Mr. Cyber – Medium

Apr 23

DHCPv6 DNS Poisoning Remediation

Technical Details DHCPv6 DNS poisoning allows an attacker to control the DNS server address of a victim, effectively poisoning the service so that the victim will communicate with an attacker-controlled system. In this type of attack, the attacker spoofs a DHCP server response, including a DNS configuration. MITRE Technique Alignment…

Dhcp

3 min read

Apr 15

Chrome Exploits — zero-day remediation

1. Update Google Chrome Check pending updates On your computer, open Chrome.

Chrome

3 min read

Apr 2

Spring4Shell Initial Remediation

Overview On March 30, A new zero-day critical vulnerability was leaked in another open-source software library. The vulnerability affects Spring Framework which is running over Java Development Kit 9.0 (JDK9.0) and above. Spring Core on JDK9+ is vulnerable to remote code execution due to a bypass for CVE-2010–1622. …

Spring

3 min read

Jan 9

Proxy Spoofing Remediation

Technical details: By responding to broadcast messages, an attacker can spoof proxy setting to become a man-in-the-middle MITRE Technique Alignment (1) Link: T1557 WPAD Proxy Spoofing The Web Proxy Auto-Discovery (WPAD) protocol is a method used by clients to locate the URL of a configuration file using DHCP and/or DNS discovery methods. Once…

Proxy Server

4 min read

Oct 26, 2021

PrintNightmare — Windows Print Spooler (CVE-2021–34527) Remediation (How to fix)

Technical Details A remote code execution vulnerability exists wherein the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploits this vulnerability can run arbitrary code with SYSTEM privileges and could then install programs, view, change, or delete data or create new accounts with full user privileges. MITRE Technique Alignment (2) T1210

Windows

3 min read