Tag: windows
-
Microsoft Removing DES Encryption from Windows 11 24H2 and Windows Server 2025″
Microsoft has announced the removal of the Data Encryption Standard (DES) encryption algorithm from Kerberos in Windows 11 version 24H2 and Windows Server 2025. This change, set to take effect with updates released on or after September 9, 2025, aims to bolster security by eliminating outdated cryptographic protocols vulnerable to modern cyber threats. The move…
-
CISA Warns of Active Exploitation of Microsoft Windows Win32k Vulnerability
Tags: cisa, control, cyber, cybersecurity, exploit, flaw, infrastructure, kev, microsoft, vulnerability, windowsThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2018-8639, a decade-old Microsoft Windows privilege escalation flaw, to its Known Exploited Vulnerabilities (KEV) catalog amid confirmed active attacks. First patched by Microsoft in December 2018, this Win32k kernel-mode driver vulnerability enables authenticated local attackers to execute arbitrary code with SYSTEM privileges, granting unfettered control over…
-
So funktioniert 0Patch – Micropatches: In-Memory Schutz für Windows 10
Tags: windowsFirst seen on security-insider.de Jump to article: www.security-insider.de/windows-10-updates-nach-support-ende-micropatches-patch0-a-552b21ec14ea8feb20941b82f4792dde/
-
Docusnap for Windows Flaw Exposes Sensitive Data to Attackers
Tags: cyber, cybersecurity, data, encryption, firewall, flaw, network, penetration-testing, software, vulnerability, windowsA recently disclosed vulnerability in Docusnap’s Windows client software (CVE-2025-26849) enables attackers to decrypt sensitive system inventory files through a hardcoded encryption key, exposing critical network information to potential exploitation. Cybersecurity researchers at RedTeam Pentesting GmbH revealed that inventory files generated by Docusnap Client for Windows containing details like installed applications, firewall configurations, and […]…
-
Cisco, Hitachi, Microsoft, and Progress Flaws Actively Exploited”, CISA Sounds Alarm
Tags: cisa, cisco, cve, cybersecurity, exploit, flaw, infrastructure, injection, kev, microsoft, software, vulnerability, windowsThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added five security flaws impacting software from Cisco, Hitachi Vantara, Microsoft Windows, and Progress WhatsUp Gold to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.The list of vulnerabilities is as follows -CVE-2023-20118 (CVSS score: 6.5) – A command injection First seen…
-
U.S. CISA adds Multiple Cisco Small Business RV Series Routers, Hitachi Vantara Pentaho BA Server, Microsoft Windows Win32k, and Progress WhatsUp Gold flaws to its Known Exploited Vulnerabilities catalog
Tags: business, cisa, cisco, cybersecurity, exploit, infrastructure, kev, microsoft, router, vulnerability, windowsU.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Cisco Small Business RV Series Routers, Hitachi Vantara Pentaho BA Server, Microsoft Windows Win32k, and Progress WhatsUp Goldflaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA)added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: Below are the descriptions for…
-
Phishers Wreak ‘Havoc,’ Disguising Attack Inside SharePoint
A complex campaign allows cyberattackers to take over Windows systems by a combining a ClickFix-style attack and sophisticated obfuscation that abuses legitimate Microsoft services. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/phishers-wreak-havoc-disguising-attack-inside-sharepoint
-
CISA tags Windows, Cisco vulnerabilities as actively exploited
CISA has warned US federal agencies to secure their systems against attacks exploiting vulnerabilities in Cisco and Windows systems. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-tags-windows-and-cisco-vulnerabilities-as-actively-exploited/
-
New Malware Campaign Exploits Microsoft Graph API to Infect Windows
FortiGuard Labs discovers an advanced attack using modified Havoc Demon and SharePoint. Explore the attack’s evasion techniques and security measures. First seen on hackread.com Jump to article: hackread.com/malware-exploits-microsoft-graph-api-infect-windows/
-
Ist SimpleWall noch sicher? Open-Source-Firewall für Windows möglicherweise kompromittiert
Ist SimpleWall noch sicher? Nutzer berichten über eine mögliche Kompromittierung der beliebten Open-Source-Firewall. First seen on tarnkappe.info Jump to article: tarnkappe.info/artikel/it-sicherheit/ist-simplewall-noch-sicher-open-source-firewall-fuer-windows-moeglicherweise-kompromittiert-311068.html
-
PoC Released for Windows Hyper-V SYSTEM Privilege Exploit
Security researchers have publicly disclosed a proof-of-concept (PoC) exploit for CVE-2025-21333, a critical elevation-of-privilege vulnerability in Microsoft’s Hyper-V virtualization framework. The vulnerability resides in thevkrnlintvsp.sysdriver and enables local attackers to gainSYSTEM privilegesthrough a sophisticated heap manipulation technique. Microsoft rated this flaw asImportant (7.8 CVSSv3)in its January 2025 advisory. Vulnerability Overview According to a GitHub report, the…
-
Windows 7 lives! How to keep your favorite fossil running
Tags: windowsYou probably shouldn’t, but if you must, you can First seen on theregister.com Jump to article: www.theregister.com/2025/03/01/running_windows_7_2025/
-
Achtung: SimpleWall Firewall-Tool kompromittiert?
