Tag: windows
-
7-ZIP-Schwachstelle ermöglicht MoW-Bypass
Im Archivprogramm 7-Zip für Windows gibt es eine Schwachstelle, die beim Entpacken von Archiven kritisch werden kann. Die “Mark of Web”-Kennzeichnung für Downloads kann beim Entpacken aufgehoben werden. Es gibt bereits ein Update, um die Schwachstelle zu beseitigen. Schwachstelle CVE-2025-0411 … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/01/22/7-zip-schwachstelle-ermoeglicht-mow-bypass/
-
Microsoft issues outband fix for Windows Server 2022 NUMA glitch
Update addresses boot failures on multi-node systems First seen on theregister.com Jump to article: www.theregister.com/2025/01/22/windows_server_numa_glitch/
-
Windows 11 24H2 now also offered to all eligible Windows 10 PCs
Microsoft says Windows 11 24H2 has entered the broad deployment phase and is now available to all seekers via Windows Update. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-expands-windows-11-24h2-rollout-to-eligible-windows-10-pcs/
-
Microsoft to force Windows 11 24H2 on Home and Pro users
Ready or not, here I come First seen on theregister.com Jump to article: www.theregister.com/2025/01/20/microsoft_to_force_windows_11/
-
Cyberkriminelle stellen Security-Experten heimtückische Falle
Cyberkriminelle setzen auf eine perfide Methode, um Sicherheitsforscher zu täuschen und Malware zu verbreiten. Durch einen gefälschten Proof-of-Concept (PoC)-Exploit, der eine bereits gepatchte Windows-Sicherheitslücke ausnutzt, versuchen sie, sensible Informationen zu stehlen. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/cyberkriminelle-stellen-security-experten-heimtueckische-falle
-
A 7-Zip bug allows to bypass the Mark of the Web (MotW) feature
A vulnerability in the 7-Zip file software allows attackers to bypass the Mark of the Web (MotW) Windows security feature. Attackers can exploit a vulnerability, tracked as CVE-2025-0411, in the free, open-source file archiver software 7-Zip to bypass the Mark of the Web (MotW) Windows security feature. Mark of the Web (MotW) is a security…
-
IBM i Access Client Solutions Might Be Leaking Your Passwords
A potential security flaw in IBM i Access Client Solutions (ACS) has raised serious concerns about password leakage, leaving users vulnerable to exploitation. Research published yesterday by a vulnerability assessment team revealed that the *WINLOGON authentication feature in IBM ACS is questionably storing Windows credentials, potentially exposing plaintext passwords. This alarming discovery has prompted immediate…
-
7-Zip fixes bug that bypasses Windows MoTW security warnings, patch now
A high-severity vulnerability in the 7-Zip file archiver allows attackers to bypass the Mark of the Web (MotW) Windows security feature and execute code on users’ computers when extracting malicious files from nested archives. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/7-zip-fixes-bug-that-bypasses-the-windows-motw-security-mechanism-patch-now/
-
Microsoft Rolls Out New Administrator Protection Feature Under Windows Security
Microsoft has announced the release of Windows 11 Insider Preview Build 27774 to the Canary Channel. This build comes packed with enhancements, including a significant new feature aimed at bolstering system security”, Administrator Protection. The highlight of this update is the newly integrated Administrator Protection, which can now be activated directly from the Windows Security…
-
New Contacto Ransomware Evades AV Detection Uses Windows Console for Execution
In early January 2025, a new ransomware strain identified as Contacto surfaced, showcasing advanced techniques designed to bypass conventional security measures. This analysis provides insights into its operational mechanisms, particularly suited for professionals venturing into ransomware analysis. Operational Mechanisms Upon execution, Contacto ransomware employs the GetConsoleWindow() and ShowWindow() functions to retrieve and conceal its command…
-
Windows 10 Support-Ende – Alles was Sie über das Ende von Windows 10 wissen müssen
Tags: windowsFirst seen on security-insider.de Jump to article: www.security-insider.de/windows-10-supportende-anforderungen-alternativen-windows-11-a-741e934852b4665ab43ca1d4e281ec21/
-
Ridding your network of NTLM
Tags: attack, authentication, cloud, crowdstrike, cve, email, encryption, exploit, group, hacker, ibm, Internet, jobs, malicious, microsoft, network, ntlm, password, service, technology, tool, update, vulnerability, windowsMicrosoft has hinted at a possible end to NTLM a few times, but with quite a few Windows 95 or 98 in use that do not support the alternative, Kerberos, it won’t be an easy job to do. There is the option to disable NTLM when using Azure Active Directory but that may not always…
-
Microsoft fixes Windows Server 2022 bug breaking device boot
Microsoft has fixed a bug that was causing some Windows Server 2022 systems with two or more NUMA nodes to fail to start up. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-fixes-windows-server-2022-bug-breaking-device-boot/
