Data Security Vulnerability News

"Void Banshee Exploits Microsoft Zero-Day to Spread Malware"

The APT group Void Banshee is exploiting a zero-day vulnerability in Microsoft's MHTML browser engine (CVE-2024-38112) to spread the Atlantida information stealer. This flaw, addressed in Microsoft's recent Patch Tuesday, is used in multi-stage attacks involving spear-phishing emails and malicious URL files. The campaign highlights the rapid exploitation of disclosed vulnerabilities and the ongoing threat posed by advanced cyber actors.