANCE – PetitPotam NTLM Relay Attack

Published: 27th July 2021 | In: Threat Intelligence & Guidance

PetitPotam is a type of relay attack that exploits the MS-EFSRPC (Encrypting File System Remote Protocol) to cause a machine to perform NTLM authentication to an attacker-controlled machine. Quick Info on how to mitigate your systems against a potential PetitPotam attack.

Learn more

SECURITY GUIDANCE – Unpatched Privilege Escalation vulnerabilities in Windows

Published: 22nd July 2021 | In: Threat Intelligence & Guidance

While investigating Print Spooler service vulnerabilities, researchers have also found an Access Control List (ACL) misconfiguration in some builds of Windows which could let a local user read the registry hive files.

Learn more

SECURITY GUIDANCE – Chrome Browser Vulnerabilities

Published: 19th July 2021 | In: Threat Intelligence & Guidance

Google have released a security update to address a series of critical vulnerabilities in the Chrome Browser. There are reports that some of these are being actively exploited in the wild.

Learn more

SECURITY GUIDANCE – Microsoft Exchange Vulnerability CVE-2021-34473

Published: 14th July 2021 | In: Threat Intelligence & Guidance

A “very critical” vulnerability has been identified within several versions of Microsoft Exchange Server. Quorum Cyber have produced this Quick Info to get you up to speed with what you need to know.

Learn more

SECURITY GUIDANCE – Kaseya Ransomware Attack

Published: 6th July 2021 | In: Threat Intelligence & Guidance

Kaseya, an IT Management software company, became aware that their product was being used as part of a ransomware campaign. Quorum Cyber have produced this Quick Info if you are worried about the impact of their security incident.

Learn more

SECURITY GUIDANCE – Windows Print Spooler Vulnerability

Published: 5th July 2021 | In: Threat Intelligence & Guidance

Microsoft is warning and investigating a remote code execution vulnerability affecting Windows Print Spooler, aka PrintNightmare. Quorum Cyber's Quick Info to get you up to speed with what you need to know.

Learn more