Unit 42 Named Top Zero-Day Vulnerability Contributor by Microsoft
Summary: Microsoft recognized Palo Alto Networks' Unit 42 with multiple MAPP Contributing Partners awards, including first place for zero-day vulnerability discovery and third place for Vulnerability Top Contributor, making Unit 42 the only research group to win in two categories. Unit 42 reported 27 zero-day vulnerabilities to Microsoft between July 1, 2018, and June 30, 2019, including a Windows Error Reporting local privilege escalation flaw (CVE-2019-0863) that was exploited in the wild.
Why it matters: Those 27 zero-days, including one attackers were already using against Windows Error Reporting, were found and disclosed by an outside research team before Microsoft could patch them - a reminder that the flaws your estate depends on are often surfaced by third parties on their own timeline, not your vendor's.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Zero-Days & Exploits
- Mentions
- CVE-2019-0863
- Related
- CVE-2019-0863: Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021