Tag: windows
-
Nach CrowdStrike-Ausfall – Microsoft baut Windows-Kernel um
First seen on security-insider.de Jump to article: www.security-insider.de/microsoft-begrenzt-zugriff-auf-windows-kernel-nach-crowdstrike-ausfall-a-98fdaced5817e595323239096fe0773f/
-
CISA Flags Two Actively Exploited Vulnerabilities: Critical Threats to Windows and WhatsUp Gold
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning, adding two actively exploited security flaws to its Known Explo… First seen on securityonline.info Jump to article: securityonline.info/cisa-flags-two-actively-exploited-vulnerabilities-critical-threats-to-windows-and-whatsup-gold/
-
Microsoft on a roll for terrible rebranding with Windows App
First seen on theregister.com Jump to article: www.theregister.com/2024/09/20/microsoft_windows_app/
-
U.S. CISA adds Microsoft Windows, Apache HugeGraph-Server, Oracle JDeveloper, Oracle WebLogic Server, and Microsoft SQL Server bugs to its Known Exploited Vulnerabilities catalog
Tags: apache, cisa, cybersecurity, exploit, infrastructure, kev, microsoft, oracle, sql, vulnerability, windowsU.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft Windows, Apache HugeGraph-Server, Oracle JDeveloper, Oracle WebLogic Serve… First seen on securityaffairs.com Jump to article: securityaffairs.com/168592/security/u-s-cisa-windows-apache-hugegraph-oracle-jdeveloper-oracle-weblogic-sql-server-bugs-to-its-known-exploited-vulnerabilities-catalog.html
-
Google Password Manager now automatically syncs your passkeys
Google announced that starting today, passkeys added to Google Password Manager will automatically sync between Windows, macOS, Linux, Android, and Ch… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/google/google-password-manager-now-automatically-syncs-your-passkeys/
-
Microsoft Issues Patches for 79 Flaws, Including 3 Actively Exploited Windows Flaws
Microsoft on Tuesday disclosed that three new security flaws impacting the Windows platform have come under active exploitation as part of its Patch T… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/microsoft-issues-patches-for-79-flaws.html
-
Nach CrowdStrike: Microsoft plant Security-Lösungen aus dem Windows-Kernel zu entfernen
Microsoft hat erste Pläne skizziert, wie sich Windows-Systeme so absichern lassen, dass ein kaputtes Update einer Endpunkt-Sicherheitslösung nicht das… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/09/13/nach-crowdstrike-microsoft-plant-security-lsungen-aus-dem-windows-kernel-zu-entfernen/
-
Citrix Workspace App für Windows ermöglicht Rechteausweitung
First seen on heise.de Jump to article: www.heise.de/news/Citrix-Workspace-App-fuer-Windows-ermoeglicht-Rechteausweitung-9864320.html
-
Feds claim sinister sysadmin locked up thousands of Windows workstations, demanded ransom
First seen on theregister.com Jump to article: www.theregister.com/2024/08/29/vm_engineer_extortion_allegations/
-
Windows MSHTML spoofing bug leveraged in Void Banshee attacks
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/windows-mshtml-spoofing-bug-leveraged-in-void-banshee-attacks
-
Void Banshee Attacks Leverage Windows MSHTML Spoofing Bug
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/void-banshee-attacks-leverage-windows-mshtml-spoofing-bug
-
Microsoft may have revealed Windows 11 24H2 is coming this month
Microsoft may have accidentally confirmed that Windows 11 24H2 (Windows 11 2024 Update) is arriving on September 24 as part of the optional preview up… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-may-have-revealed-windows-11-24h2-is-coming-this-month/
-
U.S. CISA adds Microsoft Windows MSHTML Platform and Progress WhatsUp Gold bugs to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft Windows MSHTML Platform and Progress WhatsUp Gold bugs to its Known Exploi… First seen on securityaffairs.com Jump to article: securityaffairs.com/168505/security/u-s-cisa-microsoft-windows-mshtml-platform-progress-whatsup-gold-bugs-known-exploited-vulnerabilities-catalog.html
-
Exploiting Windows MiniFilter to Bypass EDR Protection
Windows Minifilter drivers are a type of file system filter driver that operates within the Windows operating system to manage and modify I/O operatio… First seen on gbhackers.com Jump to article: gbhackers.com/windows-minifilter-abused/
-
Microsoft Windows Kernel Vulnerability Exploited in the Wild
Microsoft has confirmed the exploitation of a Windows Kernel vulnerability, identified as CVE-2024-37985, in the wild. This vulnerability, first relea… First seen on gbhackers.com Jump to article: gbhackers.com/microsoft-windows-kernel-vulnerability/
