🚨 LEVEL 1 SOC Alert – Vulnerability in Microsoft's RPC Protocol Implementation

Apply patches immediately! A major vulnerability disclosed by CERT-FR on April 13 affects the majority of Windows users (Desktops and Servers). By exploiting this flaw, an attacker could achieve arbitrary remote code execution, thereby potentially taking control of your machines. What are the risks to your business? This vulnerability can severely compromise the confidentiality of your data. Rated 9.8/10 by Microsoft (CVSS 3.1 score), this flaw is particularly critical as it impacts numerous users and is relatively easy for attackers to exploit remotely over the network. No [...]

🚨 LEVEL 1 SOC Alert – Vulnerability in Microsoft's RPC Protocol Implementation2025-10-23T16:29:26+02:00

🚨 SOC Alert: Exceptional High-Risk Situation

-- Exceptional situation impacting the cyber space -- Crisis in Ukraine The situation in Ukraine could have immediate repercussions for businesses. An attack by Russia using virulent malware has been underway since 4:00 AM this morning. This crisis context may impact cybercriminal activities. Therefore, over the coming weeks, we urge you to exercise caution and apply best practices: If a direct link (such as a site-to-site VPN) exists with a Ukrainian entity, ITrust recommends temporarily severing this connection. All ITrust teams are fully mobilized. Your [...]

🚨 SOC Alert: Exceptional High-Risk Situation2025-10-23T16:29:33+02:00

🚨 LEVEL 2 SOC Alert – Highly Critical Apache log4j Vulnerability

On December 10, CERT-FR published a highly critical vulnerability, which potentially jeopardizes a significant number of applications. The open-source log4j library is indeed widely used in Java application development. The IT community fears widespread exploitation of this vulnerability, which is already being actively targeted. ITrust teams have implemented several measures to detect any exploitation attempts (IOCs and detection rules). We remain particularly vigilant across the scopes affected by this CVE. What are the risks to your business? By exploiting this security flaw, [...]

🚨 LEVEL 2 SOC Alert – Highly Critical Apache log4j Vulnerability2025-10-23T16:32:19+02:00

🚨 LEVEL 1 SOC ALERT – KRYPTIS MALWARE IS CURRENTLY SPREADING ACROSS BUSINESSES

Over the past 10 days, we have thwarted several attacks involving the Kryptis malware before it could execute. This malicious software is not detected by antivirus solutions or firewalls. What are the risks to your business? Once installed, the Trojan can be remotely controlled by the attacker (Command & Control). It is then leveraged to exfiltrate your information: usernames, passwords, and sensitive files. It can also perform screen and keystroke captures (keylogging) to transmit them to an attacker-controlled remote server. Through this malware, the threat actor can monitor [...]

🚨 LEVEL 1 SOC ALERT – KRYPTIS MALWARE IS CURRENTLY SPREADING ACROSS BUSINESSES2025-10-23T16:33:40+02:00

🚨 LEVEL 1 SOC ALERT – France is Currently Targeted by an Attack Campaign from the APT31 Threat Actor

The ITrust SOC teams remain highly vigilant regarding affected perimeters: In light of new developments concerning the surge in attacks orchestrated by APT31, ITrust teams have already retrieved the list of indicators of compromise. This has been integrated into the MISP knowledge base and Graylog lookuptables. ITrust teams can provide on-call night support for clients not monitored 24/7. For more information: > Contact us at +33 (0)5 67 34 67 80 or at contact@itrust.fr > Our teams are fully structured to deliver non-degraded 24/7 service. What are the risks to your business [...]

🚨 LEVEL 1 SOC ALERT – France is Currently Targeted by an Attack Campaign from the APT31 Threat Actor2025-10-23T16:34:10+02:00

🚨 LEVEL 1 SOC ALERT – Critical Microsoft Windows “PrintNightmare” Vulnerability

Critical Microsoft Windows “PrintNightmare” Vulnerability On June 29, 2021, a zero-day flaw affecting the Windows Print Spooler was widely disclosed. Currently unpatched, this critical vulnerability affects servers running Windows 7 and subsequent versions. An initial patch was released on July 8 by the vendor. What are the risks to your business? This flaw enables remote code execution, resulting in system-level privilege escalation for any user with an Active Directory account. An attacker could install programs, view, modify, or delete data, or create new accounts with full [...]

🚨 LEVEL 1 SOC ALERT – Critical Microsoft Windows “PrintNightmare” Vulnerability2025-10-23T16:34:18+02:00

🚨 LEVEL 1 SOC ALERT – REMEMBER – ONCE AGAIN – TO PATCH YOUR EXCHANGE SERVERS!

NEW MICROSOFT EXCHANGE SERVER VULNERABILITIES Microsoft yesterday released security patches addressing new zero-day vulnerabilities. Just one month after the ProxyLogin vulnerability, Exchange Server versions 2013, 2016, and 2019 are once again affected by critical flaws. These vulnerabilities could allow an attacker to gain control of the Exchange server and potentially the Active Directory domain. What are the risks to your business? The full extent of the potential consequences of these vulnerabilities is not yet fully determined. However, threat actors may already be exploiting them. The flaws allow an attacker to execute [...]

🚨 LEVEL 1 SOC ALERT – REMEMBER – ONCE AGAIN – TO PATCH YOUR EXCHANGE SERVERS!2025-10-23T16:35:48+02:00

🚨 LEVEL 1 SOC ALERT – CHANGE YOUR PASSWORDS!

COMB Data Breach: CHANGE YOUR PASSWORDS! The largest data breach ever recorded was recently exposed. More than 3 billion personal and professional login credentials and passwords for Gmail, Hotmail, LinkedIn, and Netflix have been made accessible to cybercriminals. Dubbed COMB for “Compilation of Many Breaches,” this dataset is actually a compilation aggregated from multiple attacks against major corporations. The scale of the published information is so vast that we recommend changing your credentials—both personal and professional—as soon as possible. What are the risks to your [...]

🚨 LEVEL 1 SOC ALERT – CHANGE YOUR PASSWORDS!2025-10-23T16:36:37+02:00
Copyright | ITrust | All rights reserved.
LinkedIn
Go to Top