Today in the Jet CSIRT news collection there are fresh vulnerabilities in Dell computers, Microsoft's solution for assessing the level of AI security and reports on the FiveHands ransomware. TOP-3 was collected by Dmitry Lifanov, leading analyst of the Center for Monitoring and Response to Incidents of Information Security Jet CSIRT, Jet Infosystems.
Read more under the cut.
SentinelOne Disclosed a Vulnerability in Dell Computer Drivers
The vulnerability found has been assigned the identification number CVE-2021-21551. It allows a problem in the DBUtil driver to elevate privileges to the system level. SentinelOne researchers estimate that over 100 million Dell devices released since 2009 are affected by this vulnerability.
Microsoft has released a free solution for assessing the level of security of AI systems
A tool called Counterfit measures the security of AI models. The solution is a set of scripts for simulating attacks on models and can be used for penetration testing.
ISA has released reports on a new ransomware called FiveHands
The reports describe the techniques, tactics, and procedures that attackers use during an attack using FiveHands. In addition, CISA experts spoke about indicators of compromise and potential measures to protect, detect and respond to such attacks.