Windows GDI flaw leads to PowerShell attacks - InfoWorld
InfoWorld, October 21, 2016
Earlier this week, Kaspersky Lab researchers discovered a vulnerability in the Windows GDI (graphics device interface) that Microsoft patched in its latest round of security updates, which was exploited by a sophisticated attack group named “FruityArmor.” Anton Ivanov, the Kaspersky Lab researcher who reported the flaw to Microsoft, found that FruityArmor was using this vulnerability as part of a browser-based exploit chain to gain elevated privileges and escape the browser sandbox.
Click here to read more!