Tag: windows
-
Microsoft Readies Administrator Protection Option for Windows 11
Microsoft’s David Weston describes the new feature as the most significant architectural Windows security change in a generation. First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/microsoft-readies-administrator-protection-option-windows-11
-
The 14 most valuable cybersecurity certifications
Tags: access, ai, application-security, attack, automation, best-practice, blockchain, blueteam, china, cisa, cisco, ciso, cloud, compliance, computer, computing, conference, control, country, credentials, cryptography, cyber, cybersecurity, data, defense, encryption, endpoint, exploit, finance, governance, government, guide, hacker, hacking, incident response, intelligence, Internet, jobs, kali, law, linux, malware, metric, microsoft, monitoring, network, penetration-testing, privacy, reverse-engineering, risk, risk-analysis, risk-management, skills, threat, training, vulnerability, windowsIndustry recognition Who’s to say one certification is more respected than another? Such criteria can be very subjective, so we turned to the most direct and unbiased source to cut through the ambiguity: job listings. In addition to education, skills, and qualifications, employers often specify certs they seek in their ideal candidate. These mentions carry…
-
Hackers abuse IPv6 networking feature to hijack software updates
A China-aligned APT threat actor named “TheWizards” abuses an IPv6 networking feature to launch adversary-in-the-middle (AitM) attacks that hijack software updates to install Windows malware. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-abuse-ipv6-networking-feature-to-hijack-software-updates/
-
Windows RDP lets you log in using revoked passwords. Microsoft is OK with that.
Researchers say the behavior amounts to a persistent backdoor. First seen on arstechnica.com Jump to article: arstechnica.com/security/2025/04/windows-rdp-lets-you-log-in-using-revoked-passwords-microsoft-is-ok-with-that/
-
Chrome 136 Fixes 20-Year-Old Privacy Bug in Latest Update
Google has begun rolling out Chrome 136 to the stable channel for Windows, Mac, and Linux, bringing significant security and privacy upgrades to millions of users worldwide. The update, set to be distributed over the coming days and weeks, addresses a range of vulnerabilities. However, its most notable change closes a privacy loophole that has…
-
Windows Server hotpatching to require subscription
Microsoft has announced it will require paid subscriptions for Windows Server 2025 hotpatching, a service that enables admins to install security updates without restarting. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-windows-server-hotpatching-to-require-subscription/
-
Windows Backdoor Targets Members of Exiled Uyghur Community
A spear-phishing campaign sent Trojanized versions of legitimate word-processing software to members of the World Uyghur Congress as part of China’s continued cyber-espionage activity against the ethnic minority. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/windows-backdoor-targets-members-exhiled-uyghur-community
-
Google Chrome Vulnerability Allows Attackers to Bypass Sandbox Restrictions Technical Details Revealed
A severe vulnerability, identified as CVE-2025-2783, has been discovered in Google Chrome, specifically targeting the Mojo inter-process communication (IPC) component on Windows systems. This high-impact flaw, with a CVSS score of 8.8, stems from improper handle validation and management within Mojo, enabling remote attackers to craft malicious payloads that, when triggered through user interaction like…
-
Verwirrung um 0-Click-NTLM Authentication Bypass (Telnet) in Windows
Mir ist gerade eine Information zu einer Schwachstelle im Microsoft Telnet Server untergekommen. Über die Schwachstelle soll ein -Click-NTLM Authentication Bypass möglich sein. Betroffen sind glücklicherweise nur alte Systeme bis Windows Server 2008 R2. Dort sollte Telnet deaktiviert werden. Ein … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/04/29/verwirrung-um-0-click-ntlm-authentication-bypass-telnet-in-windows/
-
Cyberattacke auf berlin.de
Auf Berlins Info- und Serviceportal berlin.de ging Ende April 2025 nichts mehr. Hacker haben die Seite per DDoS-Attacke lahmgelegt.Hacker haben das Hauptstadt-Portal berlin.de per DDoS-Attacke lahmgelegt. Bereits seit Freitag, dem 25. April, sei die Website Ziel eines massiven Cyberangriffs, teilte die Senatskanzlei mit. ‘Sämtliche Bereiche von berlin.de und dem Serviceportal service.berlin.de sind seitdem nur eingeschränkt…
-
Windows Server 2025 Gets Hotpatching Support Beginning July 1, 2025
Microsoft announced that hotpatching support for Windows Server 2025 will become generally available as a subscription service starting July 1, 2025. This move expands a key feature-previously exclusive to Azure-based servers-for broader use in on-premises and multicloud environments via Azure Arc. What is Hotpatching? Hotpatching is a revolutionary update mechanism that patches the in-memory code…
-
Malware Attack Targets World Uyghur Congress Leaders via Trojanized UyghurEdit++ Tool
In a new campaign detected in March 2025, senior members of the World Uyghur Congress (WUC) living in exile have been targeted by a Windows-based malware that’s capable of conducting surveillance.The spear-phishing campaign involved the use of a trojanized version of a legitimate open-source word processing and spell check tool called UyghurEdit++ developed to support…
-
Sicherheitsrisiko steigt – BSI warnt vor Windows 10 Supportende
First seen on security-insider.de Jump to article: www.security-insider.de/bsi-warnt-vor-sicherheitsrisiken-nach-windows-10-supportende-a-500dce72b4db560c18ff7398ed039b89/
-
Microsoft Rolls Recall Out to General Public After Privacy Backlash
