Windows Kernel Vulnerability Exploited in Attacks

Eduard Kovacs | December 11, 2018

Windows Kernel Vulnerability Exploited in Attacks
Microsoft’s Patch Tuesday updates for December 2018 address nearly 40 vulnerabilities, including a zero-day flaw affecting the Windows kernel. The actively exploited vulnerability, tracked as CVE-2018-8611, has been described by Microsoft as a privilege escalation issue related to the failure of the Windows kernel to properly handle objects in memory. “An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights,” Microsoft said in its advisory. Exploitation of the vulnerability requires access to the targeted system. The security hole impacts all supported versions of Windows. Microsoft has credited Kaspersky Lab researchers for reporting the vulnerability. The cybersecurity firm is expected to publish a report detailing the flaw and the attacks exploiting it. This is the third month in a row Microsoft patches a Windows zero-day discovered by experts at Kaspersky. In October, the tech giant patched CVE-2018-8453, a privilege escalation exploited by a threat group known as FruityArmor. Last month, it fixed CVE-2018-8589, which had been used in limited attacks aimed at entities in the Middle East.

Spotlight

TDS Hosted and Managed Services became OneNeck IT Solutions, creating a single point of accountability for all of their customers' IT needs. OneNeck IT Solutions was purposefully builtthrough the acquisitions of leading IT service providers: VISI, TEAM Technologies, OneNeck IT Services, Vital Su


Other News
SOFTWARE

AnyVision Introduces OnPatrol Tactical AI-Based Surveillance for Law Enforcement and Military Police, Providing Real-Time Situational Awareness

AnyVision | July 23, 2021

AnyVision, the world's leading Recognition AI firm, today announced the release of OnPatrol, a tactical surveillance mobile app that protects law enforcement and military personnel by recognising people of interest and alerting officers in real-time via their mobile device (e.g., phone or bodycam). “It is critical for the public to have faith in the safety and security offered by law enforcement services. AnyVision OnPatrol can assist de-escalate possible threats and avert physical harm by recognising criminals and dangerous individuals in real-time using our Recognition AI technology,” stated AnyVision CTO Dieter Joecker. “It is specifically built to rec...

Read More

SOFTWARE

Algolux has been Chosen to Participate in The Mercedes-Benz AG-Led AI-SEE Project for Its Robust Perception in Poor Visibility Situations

Algolux | July 22, 2021

Algolux, a worldwide recognised computer vision software business, has been chosen to join in Mercedes Benz AG's AI-SEE project to ensure safe driving in low visibility conditions. Algolux, which was recently named to the 2021 CB Insights AI 100 List of the world's most innovative AI startups and won the Most Outstanding Autonomous Vehicle Technology Innovation at the 2021 Tech.AD Europe Awards, will collaborate with 20 world-class OEM and supplier partners over a three-year period to enable Level 4 autonomy for mass-market vehicles. The goal is to create a novel robust sensor system powered by artificial intelligence to improve vehicle vision in low visibility conditions.

Read More

AI TECH

NVIDIA Inference Breakthrough Enhances Conversational AI from the Cloud to the Edge

NVIDIA | July 21, 2021

TensorRT 8, the eighth version of NVIDIA's AI software, was released today, cutting inference time for language queries in half, enabling developers to create the world's best-performing search engines, ad recommendations, and chatbots and provide them from the cloud to the edge. The improvements in TensorRT 8 provide record-breaking speed for language applications, executing BERT-Large, one of the world's most commonly used transformer-based models, in 1.2 milliseconds. Previously, companies had to reduce the size of their models, which resulted in considerably less accurate findings. Companies may now double or treble their model size with TensorRT 8 to make sign...

Read More

AI TECH

Bairong Inc. introduces Indra, a Multi-Party Computing Platform Powered by AI

Bairong Inc. | July 20, 2021

Bairong Inc., a major independent AI-powered technology platform in China, has officially unveiled Indra, a ground-breaking safe multi-party computing platform that addresses essential privacy protection concerns during the data development process. Indra provides a secure and effective data collaboration paradigm for partners and financial institutions, allowing them to capitalise on the value of data while adhering to data usage policies and preventing data leakage. Bairong is committed to researching the uses of AI and big data in the financial sector, and he places a high value on data security and privacy protection. Indra was designed by the company's AI experts and ...

Read More

Spotlight

TDS Hosted and Managed Services became OneNeck IT Solutions, creating a single point of accountability for all of their customers' IT needs. OneNeck IT Solutions was purposefully builtthrough the acquisitions of leading IT service providers: VISI, TEAM Technologies, OneNeck IT Services, Vital Su

Resources

Events