MD

Citrix | MS Exchange, Skype, SCCM, SCOM, Active Directory | Security | Linux

[Per Larsen #MSFT #MSIntune #MSSecurity @PerLarsen1975]

Time to patch your #NotePad++ again #StayCurrent
https://t.co/s0lCmUmwHb

[MD @md_simpson]

@msxfaq Das hat aber auch so seine Nebenwirkungen. Bilder in Mails per owa. Aber was soll’s.

[MD @md_simpson]

#ebay is down.

[Nicolas Krassas @Dinosn]

Qilin Ransomware allegedly breached chemical manufacturer giant Dow Inc https://t.co/xu9fe9fsQI

[HACKLIDO @hacklido]

Cybercrime: Iran-Linked "Handala" Group Cripples Medical Giant Stryker https://t.co/c43S4HHfst

[MD @md_simpson]

#hotmail #s775 Microsoft has been blocking e mails to MS freemailer like Hotmail… , allegedly due to IP reputation with error s775. Some educational institutions are affected.

[Günter Born @etguenni]

Mail delivery issues at Microsoft (hotmail, outlook, live)

https://t.co/MHOHkugdZz

[DirectoryRanger @DirectoryRanger]

iDRAC to Domain Admin
https://t.co/WRrJkcbZRS

[Cyber Security News @The_Cyber_News]

⚠️ Splunk Enterprise for Windows Vulnerability Let Attackers Gain SYSTEM Access

Source: https://t.co/h6juGcG2ah

Splunk has disclosed a high-severity vulnerability in Splunk Enterprise for Windows that allows a low-privileged local user to escalate their privileges to SYSTEM level through a DLL search-order hijacking attack.

The vulnerability exists in Splunk Enterprise for Windows versions below 10.2.0, 10.0.3, 9.4.8, 9.3.9, and 9.2.12.

An attacker who holds low-privileged access to a Windows system running Splunk Enterprise can exploit this flaw by creating a directory on the system drive where Splunk is installed and placing a malicious DLL inside it.

When the Splunk Enterprise service restarts, the application may inadvertently load that rogue DLL due to its insecure library search order.

Since the service runs with SYSTEM-level privileges, the injected code inherits those elevated rights, effectively granting the attacker full control over the host machine.

#cybersecuritynews

[MD @md_simpson]

#DigitaleSouveränität :Otto verhandelt mit Stackit - https://t.co/fLKC72ieVV https://t.co/EA7LvJPFsQ

[MD @md_simpson]

Operation Souveränität: Bundestag plant Befreiungsschlag von Microsoft & Co. | heise online https://t.co/sexGTE6rhz

[Haifei Li @HaifeiLi]

I believe the core vulnerability here is the "loading of the (outdated) IE engine via OLE object" attack vector. For that reason, Microsoft's decision to patch/mitigate it by completely blocking this specific object ({EAB22AC3-30C1-11CF-A7EB-0000C05BAE0B}) was the right move.

That being said, as also discussed with @wdormann, I think this new zero-day is a variant of @yorickkoster's technique published in 2018 (https://t.co/WnqgNkoqvy). It is based on that technique, but this 0day is more dangerous (an improved version) because it doesn't require the victim to double-click on the object - instead, it activates automatically when the document is opened via a RTF format.

#CVE-2026-21509

https://t.co/5QPRcWnras

[MD @md_simpson]

Die PubMed-Falle: Deutschlands gefährlicher Datenpoker in der Medizin | heise online https://t.co/esyl5Z3Kxy

[MD @md_simpson]

Frankreich sagt Microsoft Teams und Zoom den Kampf an | iX Magazin https://t.co/S5T3n2Vc0O

[MD @md_simpson]

GitHub - HunxByts/GhostTrack: Useful tool to track location or mobile number https://t.co/bpsSpQ9hGv

[MD @md_simpson]

Cyberangriff auf Staatliche Kunstsammlungen in Dresden - starke Einschränkungen für Besucher https://t.co/xxy6ZxEGCI

[ZoomEye @zoomeye_team]

🚨 CVE-2025-60021 (CVSS 9.8): Apache bRPC: Remote command injection vulnerability in heap builtin service

Apache bRPC is vulnerable to remote command injection. Untrusted input in the heap profiler's extra_options parameter allows attackers to execute arbitrary commands via the /pprof/heap service on all versions prior to 1.15.0.

Search by vul.cve Filter 👉 vul.cve="CVE-2025-60021"
ZoomEye Dork 👉 app="Apache bRPC"
4k+ exposed instances.

ZoomEye Link: https://t.co/ACXzkHTd5T

Refer: https://t.co/Kf7imQ1Hol

#ZoomEye #NetSec #OSINT #CyberSecurity #bRPC #Vulnerability #Apache #SecurityUpdate

[BleepingComputer @BleepinComputer]

Microsoft has confirmed a known issue that prevents recipients from opening encrypted emails in classic Outlook.
https://t.co/evBZ30OQyM

[MD @md_simpson]

IT-Probleme: Städtisches Klinikum Dessau schließt kurzzeitig Notaufnahme | https://t.co/BKmQIkGuX0 https://t.co/J1rne46XsC

[StatusIsDown @status_is_down]

Cloudflare is reportedly down for hundreds of users. Are you one of them? #cloudflare #cloudflaredown https://t.co/yt4GXQ5mLs