New attack uses MSC files and Windows XSS flaw to breach networks (www.bleepingcomputer.com)
from BrikoX@lemmy.zip to cybersecurity@sh.itjust.works on 25 Jun 2024 01:21
https://lemmy.zip/post/17965507

A novel command execution technique dubbed ‘GrimResource’ uses specially crafted MSC (Microsoft Saved Console) and an unpatched Windows XSS flaw to perform code execution via the Microsoft Management Console.

#cybersecurity