Tag: update
-
Microsoft Issues Urgent Patch to Fix Office Update Crash
Microsoft has released an urgent patch for Office 2016 to address a critical issue causing key applications like Word, Excel, and Outlook to crash unexpectedly. The new update, KB5002623, was issued on April 10, 2025, following widespread reports of performance disruptions attributed to the earlier KB5002700 update. This latest patch applies exclusively to the Microsoft…
-
AmigaOS updated in 2025 for some reason
Tags: updateHyperion ships another patch, which is nice First seen on theregister.com Jump to article: www.theregister.com/2025/04/10/amigaos_3_2_3/
-
Frequently Asked Questions About Model Context Protocol (MCP) and Integrating with AI for Agentic Applications
The emergence of Model Context Protocol for AI is gaining significant interest due to its standardization of connecting external data sources to large language models (LLMs). While these updates are good news for AI developers, they raise some security concerns. In this blog we address FAQs about MCP. Background Tenable Research has compiled this blog…
-
OpenAI wants ChatGPT to ‘know you over your life’ with new Memory update
OpenAI is giving ChatGPT’s memory feature its biggest upgrade yet, allowing the AI to know you better by referencing all your past conversations. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/artificial-intelligence/openai-wants-chatgpt-to-know-you-over-your-life-with-new-memory-update/
-
Microsoft releases emergency update to fix Office 2016 crashes
Microsoft has released an out-of-band Office update to fix a known issue that caused Word, Excel, and Outlook to crash after installing the KB5002700 security update for Office 2016. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-releases-emergency-update-to-fix-office-2016-crashes/
-
OpenAI wants ChatGPT to know you over your life with new Memory update
OpenAI is giving ChatGPT’s memory feature its biggest upgrade yet, allowing the AI to know you better by referencing all your past conversations. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/artificial-intelligence/openai-wants-chatgpt-to-know-you-over-your-life-with-new-memory-update/
-
Incomplete Patch in NVIDIA Toolkit Leaves CVE-2024-0132 Open to Container Escapes
Cybersecurity researchers have detailed a case of an incomplete patch for a previously addressed security flaw impacting the NVIDIA Container Toolkit that, if successfully exploited, could put sensitive data at risk.The original vulnerability CVE-2024-0132 (CVSS score: 9.0) is a Time-of-Check Time-of-Use (TOCTOU) vulnerability that could lead to a container escape attack and allow for First…
-
Domain Reputation Update Oct 2024 Mar 2025
New domains are up 7.39%, with 2.9 million malicious domains detected. Chinese gambling sites dominate the Top 20 TLDs, while .top remains a hotspot for abuse – this time with a spike in toll road scams. Read the full report here. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/04/domain-reputation-update-oct-2024-mar-2025/
-
SonicWall Patches Multiple Vulnerabilities in NetExtender Windows Client
SonicWall has issued a critical alert concerning multiple vulnerabilities discovered in its NetExtender Windows client. These vulnerabilities, identified via several Common Vulnerabilities and Exposures (CVEs), could allow malicious actors to exploit privilege management flaws, trigger local privilege escalation, or manipulate file paths. Users are urged to update their software immediately to mitigate potential risks. Overview…
-
Ransomware-Attacken stoßen in Windows-Lücke
Tags: access, backdoor, bug, cve, cvss, cyberattack, exploit, kaspersky, malware, microsoft, ransomware, update, vulnerability, windowsCyberkriminelle missbrauchen eine Sicherheitslücke in Windows, um eine Backdoor-Malware und Ransomware einzuschleusen.Sicherheitsforscher von Microsoft haben eine Schwachstelle im CLFS-Treiber (Common Log File System) von Windows entdeckt, die Angreifern Systemrechte verleiht. Sie wird als CVE-2025-29824 geführt, die mit einem CVSS-Wert von 7,8 über einen hohen Schweregrad verfügt.Laut einem Blogbeitrag der Forscher wurde die Lücke bereits für…
