North Korean group Lazarus exploited AppLocker driver zero-day CVE-2024-21338 for privilege escalation in attacks involving FudModule rootkit.

Security firm Avast observed attacks last year and developed a proof-of-concept (PoC) exploit and sent it to Microsoft in August 2023. It took Microsoft six months to make a patch (until February 2024) and didn’t mark it as a zero day in Microsoft Vulnerability Management.

  • LmaydevEnglish
    1·
    9 个月前

    Yeah but when ones found in Linux it’s a good thing and now Linux is more secure for it haha