Microsoft’s Patch Tuesday for April released fixes for a couple of critical font-related vulnerabilities, like an earlier disclosed one found in Adobe Type Manager Library (atmfd.dll). It also featured patches for vulnerabilities in Microsoft SharePoint and Windows Components.

The post April Patch Tuesday: Fixes for Font-Related, Microsoft SharePoint, Windows Components Vulnerabilities appeared first on .

We created Trend Micro ELF Hash (telfhash), an open-source clustering algorithm that effectively clusters Linux IoT malware created using ELF files.

The post Grouping Linux IoT Malware Samples With Trend Micro ELF Hash appeared first on .

We encountered an attack that conceals RevCode WebMonitor RAT by abusing Zoom installers.

The post WebMonitor RAT Bundled with Zoom Installer appeared first on .

A new targeted attack has infected several organizations in Taiwan with a new ransomware family, which we have dubbed ColdLock. This attack is potentially destructive as the ransomware appears to target databases and email servers for encryption.

The post Targeted Ransomware Attack Hits Taiwanese Organizations appeared first on .

Companies as well as individual entrepreneurs looking for oxygen or nitrogen seek out an oxygen nitrogen plant in India. India is a developing country nourished with high quality raw materials. In addition, qualified workforce is also...

Over the years, PHP development has turned out a lot of...

I was literally confused to deployment testing services and testing scenarios, but thank to my one friend who advised me to use the computaris “top testing suite”. It was the...

Startup companies today are using various innovative approaches to test the caliber of an employee during the interview process. Along with number of degrees, a lot of other skills are expected from the candidate to get placed in a startup firm.

Nasscom lists of start-ups for Emerge 50 is out and the majority of the startups that are expected to whip business scene into shape are B2B. These startups serve overseas clients on regular basis

Zomato, online restaurant discovery and delivery firm is now planning to invest in new businesses such as cloud kitchens. In the past 12 months, the company has managed to boost its revenue and cut down the burn rate.

Hamsa Nandini has donned black swimsuit and the photos of her new look have gone viral.

Check out the high-quality photos of Vijay and Nayanthara's upcoming movie Bigil.

Rocking Star Yash and Radhika Pandit's hit movie Santhu Straight Forward is being dubbed into Tamil with the title Sooryavamsi.

Rakul Preet Singh has taken a break from her busy schedule to spend time with her family.

Here are the pictures of Namitha from her latest photoshoot.

Here are the movie still of Karthi's upcoming Tamil movie Kaithi.

Rajinikanth is on a spiritual trip with his daughter Aishwarya Dhanush and his friends.

Here are the movie stills of Dhruv Vikram in his upcoming Tamil movie Adithya Varma.

Dhruv Vikram was at Mount Carmel College in Bengaluru on Saturday, 16 November.

Nayanthara has celebrated her 35th birthday with her boyfriend Vignesh Shivan in Miami.

Rajinikanth and Amitabh Bachchan inaugurated the 50th International Film Festival of India (IFFI) in Goa on Wednesday, 20 November.

The South Indian stars of 80s had their 10th reunion on Sunday, 24 November. The photos of their meeting have now gone viral.

Sunny Leone is in Dubai on a vacation with her husband Daniel Weber.

Raai Laxmi, who was earlier called as Lakshmi Rai, raises the temperature in white monokini.

Actress Amyra Dastur has sported animal print bodysuit in her new photoshoot.

Here are a pictures of Aditi Rao in two piece bikini.

Deepika Padukone plays the role of an acid attack survivor Laxmi Agarwal in Chhapaak.

Kareena Kapoor has sported a trendy pantsuit by Peter Do for the promotions of her upcoming movie Good Newz.

A couple of cozy pictures of Tamil actor Vishnu Vishal and badminton player Gutta Jwala have now gone viral.

Ajay Devgn has joined the shooting of SS Rajamouli's upcoming movie RRR.

Pictures of Bigg Boss Tamil 3 contestant Sakshi Agarwal's photoshoot are here.

Namitha, who once dominated the mass movies with her hot looks, has retained her glamarous side even today. Even after marriage, the actress creates a lot of noise on social media sites with her colourful oufits. Check out some of her recent pictures.

Every individual born in the country has the right to choose his religion. A person might have followed a religion by birth, but nothing can stop the person from embracing a new religion.

Vignesh Shivan is teaming up with his girlfriend Nayanthara again. He is directing her next film Kaathuvaakula Rendu Kaadhal (KRK), which also has Vijay Sethupathi and Samantha.

Nithin has got engaged to his girlfriend Shalini in Hyderabad in the presence of his family members and friends.