-
Bug in Version 135: Microsoft Edge nach Update teilweise unbrauchbar
Auf einigen Systemen startet der Webbrowser Edge in Version 135 mit einem Fehler und lässt sich daraufhin nicht bedienen. Mehrere Workarounds helfen. First seen on golem.de Jump to article: www.golem.de/news/bug-in-version-135-microsoft-edge-nach-update-teilweise-nicht-bedienbar-2504-195225.html
-
Top 16 OffSec, pen-testing, and ethical hacking certifications
Tags: access, android, antivirus, application-security, attack, authentication, blockchain, bug-bounty, business, cisco, cloud, computing, credentials, crypto, cryptography, cyber, cybersecurity, data, defense, detection, encryption, exploit, guide, hacker, hacking, incident response, injection, iot, jobs, kali, linux, malware, microsoft, mitigation, mobile, network, penetration-testing, RedTeam, remote-code-execution, reverse-engineering, risk, risk-assessment, sap, skills, sql, technology, threat, tool, training, update, vulnerability, windowsExperiential learning Offensive security can’t be fully mastered through lectures alone. Candidates need hands-on training in lab environments to develop practical skills. Ideally, certification exams should include a practical assessment, such as developing an exploit to compromise a system.Because individuals learn OffSec techniques, such as penetration testing, in different ways, the most effective certifications offer…
-
Nach Patchday: Mysteriöser Ordner erscheint unerwartet unter Windows
Nach der Installation der jüngsten Updates taucht unter Windows 10 und 11 unerwartet ein neuer Ordner auf. Der Grund dafür ist noch unklar. First seen on golem.de Jump to article: www.golem.de/news/nach-patchday-mysterioeser-ordner-erscheint-unerwartet-unter-windows-2504-195207.html
-
Per Pin oder Gesicht: April-Update macht Log-in mit Windows Hello kaputt
Einige Nutzer, die sich unter Windows 11 oder Windows Server 2025 per Pin oder Gesichtsscan anmelden wollen, stoßen neuerdings auf Fehler. First seen on golem.de Jump to article: www.golem.de/news/per-pin-oder-gesicht-april-update-macht-log-in-mit-windows-hello-kaputt-2504-195205.html
-
Linux Firewall IPFire 2.29 Launches with Post-Quantum Encryption and System Enhancements
The open-source Linux firewall solution, IPFire, has officially released its latest version, IPFire 2.29 Core Update 193. This landmark update introduces cutting-edge post-quantum encryption capabilities for IPsec tunnels, along with extensive system upgrades to bolster security, performance, and hardware optimization for the long term. Post-Quantum Cryptography for a More Secure Future In a major step forward […]…
-
Windows 10/11: Alle Updates für Windows vom April 2025-Patchday verfügbar
Zum Patchday im April 2025 (8. April 2025) waren nicht alle Windows-Sicherheitsupdates fertig gestellt. So fehlte das Update für Windows 10 (RTM-Version, Version 1507) komplett. Microsoft hat dieses Update nun nachgereicht und dazu auch gleich einen eigenen Supportbeitrag veröffentlicht. Windows … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/04/10/windows-10-11-alle-updates-fuer-windows-vom-april-2025-patchday-verfuegbar/
-
PAN-OS Command Injection Flaw Lets Hackers Execute Arbitrary Code Remotely
Palo Alto Networks has disclosed a medium-severity vulnerability (CVE-2025-0127) in its PAN-OS software, enabling authenticated administrators onVM-Series firewallsto execute arbitrary commands with root privileges. The flaw, discovered internally, affects specific legacy PAN-OS versions and requires immediate patching for impacted users. No active exploitation has been reported yet. Key Details of the Vulnerability Summary of the…
-
Windows 11 24H2/Server 2025: Hello-Login geht nach April 2025-Updates nicht mehr
Der Patchday zum 8. April 2025 hat einige Kollateralschäden bei Outlook, Excel und Word 2016 verursacht. Einige Windows-Nutzer klagen zudem, dass die Anmeldung über Windows Hello nicht mehr funktioniert, nachdem sie die Updates vom 8. April 2025 unter Windows 11 … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/04/10/windows-11-24h2-server-2025-hello-login-geht-nach-april-2025-updates-nicht-mehr/