Kurze Warnung an die Leserschaft dieses Blogs, die auf SimpleWall als Firewall bzw. Tool zur Konfigurierung der Windows Filtering Platform setzen. Ein Leser hat mich darauf aufmerksam gemacht, dass die Software wohl gehackt wurde. Der Entwickler hat das Repository inzwischen … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/03/02/achtung-simplewall-firewall-tool-kompromittiert/
-
Extensive Compromise Likely With Windows CE Flaws
First seen on scworld.com Jump to article: www.scworld.com/brief/extensive-compromise-likely-with-windows-ce-flaws
-
Windows CE OS flaws pose risk to industrial systems, medical settings
First seen on scworld.com Jump to article: www.scworld.com/news/windows-ce-os-flaws-pose-risk-to-industrial-systems-medical-settings
-
Microsoft confirms it’s killing off Skype in May, after 14 years
Microsoft has confirmed that the Skype video call and messaging service will be shut down in May, 14 years after replacing the Windows Live Messenger. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-confirms-its-killing-off-skype-in-may-after-14-years/
-
Winos4.0 Malware Targets Windows Users Through Malicious PDF Files
A new wave of cyberattacks leveraging the Winos4.0 malware framework has targeted organizations in Taiwan through malicious PDF attachments disguised as tax inspection alerts, according to a January 2025 threat analysis by FortiGuard Labs. The campaign employs multi-stage payload delivery, anti-forensic techniques, and automated security bypass mechanisms to establish persistent access to victim networks while…
-
Cyberangriffe abwehren: Wie Windows-Architekturen widerstandsfähiger werden
Die weltweiten Computerstörungen im Sommer 2024 durch ein fehlerhaftes Cybersicherheits-Update hatten weitreichende Folgen. Das Bundesamt für Sicherheit in der Informationstechnik (BSI), Crowdstrike und Microsoft haben den Vorfall intensiv aufgearbeitet und jetzt umfassende Maßnahmen zur Stärkung der Systemresilienz vorgestellt. First seen on itsicherheit-online.com Jump to article: www.itsicherheit-online.com/news/security-management/cyberangriffe-abwehren-wie-windows-architekturen-widerstandsfaehiger-werden/
-
How to configure OAuth in Microsoft 365 Defender and keep your cloud secure
Tags: access, attack, authentication, backup, business, cloud, email, identity, mail, mfa, microsoft, monitoring, password, risk, risk-analysis, software, tool, vulnerability, windowsSet the filter to permission level “high severity” and community use to “not common”. Using this filter, you can focus on apps that are potentially very risky, where users may have underestimated the risk.Under Permissions select all the options that are particularly risky in a specific context. For example, you can select all the filters…
-
Malware per FakeUpdate
Gefälschte Browser-Updates zielen aktuell auf Mac-, Windows- und Android-Nutzer ab und verbreiten Malware wie FrigidStealer, Lumma Stealer und Marcher-Trojaner über kompromittierte Websites. First seen on 8com.de Jump to article: www.8com.de/cyber-security-blog/malware-per-fake-browser-update
-
Windows 11 KB5052093 update released with 33 changes and fixes
Microsoft has released the February 2025 preview cumulative update for Windows 11 24H2, with 33 improvements and fixes for multiple issues, including SSH and File Explorer bugs and the volume jumping to 100% when waking the PC from sleep. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-11-kb5052093-update-released-with-33-changes-and-fixes/
-
Windows 11 24H2 upgrades now blocked for some AutoCAD users
Microsoft has introduced a new Windows 11 24H2 upgrade block for systems with AutoCAD 2022, addressing compatibility issues that prevent the program from launching. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-11-24h2-upgrades-now-blocked-for-some-autocad-users/
