Threat Source newsletter (May 27, 2021)
Summary: Cisco Talos proposed a new threat-actor category called "privateers" for groups that benefit from a nation-state but cannot be directly connected to a government, and published a Vulnerability Spotlight on patched flaws in the Trend Micro Home Network Security Station that could let an attacker manipulate a device managing home network devices. Talos also reported that a researcher released proof-of-concept code for a wormable vulnerability in the Windows HTTP protocol stack, patched in this month's Microsoft security update, which affects WinRM when manually enabled on Windows 10 but is toggled on by default on enterprise Windows Server endpoints.
Bottom line: The WinRM flaw is wormable and on by default on enterprise Windows Server endpoints, giving an adversary that uses it to spread ransomware a fast path across a targeted environment.
Read the original at Cisco Talos ↗
- Topics
- Threat Actors & Nation-State
- Mentions
- CVE-2021-21160
- Related
- Vulnerability Spotlight: Heap-based buffer overflow in Google Chrome could lead to code execution Cyber Risks ·University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026