Threat Source newsletter (Nov. 14, 2019)
Summary: Cisco Talos' Nov. 14, 2019 Threat Source newsletter recaps a busy Patch Tuesday, including Microsoft's monthly security update and two vulnerabilities Talos discovered, plus a remote code execution flaw in some Intel graphics drivers and another in Exhibitor's web user interface. Talos also describes a wave of actors using living-off-the-land binaries to evade detection and walks through how to detect these "LoLBins" and campaigns where they appeared in the wild.
Why it matters: Attackers using binaries already present on the system are harder to flag than dropped malware, and Talos pairs that with a disclosed remote code execution flaw in Intel graphics drivers and another in Exhibitor's web UI - two more entry points sitting in the same week's patch queue.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026