19 November 2023

Exploit for CrushFTP RCE chain released, patch now

• Public release of a critical remote code execution exploit for CrushFTP, posing severe risks like unauthorized access, code execution, and password exposure.

8Base Group Deploying New Phobos Ransomware Variant via SmokeLoader

• The 8Base ransomware group utilizes a Phobos variant via SmokeLoader to conduct financially motivated attacks, posing significant risks to organizations' data security.

Google shares plans for blocking third-party cookies in Chrome

• Google's announcement to phase out third-party cookies in Chrome as part of its Privacy Sandbox initiative, enhancing user privacy by limiting tracking capabilities.

Windows 10 to let admins control how optional updates are deployed

• Microsoft introduces a policy enabling administrators to manage the deployment of optional updates on Windows 10 enterprise endpoints, offering enhanced control over update processes.