Threat Source newsletter (Aug. 12, 2021)
Summary: Cisco Talos reported that Microsoft's August 2021 Patch Tuesday disclosed 44 vulnerabilities, the fewest in more than two years, nine of them critical, with the most serious being CVE-2021-26424, a remote code execution flaw in the Windows TCP/IP implementation that an attacker could trigger from a Hyper-V guest by sending a crafted packet to the host. Talos also published details on the ServHelper RAT run by threat actor Group TA505, which it says is stealing credit card data and other sensitive information, and reported multiple vulnerabilities in AT&T Labs' Xmill XML compression utility, which AT&T no longer supports and will not patch.
Key Takeaway: CVE-2021-26424 means a malicious program running in a virtual machine could compromise the host it sits on, collapsing the boundary many teams treat as a containment layer. And Xmill, released in 1999 and still embedded in products such as Schneider Electric's EcoStruxure Control Expert, will never get a vendor patch from AT&T.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2021-26424
- Related
- Microsoft Patch Tuesday, August 2021 Edition Cyber Risks ·Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026