Coronavirus has spread in more than 150 countries all over the world now. WHO (World Health Organisation) has officially called the virus pandemic and issued various guidelines to take in precaution against its spread. The virus originated from Wuhan, China and has now 2,03,843 cases around the globe. The death rate has increased, to 8,321 till now due to coronavirus infection. On the contrary; 82,866 people have recovered after testing positive. Thus giving us hope to fight back this deadly virus. Currently, India has 151 cases of coronavirus and 3 deaths so far in Maharashtra, Karnataka & Delhi. Maharashtra & Kerala are on the top list of having positive patients. PRECAUTIONS: WASH YOUR HANDS FREQUENTLY.

Sanjay Dutt and Ameesha Patel's relationship had strained in 2012 over an unforgetable incident. The former was not happy with the way the latter had dressed herself for the sangeet ceremony of David Dhawan's son Rohit and his concern had created a controversy.

Microsoft addresses vulnerabilities in its July security bulletin. Trend Micro Deep Security covers the following:

CVE-2019-1001 - Scripting Engine Memory Corruption Vulnerability
Risk Rating: Critical

This memory corruption vulnerability exists in the improper handling of objects in memory by the scripting engine in Microsoft browsers. Attackers looking to exploit this vulnerability must find a way to convince a user to visit a specially crafted website that contains an exploit to this vulnerability.



CVE-2019-1004 - Scripting Engine Memory Corruption Vulnerability
Risk Rating: Critical

This memory corruption vulnerability exists in the improper handling of objects in memory by the scripting engine in Microsoft browsers. Attackers looking to exploit this vulnerability must find a way to convince a user to visit a specially crafted website that contains an exploit to this vulnerability.



CVE-2019-1062 - Chakra Scripting Engine Memory Corruption Vulnerability
Risk Rating: Critical

This memory corruption vulnerability exists in the handling of objects in memory in the Chakra scripting engine of Microsoft Edge. Attackers looking to exploit this vulnerability may host a specially crafted website that contains an exploit to this vulnerability.



CVE-2019-1063 - Internet Explorer Memory Corruption Vulnerability
Risk Rating: Critical

This memory corruption vulnerability exists in the handling of objects in memory by Internet Explorer. Attackers looking to exploit this vulnerability may host a specially crafted website that contains an exploit to this vulnerability.



CVE-2019-1092 - Chakra Scripting Engine Memory Corruption Vulnerability
Risk Rating: Critical

This memory corruption vulnerability exists in the handling of objects in memory in the Chakra scripting engine of Microsoft Edge. Attackers looking to exploit this vulnerability may host a specially crafted website that contains an exploit to this vulnerability.



CVE-2019-1103 - Chakra Scripting Engine Memory Corruption Vulnerability
Risk Rating: Critical

This memory corruption vulnerability exists in the improper handling of objects in memory by the Chakra scripting engine in Microsoft Edge. Attackers looking to exploit this vulnerability may create a specially crafted webpage that contains an exploit to this vulnerability.



CVE-2019-1104 - Microsoft Browser Memory Corruption Vulnerability
Risk Rating: Critical

This memory corruption vulnerability exists in the improper handling of objects in memory by Microsoft browsers. Attackers looking to exploit this vulnerability may create a specially crafted webpage that contains an exploit to this vulnerability.



CVE-2019-1106 - Chakra Scripting Engine Memory Corruption Vulnerability
Risk Rating: Critical

This memory corruption vulnerability exists in the handling of objects in memory by the Chakra scripting engine in Microsoft Edge. Attackers looking to exploit this vulnerability may gain the same user rights as the currently logged on user.



CVE-2019-1107 - Chakra Scripting Engine Memory Corruption Vulnerability
Risk Rating: Critical

This memory corruption vulnerability exists in the handling of objects in memory by the Chakra scripting engine in Microsoft Edge. Attackers looking to exploit this vulnerability may gain the same user rights as the currently logged on user.



CVE-2019-1112 - Microsoft Excel Information Disclosure Vulnerability
Risk Rating: Important

This information disclosure vulnerability exists in the disclosure of memory contents by Microsoft Excel. Attackers looking to exploit this vulnerability may host a specially crafted file that contains an exploit to this vulnerability.

Microsoft addresses vulnerabilities in its August security bulletin. Trend Micro Deep Security covers the following:

CVE-2019-1196 - Chakra Scripting Engine Memory Corruption Vulnerability
Risk Rating: Critical

This remote code execution vulnerability exists in the improper handling of objects in memory by Microsoft Edge. Attackers looking to exploit this vulnerability must find a way to convince a user to visit a specially crafted website that contains an exploit to this vulnerability.