Microsoft expanded the rollout of Recall after months of testing and the addition of new security features. Also, two other AI-powered features for Windows are publicly available. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-microsoft-recall-expands-rollout/
-
Citizen Lab says exiled Uyghur leaders targeted with Windows spyware
The researchers said the attackers behind the campaign had “deep understanding of the target community.” First seen on techcrunch.com Jump to article: techcrunch.com/2025/04/28/citizen-lab-says-exiled-uyghur-leaders-targeted-with-windows-spyware/
-
Windows 11 25H2 Expected to Launch with Minor Changes
Microsoft is quietly preparing the next update to its flagship operating system,Windows 11 25H2, with new evidence pointing toward a SeptemberOctober 2025 release. Unlike the much-anticipated Windows 11 24H2-the major update arriving in 2024-the 25H2 release is shaping up to be a more modest affair, focusing on incremental improvements and under-the-hood changes rather than headline-grabbing…
-
Hotpatching: Reboot-freie Updates kosten bei Windows Server 2025 extra
Wer jeden Monat 1,50 US-Dollar pro CPU-Kern bezahlt, kann sich mit Windows Server 2025 künftig ein paar Neustarts sparen – aber längst nicht alle. First seen on golem.de Jump to article: www.golem.de/news/hotpatching-reboot-freie-updates-kosten-bei-windows-server-2025-extra-2504-195720.html
-
Microsoft pitches paypatch reboot reduction subscription for Windows Server 2025
Redmond reckons $1.50/core/month hotpatch service is worth it to avoid eight Patch Tuesday scrambles each year First seen on theregister.com Jump to article: www.theregister.com/2025/04/28/windows_server_2025_hotpatching_subscription/
-
Three IXON VPN Client Vulnerabilities Let Attackers Escalate Privileges
Security researchers at Shelltrail have discovered three significant vulnerabilities in the IXON VPN client that could allow attackers to escalate privileges on both Windows and Linux systems. The vulnerabilities, temporarily designated as CVE-2025-ZZZ-01, CVE-2025-ZZZ-02, and CVE-2025-ZZZ-03, affect the widely used VPN solution that provides remote access to industrial systems. While official CVE IDs have been…
-
Schwachstelle in NTLM-Hashes – CISA warnt vor aktiven Attacken auf Windows
First seen on security-insider.de Jump to article: www.security-insider.de/microsoft-windows-sicherheitsluecke-alarm-cisa-a-b08f28d2e89b157520d6ac9c256fa33b/
-
Mysteriöser Ordner in Windows 10 und 11: Neue Sicherheitslücke statt zusätzlicher Schutz
First seen on t3n.de Jump to article: t3n.de/news/ordner-windows-10-11-sicherheitsluecke-1684425/
-
Windows “inetpub” security fix can be abused to block future updates
A recent Windows security update that creates an ‘inetpub’ folder has introduced a new weakness allowing attackers to prevent the installation of future updates. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-inetpub-security-fix-can-be-abused-to-block-future-updates/
-
Ninite to win it: How to rebuild Windows without losing your mind
Tags: windowsGet a new, clean (maybe suspiciously empty) install up to speed and keep it there First seen on theregister.com Jump to article: www.theregister.com/2025/04/24/ninite_rebuild_windows/
-
A Smarter Alternative to Entra Permissions Management
Microsoft has announced the retirement of Entra Permissions Management (formerly CloudKnox), with sales ending June 30, 2025. EPM offered valuable visibility into cloud permissions, helping teams identify overprivileged identities across AWS, Azure, and GCP. But for many organizations, that visibility came with significant manual overhead: Policy rewrites, change windows, and time-consuming investigations. As EPM sunsets,……
-
Microsoft’s Patch for Symlink Vulnerability Introduces New Windows DenialService Flaw
Microsoft’s recent attempt to resolve a critical privilege escalation vulnerability has inadvertently introduced a new denial-of-service (DoS) flaw in Windows systems, leaving organizations vulnerable to update failures and potential security risks. In early April 2025, Microsoft addressed CVE-2025-21204, a security flaw that allowed attackers to abuse symbolic links (symlinks) to elevate privileges via the Windows servicing…
-
Microsoft mystery folder fix might need a fix of its own
This one weird trick can stop Windows updates dead in their tracks First seen on theregister.com Jump to article: www.theregister.com/2025/04/24/microsoft_mystery_folder_fix/
-
Microsoft fixes bug causing incorrect 0x80070643 WinRE errors
Microsoft says it resolved a known issue causing erroneous 0x80070643 installation failure errors when deploying the April 2025 Windows Recovery Environment (WinRE) updates. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-fixes-bug-causing-incorrect-0x80070643-winre-errors/
-
U.S. CISA adds Apple products and Microsoft Windows NTLM flaws to its Known Exploited Vulnerabilities catalog
Tags: apple, cisa, cybersecurity, exploit, flaw, infrastructure, kev, microsoft, ntlm, vulnerability, windowsU.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apple products and Microsoft Windows NTLM flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Apple products and Microsoft Windows NTLM vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. Below are the descriptions of the flaws: This week Apple released out”‘of”‘band…
-
BSI empfiehlt Abschied von Windows 10
Windows 10 vor dem Aus: Microsoft beendet am 14. Oktober 2025 den Support für das beliebte Betriebssystem. Ab diesem Zeitpunkt gibt es keine kostenlosen Sicherheitsupdates mehr ein offenes Tor für Cyberangriffe. Das Bundesamt für Sicherheit in der Informationstechnik (BSI) warnt und rät dringend zum Umstieg. First seen on itsicherheit-online.com Jump to article: www.itsicherheit-online.com/news/security-management/bsi-empfiehlt-abschied-von-windows-10/