Tag: windows
-
New Security Flaws Found in VMware Tools and CrushFTP, High Risk, PoC Released
Broadcom has issued security patches to address a high-severity security flaw in VMware Tools for Windows that could lead to an authentication bypass.Tracked as CVE-2025-22230, the vulnerability is rated 7.8 on the ten-point Common Vulnerability Scoring System (CVSS).”VMware Tools for Windows contains an authentication bypass vulnerability due to improper access control,” Broadcom said in an…
-
Microsoft fixes Remote Desktop issues caused by Windows updates
Microsoft has fixed a known issue that caused problems with Remote Desktop and RDS connections after installing Windows updates released since January 2025. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-fixes-remote-desktop-issues-caused-by-windows-updates/
-
Windows 10 EndLife Puts SMBs at Risk
Upgrading from Windows 10 systems to Windows 11 could potentially introduce vulnerabilities into an environment through misconfigured hardware. First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/windows-10-end-of-life-puts-smb-at-risk
-
Mozilla Patches Critical Firefox Bug Similar to Chrome’s Recent Zero-Day Vulnerability
Mozilla has released updates to address a critical security flaw impacting its Firefox browser for Windows, merely days after Google patched a similar flaw in Chrome that came under active exploitation as a zero-day.The security vulnerability, CVE-2025-2857, has been described as a case of an incorrect handle that could lead to a sandbox escape.”Following the…
-
Notfallupdate: Kritische Sandbox-Lücke in Firefox und Tor-Browser entdeckt
Nicht nur Chrome-Nutzer sollten dieser Tage ihren Browser updaten. Eine aktiv ausgenutzte Sicherheitslücke betrifft auch die Windows-Version von Firefox. First seen on golem.de Jump to article: www.golem.de/news/notfallupdate-kritische-sandbox-luecke-in-firefox-und-tor-browser-entdeckt-2503-194773.html
-
Firefox fixes flaw similar to Chrome zero-day used against Russian organizations
Developers of Mozilla’s Firefox say that reports on a Google Chrome zero-day vulnerability led them to find a similar bug for the Windows version of their browser. First seen on therecord.media Jump to article: therecord.media/firefox-sandbox-vulnerability-similar-chrome-zero-day
-
Tor Browser 13.5.14 Update Fixes Critical Security Flaw for Windows 7, 8, and 8.1
The Tor Project announced the release of an emergency update for Tor Browser 13.5.14, specifically targeting users on Windows 7, 8, and 8.1. This update is part of the ongoing legacy channel support for these older operating systems, providing crucial security patches to ensure the safety of Tor Browser users on these platforms. First seen…
-
After Chrome patches zero-day used to target Russians, Firefox splats similar bug
Single click on a phishing link in Google browser blew up sandbox on Windows First seen on theregister.com Jump to article: www.theregister.com/2025/03/28/google_kaspersky_mozilla/
-
Now Windows Longhorn is long gone, witness reflects on Microsoft’s OS belly-flop
‘This was not good dog food’ First seen on theregister.com Jump to article: www.theregister.com/2025/03/27/looking_back_at_windows_longhorn/
-
Broadcom fixes authentication bypass flaw in VMware Tools for Windows
First seen on scworld.com Jump to article: www.scworld.com/news/broadcom-fixes-authentication-bypass-flaw-in-vmware-tools-for-windows
-
Windows-targeted EncryptHub attacks involve MMC zero-day exploitation
First seen on scworld.com Jump to article: www.scworld.com/brief/windows-targeted-encrypthub-attacks-involve-mmc-zero-day-exploitation
-
Windows 11 KB5053656 update released with 38 changes and fixes
Microsoft has released the KB5053656 preview cumulative update for Windows 11 24H2 with 38 changes, including real-time translation on AMD and Intel-powered Copilot+ PCs and fixes for authentication and blue-screen issues. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-11-kb5053656-update-released-with-38-changes-and-fixes/
-
New Windows scheduled task will launch Office apps faster
In May, Microsoft plans to roll out a new Windows scheduled task that launches automatically to help Microsoft Office apps load faster. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-new-windows-scheduled-task-will-launch-office-apps-faster/
-
ReactOS emits release 0.4.15 its first since 2021
Tags: windowsAn impressive recreation of the Windows golden age First seen on theregister.com Jump to article: www.theregister.com/2025/03/25/reactos_drops_release_0415/
-
Mozilla warns Windows users of critical Firefox sandbox escape flaw
Mozilla has released Firefox 136.0.4 to patch a critical security vulnerability that can let attackers escape the web browser’s sandbox on Windows systems. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/mozilla-warns-windows-users-of-critical-firefox-sandbox-escape-flaw/
-
Recent Windows Server 2025 updates cause Remote Desktop freezes
Microsoft says a known issue is causing Remote Desktop freezes on Windows Server 2025 systems after installing security updates released since the February 2025 Patch Tuesday. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/recent-windows-server-2025-updates-cause-remote-desktop-freezes/
-
APT36 Spoofs India Post Website to Infect Windows and Android Users with Malware
An advanced persistent threat (APT) group with ties to Pakistan has been attributed to the creation of a fake website masquerading as India’s public sector postal system as part of a campaign designed to infect both Windows and Android users in the country.Cybersecurity company CYFIRMA has attributed the campaign with medium confidence to a threat…