-
Windows Insiders can now turn on Administrator Protection from settings
Tags: windowsSecurity feature widens out to more Windows 11 users, including those at home First seen on theregister.com Jump to article: www.theregister.com/2025/01/18/windows_insider_administrator_protection/
-
Researchers Accessed Windows BitLocker Encrypted Files Disassembling the Laptop
Cybersecurity researchers have uncovered a major flaw in the Windows BitLocker encryption system, allowing attackers to access encrypted data without requiring physical disassembly of the target laptop. The exploit, named >>bitpixie
-
Microsoft removes Assassin’s Creed Windows 11 upgrade blocks
Earlier this week, Ubisoft released Assassin’s Creed Valhalla and Assassin’s Creed Origins patches to fix Windows 11 24H2 compatibility issues that caused crashes, freezes, and audio problems. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-removes-assassins-creed-windows-11-upgrade-blocks/
-
24H2: Microsoft drängt Nutzer zu neuem Windows 11-Update
Systeme mit Windows 11 22H2 und 23H2 werden in den kommenden Tagen automatisch auf 24H2 aktualisiert. Wer das nicht will, muss manuell eingreifen. First seen on golem.de Jump to article: www.golem.de/news/24h2-microsoft-draengt-nutzern-update-auf-neues-windows-11-auf-2501-192542.html
-
24H2: Microsoft drängt Nutzern Update auf neues Windows 11 auf
Systeme mit Windows 11 22H2 und 23H2 werden in den kommenden Tagen automatisch auf 24H2 aktualisiert. Wer das nicht will, muss manuell eingreifen. First seen on golem.de Jump to article: www.golem.de/news/24h2-microsoft-draengt-nutzern-update-auf-neues-windows-11-auf-2501-192542.html
-
Updates ohne Neustart durch Anbindung an Microsoft Azure – Windows 11 bekommt Hotpatching
First seen on security-insider.de Jump to article: www.security-insider.de/microsoft-windows-11-server-2025-hotpatching-funktion-a-6924d1b373cda02dc88754e7a6f8c0cd/
-
Microsoft löscht Beitrag: Upgrade auf Windows 11 bleibt doch kostenlos
Das Upgrade von Windows 10 auf Windows 11 ist und bleibt kostenlos. Ein Blogbeitrag von Microsoft hatte etwas anderes suggeriert, doch nun ist er weg. First seen on golem.de Jump to article: www.golem.de/news/microsoft-loescht-beitrag-upgrade-auf-windows-11-bleibt-doch-kostenlos-2501-192504.html
-
FBI Deletes PlugX Malware From Computers Infected by China Group
A Chinese-based threat group called Mustang Panda was using a variant of the PlugX malware to infected U.S. Windows computers and steal information. The FBI, with help from French authorities and a private company, deleted the malicious code from more than 4,200 systems. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/01/fbi-deletes-plugx-malware-from-computers-infected-by-china-group/
-
Microsoft ends support for Office apps on Windows 10 in October
Microsoft says it will drop support for Office apps in Windows 10 after the operating system reaches its end of support on October 14. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-ends-support-for-office-apps-on-windows-10-in-october/
-
Windows BitLocker bug triggers warnings on devices with TPMs
Microsoft is investigating a bug triggering security alerts on systems with a Trusted Platform Module (TPM) processor after enabling BitLocker. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-bitlocker-bug-triggers-warnings-on-devices-with-tpms/
-
Support-Ende für Windows 10 – Microsoft-365-Apps werden ebenfalls nicht mehr unterstützt
Wenn der Support für Windows 10 dieses Jahr endet, werden auf dem System installierte Microsoft-365-Apps ebenfalls nicht mehr unterstützt. First seen on computerbase.de Jump to article: www.computerbase.de/news/betriebssysteme/support-ende-fuer-windows-10-microsoft-365-apps-werden-ebenfalls-nicht-mehr-unterstuetzt.91041
-
Patchday: Windows Server-Updates (14. Januar 2025)
Am 14. Januar 2025 (zweiter Dienstag im Monat, Patchday bei Microsoft) wurden verschiedene kumulative Updates für die unterstützten Versionen von Windows Server freigegeben. Nachfolgend habe ich die bereitgestellten Updates samt einigen Details für diese Windows Server-Versionen (von Windows Server 2012 … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/01/15/patchday-windows-server-updates-14-januar-2025/
-
Chrome Security Update Patch For 16 Vulnerabilities
Google has released a significant security update for its Chrome browser, addressing 16 vulnerabilities in version 132.0.6834.83/84 for Windows, Mac, and Linux platforms. This update, which will be rolled out over the coming days and weeks. While this security update includes several critical fixes and improvements to enhance the security of the web browser. The…
-
Kein Klick erforderlich: Kritische Windows-Lücke lässt Schadcode per E-Mail rein
Die E-Mail muss nicht einmal aktiv geöffnet werden. Schon die Vorschau in Outlook reicht für einen erfolgreichen Angriff aus. Anwender sollten zeitnah patchen. First seen on golem.de Jump to article: www.golem.de/news/kein-klick-erforderlich-kritische-windows-luecke-laesst-schadcode-per-e-mail-rein-2501-192435.html