CVE-2019-1139 - Chakra Scripting Engine Memory Corruption Vulnerability
Risk Rating: Critical

This remote code execution vulnerability exists in the improper handling of objects in memory by Microsoft Edge. Attackers looking to exploit this vulnerability must find a way to convince a user to visit a specially crafted website that contains an exploit to this vulnerability.



CVE-2019-1140 - Chakra Scripting Engine Memory Corruption Vulnerability
Risk Rating: Critical

This remote code execution vulnerability exists in the improper handling of objects in memory by the Chakra scripting engine in Microsoft Edge. Attackers looking to exploit this vulnerability must find a way to convince a user to visit a specially crafted website that contains an exploit to this vulnerability.



CVE-2019-1141 - Chakra Scripting Engine Memory Corruption Vulnerability
Risk Rating: Critical

This remote code execution vulnerability exists in the improper handling of objects in memory by the Chakra scripting engine in Microsoft Edge. Attackers looking to exploit this vulnerability must find a way to convince a user to visit a specially crafted website that contains an exploit to this vulnerability.



CVE-2019-1195 - Chakra Scripting Engine Memory Corruption Vulnerability
Risk Rating: Critical

This remote code execution vulnerability exists in the improper handling of objects in memory by the Chakra scripting engine in Microsoft Edge. Attackers looking to exploit this vulnerability must find a way to convince a user to visit a specially crafted website that contains an exploit to this vulnerability.



CVE-2019-1197 - Chakra Scripting Engine Memory Corruption Vulnerability
Risk Rating: Critical

This remote code execution vulnerability exists in the improper handling of objects in memory by the Chakra scripting engine in Microsoft Edge. Attackers looking to exploit this vulnerability must find a way to convince a user to visit a specially crafted website that contains an exploit to this vulnerability.



CVE-2019-1201 - Microsoft Word Remote Code Execution Vulnerability
Risk Rating: Critical

This remote code execution vulnerability exists in the improper handling of objects in memory by Microsoft Word. Attackers looking to exploit this vulnerability may create a specially crafted file that contains an exploit to this vulnerability.

Microsoft addresses several vulnerabilities in its September security bulletin. Trend Micro Deep Security covers the following:

CVE-2019-1257 - Microsoft SharePoint Remote Code Execution Vulnerability
Risk Rating: Critical

This remote code execution vulnerability exists in the failure of Microsoft SharePoint to check an application package's source markup. Attackers looking to exploit this vulnerability must find a way to convince a user to open a malicious SharePoint application package.



CVE-2019-1295 - Microsoft SharePoint Remote Code Execution Vulnerability
Risk Rating: Critical

This remote code execution vulnerability exists in the improper protection of data input in Microsoft SharePoint APIs. Attackers looking to exploit this vulnerability must find a way for a vulnerable Microsoft SharePoint version to input data in a susceptible API.



CVE-2019-1296 - Microsoft SharePoint Remote Code Execution Vulnerability
Risk Rating: Critical

This remote code execution vulnerability exists in the improper protection of data input in Microsoft SharePoint APIs. Attackers looking to exploit this vulnerability must find a way for a vulnerable Microsoft SharePoint version to input data in a susceptible API.

Microsoft addresses several vulnerabilities in its October security bulletin. Trend Micro Deep Security covers the following:

CVE-2019-1335 - Chakra Scripting Engine Memory Corruption Vulnerability
Risk Rating: Critical

This remote code execution vulnerability exists in Microsoft Edge's Chakra scripting engine in respect to handling objects in memory. Attackers looking to exploit this vulnerability must find a way to convince a user to access a malicious website where the exploit is hosted.



CVE-2019-1364 - Win32k Elevation of Privilege Vulnerability
Risk Rating: Important

This elevation of privilege vulnerability exists in the improper handling of objects in memory by the Windows kernel-mode driver. Attackers looking to exploit this vulnerability must find a way to be logged on to the vulnerable system.



CVE-2019-1060 - MS XML Remote Code Execution Vulnerability
Risk Rating: Critical

This remote code execution vulnerability exists in the improper parsing of user input by the Microsoft XML Core Services MSXML. Attackers looking to exploit this vulnerability must find a way for a user to access a website using Internet Explorer.



CVE-2019-1238 - VBScript Remote Code Execution Vulnerability
Risk Rating: Critical

This remote code execution vulnerability exists in the improper handling of objects in memory by the VBScript engine. Attackers looking to exploit this vulnerability must find a way for a user to access a website where the exploit is hosted.