-
Windows 10 KB5052077 update fixes broken SSH connections
Microsoft has released the optional KB5052077 preview cumulative update for Windows 10 22H2 with nine bug fixes and changes, including a fix for a longstanding known issue that breaks SSH connections. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-10-kb5052077-update-fixes-broken-ssh-connections/
-
DeepSeek Lure Using CAPTCHAs To Spread Malware
Tags: ai, attack, botnet, breach, captcha, cloud, control, credentials, crypto, cybercrime, data, detection, exploit, infrastructure, injection, international, login, malicious, malware, network, open-source, powershell, privacy, scam, service, technology, theft, threat, tool, windowsIntroductionThe rapid rise of generative AI tools has created opportunities and challenges for cybercriminals. In an instant, industries are being reshaped while new attack surfaces are being exposed. DeepSeek AI chatbot that launched on January 20, 2025, quickly gained international attention, making it a prime target for abuse. Leveraging a tactic known as brand impersonation,…
-
LightSpy Expands to 100+ Commands, Increasing Control Over Windows, macOS, Linux, and Mobile
Cybersecurity researchers have flagged an updated version of the LightSpy implant that comes equipped with an expanded set of data collection features to extract information from social media platforms like Facebook and Instagram.LightSpy is the name given to a modular spyware that’s capable of infecting both Windows and Apple systems with an aim to harvest…
-
Microsoft trims more CPUs from Windows 11 compatibility list
OEMs blowing dust from the processor stock cupboard, beware First seen on theregister.com Jump to article: www.theregister.com/2025/02/24/microsoft_win_11_cpus/
-
Silent Killers Exploit Windows Policy Loophole to Evade Detections and Deploy Malware
In a significant cybersecurity revelation, researchers have uncovered a large-scale campaign exploiting a Windows policy loophole to deploy malware while evading detection. The attack hinges on the abuse of a legacy driver, Truesight.sys (version 2.0.2), which contains vulnerabilities that allow attackers to bypass modern security measures. This driver, part of Adlice’s RogueKiller Antirootkit suite, has…
-
2,500+ Truesight.sys Driver Variants Exploited to Bypass EDR and Deploy HiddenGh0st RAT
A large-scale malware campaign has been found leveraging a vulnerable Windows driver associated with Adlice’s product suite to sidestep detection efforts and deliver the Gh0st RAT malware.”To further evade detection, the attackers deliberately generated multiple variants (with different hashes) of the 2.0.2 driver by modifying specific PE parts while keeping the signature valid,” Check Point…
-
LightSpy Malware Expands With 100+ Commands to Target Users Across All Major OS Platforms
The LightSpy surveillance framework has significantly evolved its operational capabilities, now supporting over 100 commands to infiltrate Android, iOS, Windows, macOS, and Linux systems, and routers, according to new infrastructure analysis. First documented in 2020, this modular malware has shifted from targeting messaging applications to focusing on social media database extraction and cross-platform surveillance, marking…
-
FAQ und Script zur Secure Boot-Absicherung gegen CVE-2023-24932 (Black Lotus)
Microsoft versucht seit geraumer Zeit den Secure Boot in Windows gegen die Black Lotus-Boot-Kit-Schwachstelle CVE-2023-24932 abzusichern. Nachfolgend eine kurze Zusammenfassung bzw. FAQ, u.a. zum auszutauschenden Zertifikat in den Boot-Medien. Und ein Leser hat mir sein Script zum Zertifikatsaustausch zukommen lassen. … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/02/25/script-zur-secure-boot-absicherung-gegen-cve-2023-24932-black-lotus/