Tag: microsoft
-
Microsoft Patchday Januar 2025 – 161(!) Updates Mehrere Exploits für Hyper-V im Umlauf
First seen on security-insider.de Jump to article: www.security-insider.de/microsoft-patchday-2025-rekord-updates-sicherheitsluecken-a-10b7bf67e64571bf2e249902159dcfef/
-
3 Actively Exploited Zero-Day Flaws Patched in Microsoft’s Latest Security Update
Microsoft kicked off 2025 with a new set of patches for a total of 161 security vulnerabilities across its software portfolio, including three zero-days that have been actively exploited in attacks.Of the 161 flaws, 11 are rated Critical, and 149 are rated Important in severity. One other flaw, a non-Microsoft CVE related to a Windows…
-
Fortinet confirms zero-day flaw used in attacks against its firewalls
Fortinet has confirmed the existence of a critical authentication bypass vulnerability in specific versions of FortiOS firewalls and FortiProxy secure web gateways. The flaw has been exploited in the wild since early December in what appears to be an indiscriminate and widespread campaign, according to cybersecurity firm Arctic Wolf.The fix for this zero-day is part…
-
Microsoft Rings in 2025 With Record Security Update
Company has issued patches for an unprecedented 159 CVEs, including eight zero-days, three of which attackers are already exploiting. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/microsoft-january-2025-record-security-update
-
Patchday: Windows 10/11 Updates (14. Januar 2025)
Am 14. Januar 2024 (zweiter Dienstag im Monat, Patchday bei Microsoft) hat Microsoft auch kumulative Updates für die noch unterstützten Versionen der Client-Betriebssysteme Windows 10 und Windows 11 veröffentlicht. Hier einige Details zu diesen Updates, die Schwachstellen sowie Probleme beheben … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/01/15/patchday-windows-10-11-updates-14-januar-2025/
-
Microsoft fixes 159 vulnerabilities in first Patch Tuesday of 2025
In its latest security update, Microsoft has addressed a total of 159 vulnerabilities, covering a broad spectrum of the tech giant’s products, including .NET, Visual Studio, Microsoft Excel, Windows components, and Azure services. The update covers several critical and high-severity flaws across various systems, impacting Windows Telephony Services, Active Directory Domain Services, Microsoft Excel and…
-
Microsoft Patch Tuesday for January 2025, Snort rules and prominent vulnerabilities
Microsoft has released its monthly security update for January of 2025 which includes 159 vulnerabilities, including 10 that Microsoft marked as “critical.” The remaining vulnerabilities listed are classified as “important.” First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/january-patch-tuesday-release/
-
Microsoft Security Update Summary (14. Januar 2025)
Am Microsoft Security Update Summary (14. Januar 2025) hat Microsoft Sicherheitsupdates für Windows-Clients und -Server, für Office sowie für weitere Produkte veröffentlicht. Die Sicherheitsupdates beseitigen 159 Schwachstellen (CVEs), davon acht als 0-day klassifiziert. Nachfolgend findet sich ein kompakter … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/01/14/microsoft-security-update-summary-14-januar-2025/
-
Apple Patches Flaw That Allows Kernel Security Bypassing
Microsoft Uncovered Flaw That Affects macOS System Integrity Protection Feature. Apple patched a vulnerability that allows hackers to bypass a key security feature in macOS by through third-party kernel extensions. Microsoft researchers uncovered the flaw tracked as CVE-2024-44243. The flaw could enable hackers to install rootkits and create malware with privileged access. First seen on…
-
Microsoft fixes actively exploited Windows Hyper-V zero-day flaws
Microsoft has marked January 2025 Patch Tuesday with a hefty load of patches: 157 CVE-numbered security issues have been fixed in various products, three of which (in Hyper-V) … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/01/14/january-2025-patch-tuesday-microsoft-hyper-v-zero-day-cve-2025-21333-cve-2025-21334-cve-2025-21335/
-
Microsoft’s Massive Patch Tuesday Release Is ‘Ominous’ Sign For 2025: Researcher
Microsoft’s Patch Tuesday release for January 2025 constitutes the ‘largest number of CVEs addressed in any single month since at least 2017,’ according to Trend Micro’s Dustin Childs. First seen on crn.com Jump to article: www.crn.com/news/security/2025/microsoft-s-massive-patch-tuesday-release-is-ominous-sign-for-2025-researcher
-
Microsoft Patches Trio of Exploited Windows Hyper-V Zero-Days
Patch Tuesday: Microsoft has rushed out fixes for a trio of already-exploited zero-day vulnerabilities in the Windows Hyper-V platform. The post Microsoft Patches Trio of Exploited Windows Hyper-V Zero-Days appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/microsoft-patches-trio-of-exploited-windows-hyper-v-zero-days/
-
Barings Law enleagues 15,000 claimants against Google and Microsoft
