Threat Source newsletter for July 16, 2020
Summary: Cisco Talos reported that Microsoft's July Patch Tuesday disclosed more than 120 vulnerabilities across its products, including six critical flaws in the RemoteFX feature of the Windows Hyper-V engine that could allow remote code execution and affect some Intel and AMD drivers. Talos also noted a U.S. Department of Homeland Security report naming the NetSupport remote access tool as the most-detected malware family by its intrusion prevention system, ahead of the Kovter trojan and the XMRig cryptocurrency miner.
What's compelling: Six of the patched flaws sit in Hyper-V's RemoteFX feature and reach into Intel and AMD drivers, so the exposure crosses from Microsoft's software into the hardware layer many teams treat as out of scope. Separately, DHS's own sensors rank a legitimate remote administration tool, NetSupport, as their top malware detection - the kind of tool that blends into normal admin traffic.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026