Zero-day in Microsoft Windows used in Nokoyawa ransomware attacks 

In February, Kaspersky experts discovered an attack using zero-day vulnerability in the Microsoft Common Log File System (CLFS). A cybercriminal group used an exploit developed for different versions and builds of Windows OS including Windows 11 and attempted to deploy Nokoyawa ransomware. Microsoft assigned CVE-2023-28252 to this vulnerability and patched...