Barings Law has signed up 15,000 claimants in a data breach suit against Microsoft and Google. The firm says the tech giants use personal data without proper consent to train AI models First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366618055/Barings-Law-enleagues-15000-claimants-against-Google-and-Microsoft
-
Windows 10 KB5049981 update released with new BYOVD blocklist
Microsoft has released the KB5049981 cumulative update for Windows 10 22H2 and Windows 10 21H2, which contains an updated Kernel driver blocklist to prevent Bring Your Own Vulnerable Driver (BYOVD) attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-10-kb5049981-update-released-with-new-byovd-blocklist/
-
Microsoft January 2025 Patch Tuesday fixes 8 zero-days, 159 flaws
Today is Microsoft’s January 2025 Patch Tuesday, which includes security updates for 159 flaws, including eight zero-day vulnerabilities, with three actively exploited in attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-january-2025-patch-tuesday-fixes-8-zero-days-159-flaws/
-
Windows 11 KB5050009 & KB5050021 cumulative updates released
Microsoft has released the Windows 11 KB5050009 and KB5050021 cumulative updates for versions 24H2 and 23H2 to fix security vulnerabilities and issues. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-11-kb5050009-and-kb5050021-cumulative-updates-released/
-
Microsoft Uncovers macOS Vulnerability CVE-2024-44243 Allowing Rootkit Installation
Microsoft has shed light on a now-patched security flaw impacting Apple macOS that, if successfully exploited, could have allowed an attacker running as “root” to bypass the operating system’s System Integrity Protection (SIP) and install malicious kernel drivers by loading third-party kernel extensions.The vulnerability in question is CVE-2024-44243 (CVSS score: 5.5), a medium-severity bug First…
-
Customer Identity und Access Management aus der Microsoft Identity Management für Kunden mit Microsoft Entra External ID
First seen on security-insider.de Jump to article: www.security-insider.de/-microsoft-entra-external-id-flexible-ciam-loesung-a-daf8e2b8a9dec77e05b7de6f297bc4d5/
-
Microsoft sues overseas threat actor group over abuse of OpenAI service
Microsoft has filed suit against 10 unnamed people (“Does”), who are apparently operating overseas, for misuse of its Azure OpenAI platform, asking the Eastern District of Virginia federal court for damages and injunctive relief.The suit was filed in late December but was not made public until last Friday, when the initial sealed filings were revealed.…
-
Microsoft sues ‘foreign-based’ cyber-crooks, seizes sites used to abuse AI
Scumbags stole API keys, then started a hacking-as-a-service biz, it is claimed First seen on theregister.com Jump to article: www.theregister.com/2025/01/13/microsoft_sues_foreignbased_crims_seizes/
-
Azure, Microsoft 365 MFA outage locks out users across regions
It’s fixed, mostly, after Europeans had a manic Monday First seen on theregister.com Jump to article: www.theregister.com/2025/01/13/azure_m365_outage/
-
Microsoft tests 45% M365 price hikes in Asia-Pacific to see how much you enjoy AI
Won’t say if other nations will be hit, but will ‘listen, learn, and improve’ as buyers react so far with anger First seen on theregister.com Jump to article: www.theregister.com/2025/01/13/m365_price_rise_asia_pacific_test/
-
Microsoft Sues Hackers Over Alleged Use Of Breached Azure OpenAI Services
First seen on scworld.com Jump to article: www.scworld.com/brief/microsoft-sues-hackers-over-alleged-use-of-breached-azure-openai-services
-
AI Won’t Take This Job: Microsoft Says Human Ingenuity Crucial to Red-Teaming
Redmond’s AI Red Team says human involvement remains irreplaceable in addressing nuanced risks. The post AI Won’t Take This Job: Microsoft Says Human Ingenuity Crucial to Red-Teaming appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/ai-wont-take-this-job-microsoft-says-human-ingenuity-crucial-to-red-teaming/
-
macOS bug lets hackers install malicious kernel drivers
Apple recently addressed a macOS vulnerability that allows attackers to bypass System Integrity Protection (SIP) and install malicious kernel drivers by loading third-party kernel extensions. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-macos-bug-lets-hackers-install-malicious-kernel-drivers/
-
Critical macOS Vulnerability Lets Hackers to Bypass Apple’s System Integrity Protection
Microsoft Threat Intelligence has uncovered a critical macOS vulnerability that allowed attackers to bypass Apple’s System Integrity Protection (SIP). Known as CVE-2024-44243, this vulnerability could be exploited to load third-party kernel extensions, resulting in severe security implications for macOS users. Apple released a patch for this vulnerability as part of its December 11, 2024, security…
-
Microsoft 365 MFA Outage Fixed
Microsoft confirmed an outage of its multi-factor authentication system impacting access to Microsoft 365, causing login failures and service disruption First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/mfa-disruption-impacted-access/