
cyber-attack-vulnerability2.085 min read
"Unveiling the Vulnerability: How Hackers Exploit 'Forced Authentication' to Swipe Windows NTLM Tokens"
2 years ago•Source: The Hacker News
The latest cyber attack vulnerability stories, summarized by AI


Multiple threat actors, including a nation-state group, exploited a critical three-year-old security flaw in Progress Telerik to break into an unnamed federal entity in the U.S. The vulnerability, tracked as CVE-2019-18935, relates to a .NET deserialization vulnerability affecting Progress Telerik UI for ASP.NET AJAX that, if left unpatched, could lead to remote code execution. Organizations are recommended to upgrade their instances of Telerik UI ASP.NET AJAX to the latest version, implement network segmentation, and enforce phishing-resistant multi-factor authentication for accounts that have privileged access.