CVE-2019-1239 - VBScript Remote Code Execution Vulnerability
Risk Rating: Critical

This remote code execution vulnerability exists in the improper handling of objects in memory by the VBScript engine. Attackers looking to exploit this vulnerability must find a way for a user to access a website where the exploit is hosted.



CVE-2019-1307 - Chakra Scripting Engine Memory Corruption Vulnerability
Risk Rating: Critical

This remote code execution vulnerability exists in the improper handling of objects in memory by the Chakra scripting engine in Microsoft Edge. Attackers looking to exploit this vulnerability must find a way for a user to access a website where the exploit is hosted.



CVE-2019-1308 - Chakra Scripting Engine Memory Corruption Vulnerability
Risk Rating: Critical

This remote code execution vulnerability exists in the improper handling of objects in memory by the Chakra scripting engine in Microsoft Edge. Attackers looking to exploit this vulnerability must find a way for a user to access a website where the exploit is hosted.



CVE-2019-1366 - Chakra Scripting Engine Memory Corruption Vulnerability
Risk Rating: Critical

This remote code execution vulnerability exists in the improper handling of objects in memory by the Chakra scripting engine in Microsoft Edge. Attackers looking to exploit this vulnerability must find a way for a user to access a website where the exploit is hosted.



CVE-2019-1361 - Microsoft Graphics Components Information Disclosure Vulnerability
Risk Rating: Important

This information disclosure vulnerability exists in the improper handling of objects in memory by the Microsoft Graphics Components. Attackers looking to exploit this vulnerability must find a way for a user to open a specially crafted file.

Microsoft addresses several vulnerabilities in its November security bulletin. Trend Micro Deep Security covers the following:

CVE-2019-1390 - BScript Remote Code Execution Vulnerability
Risk Rating: Critical

This remote code execution vulnerability exists in the VBScript engine in respect to handling objects in memory. Attackers looking to exploit this vulnerability must find a way to convince a user to access a malicious website where the exploit is hosted.



CVE-2019-1429 - Scripting Engine Memory Corruption Vulnerability
Risk Rating: Critical

This elevation of privilege vulnerability exists in the improper handling of objects in memory by the scripting engine in Internet Explorer. Attackers looking to exploit this vulnerability must find a way to convince a user to access a malicious website where the exploit is hosted.



CVE-2019-1359 - Jet Database Engine Remote Code Execution Vulnerability
Risk Rating: Critical

This remote code execution vulnerability exists in the improper handling of objects by the Windows Jet Database Engine. Attackers looking to exploit this vulnerability must find a way for a user to open a specially crafted file.



CVE-2019-1358 - Jet Database Engine Remote Code Execution Vulnerability
Risk Rating: Critical

This remote code execution vulnerability exists in the improper handling of objects by the Windows Jet Database Engine. Attackers looking to exploit this vulnerability must find a way for a user to open a specially crafted file.



CVE-2019-1311 - Windows Imaging API Remote Code Execution Vulnerability
Risk Rating: Important

This remote code execution vulnerability exists in the improper handling of objects in memory by the Windows Imaging API. Attackers looking to exploit this vulnerability must find a way for a user to execute a specially crafted .WIM file.

Microsoft addresses several vulnerabilities in its December security bulletin. Trend Micro Deep Security covers the following:

CVE-2019-0617 - Jet Database Engine Remote Code Execution Vulnerability
Risk Rating: Important

This remote code execution vulnerability exists in the Windows Jet Database engine in respect to handling objects in memory. Attackers looking to exploit this vulnerability must find a way to convince a user to open a specially crafted file.



CVE-2019-1485 - VBScript Remote Code Execution Vulnerability
Risk Rating: Important

This remote code execution vulnerability exists in the improper handling of objects in memory by VBScript engine. Attackers looking to exploit this vulnerability must find a way to convince a user to access a malicious website where the exploit is hosted.



CVE-2019-0853 - GDI Remote Code Execution Vulnerability
Risk Rating: Critical

This remote code execution vulnerability exists in the improper handling of objects by the Windows Graphics Device Interface (GDI). Attackers looking to exploit this vulnerability must find a way for a user to open a website that contains the exploit, or to open a specially crafted file via file-sharing.



CVE-2019-1458 - Win32k Elevation of Privilege Vulnerability
Risk Rating: Important

This elevation of privilege vulnerability exists in the improper handling of objects by the the Win32k component in Windows. Attackers looking to exploit this vulnerability must find a way for a user to open a specially crafted application.



CVE-2019-1439 - Windows GDI Information Disclosure Vulnerability
Risk Rating: Important

This information disclosure vulnerability exists in the improper handling of objects in memory by the Windows GDI component. Attackers looking to exploit this vulnerability must find a way for a user to execute a specially crafted document.