-
Zero-Trust-Ransomware-Schutz für Backups mit Blocky für Veeam
Grau Data nimmt an der vom 21. bis 23. April 2025 in San Diego, USA, teil und präsentiert auf dem Blocky-Stand seine neueste Version von . Blocky for Veeam ist von Grau Data entwickelt und derzeit die einzige Lösung zum Schutz der Backups vor Ransomware, die direkt auf dem Veeam-Windows-Server aufsetzt. […] First seen on…
-
PlayBoy Locker Ransomware Targets Windows, NAS, and ESXi Systems
A new ransomware strain, PlayBoy LOCKER, has been identified targeting Windows, NAS, and ESXi systems. First discovered in September 2024 as a Ransomware-as-a-Service (RaaS) offering, the malware later had its full source code put up for sale in November, potentially enabling wider distribution by other threat actors. New Ransomware Strain Emerges with Multi-OS Capabilities The…
-
Microsoft bestätigt: Windows-Updates nerven Nutzer seit Januar mit RDP-Problemen
Seit Wochen brechen RDP-Sitzungen unter Windows 11 und Windows Server 2025 immer wieder unerwartet ab. Nun hat auch Microsoft das Problem erkannt. First seen on golem.de Jump to article: www.golem.de/news/microsoft-bestaetigt-windows-updates-nerven-nutzer-seit-januar-mit-rdp-problemen-2503-194725.html
-
CoffeeLoader: A Brew of Stealthy Techniques
IntroductionZscaler ThreatLabz has identified a new sophisticated malware family that we named CoffeeLoader, which originated around September 2024. The purpose of the malware is to download and execute second-stage payloads while evading detection by endpoint-based security products. The malware uses numerous techniques to bypass security solutions, including a specialized packer that utilizes the GPU, call…
-
VMware plugs a high-risk vulnerability affecting its Windows-based virtualization
Patching is the only workaround: Broadcom advisory noted that the flaw does not have any workarounds and customers must apply patches rolled out on Tuesday to defend against exploitation.Affected products include all 11.x and 12.x versions of VMware tools for Windows, and are patched in the 12.5.1[1] rollout. VMware tools for Linux and macOS remain…
-
CVE-2025-2783: Chrome Zero-Day Targets Russian Organizations
Google Issues Emergency Patch for Chrome Zero-Day Exploit Google has released an urgent security update for its Chrome browser on Windows after uncovering a critical vulnerability that has already been exploited in the wild. The flaw, tracked as CVE-2025-2783, involves… First seen on sensorstechforum.com Jump to article: sensorstechforum.com/cve-2025-2783-chrome-zero-day/
-
Russian Ransomware Gang Exploited Windows Zero-Day Before Patch
Exploitation of Windows MMC zero-day is being pinned on a ransomware gang known as EncryptHub (an affiliate of RansomHub) The post Russian Ransomware Gang Exploited Windows Zero-Day Before Patch appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/russian-ransomware-gang-exploited-windows-zero-day-before-patch/
-
Update VMware Tools for Windows Now: High-Severity Flaw Lets Hackers Bypass Authentication
CVE-2025-22230 is described as an “authentication bypass vulnerability” by Broadcom, allowing hackers to perform high-privilege operations without the necessary credentials. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-vmware-tools-windows-vulnerability/
-
Microsoft fixes printing issues caused by January Windows updates
Microsoft has fixed a known issue causing some USB printers to start printing random text after installing Windows updates released since late January 2025. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-fixes-printing-issues-caused-by-january-windows-updates/
-
Recent Windows updates cause Remote Desktop issues
Microsoft says that some customers might experience Remote Desktop and RDS connection issues after installing recent Windows updates released since January 2025. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-recent-windows-updates-cause-remote-desktop-issues/
-
Hackers Exploit COM Objects for Fileless Malware and Lateral Movement
Security researchers Dylan Tran and Jimmy Bayne have unveiled a new fileless lateral movement technique that exploits trapped Component Object Model (COM) objects in Windows systems. This method, based on research by James Forshaw of Google Project Zero, allows attackers to execute .NET managed code in the context of a server-side Distributed COM (DCOM) process.…
-
Pakistan APT Hackers Weaponize malicious IndiaPost Site to Target Windows and Android Users
A Pakistan-based Advanced Persistent Threat (APT) group, likely APT36, has launched a multi-platform cyberattack campaign targeting Indian users through a fraudulent website impersonating the Indian Post Office. The attack, discovered by CYFIRMA researchers, exploits both Windows and Android vulnerabilities, demonstrating a significant evolution in the group’s tactics. Sophisticated Attack Leverages Youth Laptop Scheme The malicious…
-
Windows MMC Framework Zero-Day Exploited to Execute Malicious Code
Trend Research has uncovered a sophisticated campaign by the Russian threat actor Water Gamayun, exploiting a zero-day vulnerability in the Microsoft Management Console (MMC) framework. The vulnerability, dubbed MSC EvilTwin (CVE-2025-26633), allows attackers to execute malicious code on infected machines. The attack manipulates .msc files and the Multilingual User Interface Path (MUIPath) to download and…