-
Patchday: Microsoft Office Updates (8. April 2025)
Am 8. April2025 (zweiter Dienstag im Monat, Microsoft Patchday) hat Microsoft mehrere sicherheitsrelevante Updates für Microsoft Office 2016, sowie die C2R-Varianten (Office 2016-2021 und 365) und andere Produkte veröffentlicht. Nachfolgend finden Sie eine Übersicht über die verfügbaren Updates. Eine Übersicht … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/04/10/patchday-microsoft-office-updates-8-april-2025/
-
April’s Patch Tuesday leaves unlucky Windows Hello users unable to login
Can’t Redmond ask its whizz-bang Copilot AI to fix it? First seen on theregister.com Jump to article: www.theregister.com/2025/04/09/microsoft_hello_patch/
-
Patch Tuesday: Microsoft Fixes 134 Vulnerabilities, Including 1 Zero-Day
One CVE was used against “a small number of targets.” Windows 10 users needed to wait a little bit for their patches. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-microsoft-patch-tuesday-april-2025/
-
Flaws in Google Quick Share for Windows addressed via patch
First seen on scworld.com Jump to article: www.scworld.com/brief/flaws-in-google-quick-share-for-windows-addressed-via-patch
-
Microsoft’s April 2025 bumper Patch Tuesday corrects 124 bugs
Microsoft is correcting 124 vulnerabilities in its March Patch Tuesday, one of which is being actively exploited in the wild, and 11 of which are ‘critical’ First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366622332/Microsofts-April-2025-bumper-Patch-Tuesday-corrects-124-bugs
-
Windows 11 April update unexpectedly creates new ‘inetpub’ folder
Microsoft’s April 2025 Patch Tuesday updates are strangely creating an empty “inetpub” folder in the root of the C:\ drive, even on systems that do not have Internet Information Services (IIS) installed. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-11-april-update-unexpectedly-creates-new-inetpub-folder/
-
Critical Fortinet FortiSwitch flaw allows remote attackers to change admin passwords
Fortinet addressed a critical vulnerability in its FortiSwitch devices that can be exploited to change administrator passwords remotely. Fortinet has released security updates to address a critical vulnerability, tracked as CVE-2024-48887 (CVSS score 9.8), in its FortiSwitch devices. A remote attacker can exploit the vulnerability to change administrator passwords. >>An unverified password change vulnerability [CWE-620]…
-
Exploited Windows zero-day addressed on April Patch Tuesday
Microsoft delivers fixes for 121 vulnerabilities with 11 rated critical this month. Admins will have extra mitigation work to correct three flaws. First seen on techtarget.com Jump to article: www.techtarget.com/searchwindowsserver/news/366622229/Exploited-Windows-zero-day-addressed-on-April-Patch-Tuesday
-
Patch Tuesday Update April 2025
In total, including third-party CVEs, in this Patch Tuesday edition, Microsoft published 134 CVEs, including 9 republished CVEs. Overall, Microsoft announced one Zero-Day, 11 Critical, and 113 Important vulnerabilities. From an Impact perspective, Escalation of Privilege (EoP) vulnerabilities accounted for 39%, followed by Remote Code Execution (RCE) at 28% and Information Disclosure (ID) at 13%….…
-
Outlook 2016: Kalender-Zugriff nach April 2025-Update KB5002700 gesperrt
Zum 8. April 2025 hat Microsoft das Office-Update KB5002700 veröffentlicht, um eine Reihe Schwachstellen in Microsoft Office 2016 zu schließen. Nach Installation dieses Updates ist kein Zugriff auf dem Kalender mehr möglich. Es gibt aber einen schnellen Workaround, einfach die … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/04/09/outlook-2016-kalender-zugriff-nach-april-2025-update-kb5002700-gesperrt/
-
Patchday: Windows 10/11 Updates (8. April 2025)
Am 8. April 2025 (zweiter Dienstag im Monat, Patchday bei Microsoft) hat Microsoft kumulative Updates für die noch unterstützten Client-Betriebssystem-Versionen von Windows 10 und Windows 11 veröffentlicht. Hier einige Details zu diesen Updates, die Schwachstellen sowie Probleme beheben sollen. Updates … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/04/09/patchday-windows-10-11-updates-8-april-2025/