CVE-2019-1117 - DirectWrite Remote Code Execution Vulnerability
Risk Rating: Important

This remote code execution vulnerability exists in the improper handling of objects in memory by the DirectWrite. Attackers looking to exploit this vulnerability must find a way for a user to execute a specially crafted document.



CVE-2019-1118 - DirectWrite Remote Code Execution Vulnerability
Risk Rating: Important

This remote code execution vulnerability exists in the improper handling of objects in memory by the DirectWrite. Attackers looking to exploit this vulnerability must find a way for a user to execute a specially crafted document.



CVE-2019-1119 - DirectWrite Remote Code Execution Vulnerability
Risk Rating: Important

This remote code execution vulnerability exists in the improper handling of objects in memory by the DirectWrite. Attackers looking to exploit this vulnerability must find a way for a user to execute a specially crafted document.



CVE-2019-0959 - Windows Common Log File System Driver Elevation of Privilege Vulnerability
Risk Rating: Important

This elevation of privilege vulnerability exists in the improper handling of objects in memory by the Windows Common Log File System. Attackers looking to exploit this vulnerability must find a way for a user to execute a specially crafted application.

Microsoft addresses several vulnerabilities in its January security bulletin. Trend Micro Deep Security covers the following:

CVE-2020-0609 - Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability
Risk Rating: Critical

This remote code execution, pre-authentication vulnerability exists in the Windows Remote Desktop Gateway (RD Gateway) and requires no user interaction. Attackers looking to exploit this vulnerability could send a specially crafted request via RDP.



CVE-2020-0610 - Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability
Risk Rating: Critical

This remote code execution, pre-authentication vulnerability exists in the Windows Remote Desktop Gateway (RD Gateway) and requires no user interaction. Attackers looking to exploit this vulnerability could send a specially crafted request via RDP.



CVE-2020-0652 - Microsoft Office Memory Corruption Vulnerability
Risk Rating: Important

This remote code execution vulnerability exists in the improper handling of objects by Microsoft Office. Attackers looking to exploit this vulnerability must find a way for a user to open a website that contains the exploit, or to open a specially crafted file.



CVE-2020-0601 - Windows CryptoAPI Spoofing Vulnerability
Risk Rating: Important

This spoofing vulnerability exists in the validation of Elliptic Curve Cryptography (ECC) certificates by the the Windows CryptoAPI (crypt32.dll). A successful exploitation of this vulnerability could allow man-in-the-middle (MiTM) attacks.

Microsoft addresses several vulnerabilities in its February security bulletin. Trend Micro Deep Security covers the following:

CVE-2020-0674 - Scripting Engine Memory Corruption Vulnerability
Risk Rating: Critical

This remote code execution vulnerability exists in the scripting engine of Internet explorer in the way it handles objects in memory. Attackers looking to exploit this vulnerability could host a specially crafted website that contains an exploit.



CVE-2020-0681 - Remote Desktop Client Remote Code Execution Vulnerability
Risk Rating: Critical

This remote code execution vulnerability exists in the Windows Remote Desktop Client. It exists when a user connects to a malicious server. Attackers looking to exploit this vulnerability could find ways to convince a user of a vulnerable machine to connect to a malicious server.



CVE-2020-0692 - Microsoft Exchange Server Elevation of Privilege Vulnerability
Risk Rating: Important

This elevation of privilege vulnerability, that requires an enabled Exchange Web Services (EWS), exists in the Microsoft Exchange Server. Attackers looking to exploit this vulnerability must find a way to change Security Access Token parameters and forward that to the vulnerable Microsoft Exchange Server.

He has in-depth knowledge of social media, audience targeting, building mobile & web applications using the latest technology.

Shehnaaz Gill's father Santokh Singh Sukh took to Instagram to share the news with fans and asked his well-wishers to pray for his mother's speedy recovery.

The video is of actress Rakul Preet Singh, who had stepped out to buy medicines and essentials on May 5 made headlines for all the wrong reasons with netizens misidentifying Rakul as Deepika Padukone. Here's the full story and truth behind it all.

In an exclusive conversation with International Business Times India, Manoj Bajpayee spoke about his role in Mrs Serial Killer, his experience of working with Shirish Kundar and Jacqueline Fernandez and further went on to speak about the rise of OTT platforms and also spills the beans on how he is spending his lockdown time with family amidst nature.

Shilpa Shetty shares Peanut Butter Choco-Oat Cookies recipe. Check out how to prepare it along with the list of ingredients and instructions to follow.