-
Proofconcept code released for zero-click critical IPv6 Windows hole
Tags: windowsFirst seen on theregister.com Jump to article: www.theregister.com/2024/08/28/proofofconcept_code_released_for_zeroclick/
-
Chrome 129 Released with Fix for Multiple Security Vulnerabilities
The Chrome team has officially announced the release of Chrome 129, which is now available on the stable channel for Windows, Mac, and Linux. This upd… First seen on gbhackers.com Jump to article: gbhackers.com/chrome-129-released-fix/
-
Windows Server 2012 / R2 und Windows 7 (10. September 2024)
Tags: windowsZum 10. September 2024 wurden diverse Sicherheitsupdates für Windows Server 2012/R2 (1. ESU Jahr) veröffentlicht. Für Windows 7 SP1 und Windows Server… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/09/11/windows-server-2012-r2-und-windows-7-10-september-2024/
-
Recently patched Windows flaw CVE-2024-43461 was actively exploited as a zero-day before July 2024
Microsoft warns that a recently patched Windows flaw, tracked as CVE-2024-43461, was actively exploited as a zero-day before July 2024. Microsoft warn… First seen on securityaffairs.com Jump to article: securityaffairs.com/168467/hacking/windows-cve-2024-43461-actively-exploited-before-july-2024.html
-
Microsoft rolls out Office LTSC 2024 for Windows and Mac
Microsoft has announced that Office LTSC (Long Term Servicing Channel) 2024, a volume-licensed and perpetual version of Office for Windows and macOS u… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-rolls-out-office-ltsc-2024-for-windows-and-mac/
-
CISA warns of Windows flaw used in infostealer malware attacks
CISA has ordered U.S. federal agencies to secure their systems against a recently patched Windows MSHTML spoofing zero-day bug exploited by the Void B… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-warns-of-windows-flaw-used-in-infostealer-malware-attacks/
-
CISA Warns of Windows MSHTML Progress WhatsUp Gold Flaw Exploited Widely
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding two critical vulnerabilities affecting Microsoft Wi… First seen on gbhackers.com Jump to article: gbhackers.com/cisa-warns-windows-mshtml-progress-whatsup-gold/
-
Patchday Microsoft: Angreifer attackieren vier Lücken in Windows & Co.
First seen on heise.de Jump to article: www.heise.de/news/Patchday-Microsoft-Aeltere-Sicherheitsupdates-in-neuer-Luecke-ausgehebelt-9864233.html
-
Microsoft confirms second 0-day exploited by Void Banshee APT (CVE-2024-43461)
CVE-2024-43461, a spoofing vulnerability affecting Windows MSHTML a software component used by various apps for rendering render web pages on Windows … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/09/16/cve-2024-43461-exploited/
-
Ende der Windows-10-Dominanz – Windows 11 gewinnt an Bedeutung auf Steam fast Platz 1
Tags: windowsFirst seen on computerbase.de Jump to article: www.computerbase.de/2024-07/ende-der-windows-10-dominanz-windows-11-gewinnt-an-bedeutung-auf-steam-fast-platz-1
-
EchoStrike: Generate undetectable reverse shells, perform process injection
EchoStrike is an open-source tool designed to generate undetectable reverse shells and execute process injection on Windows systems. >>EchoStrike allo… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/09/16/echostrike-reverse-shells-process-injection/
-
Windows vulnerability abused braille spaces in zero-day attacks
A recently fixed Windows MSHTML spoofing vulnerability tracked under CVE-2024-43461 is now marked as previously exploited after it was used in attacks… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/windows-vulnerability-abused-braille-spaces-in-zero-day-attacks/
-
Niemand hat die Absicht, eine Mauer um den Windows-Kernel zu errichten
Wie die Windows-Sicherheit verbessern? Microsoft lud Security-Anbieter zum großen Konsens-Summit. Der Elefant im Raum: ein abgeriegelter Windows-Kerne… First seen on heise.de Jump to article: www.heise.de/news/Microsofts-Windows-Kernel-Niemand-hat-die-Absicht-eine-Mauer-zu-errichten-9867222.html
-
SentinelOne-CEO: Risiken einer Konzentration auf einen einzigen Anbieter sind überdeutlich
Nach dem durch Security-Anbieter Crowdstrike verursachten weltweiten Windows-Ausfall im letzten Monat findet SentinelOne-CEO Tomer Weingarten klare un… First seen on crn.de Jump to article: www.crn.de/news/4351378/sentinelone-ceo-risiken-einer-konzentration-auf-einen-einzigen-anbieter-sind-uberdeutlich
-
Microsoft Says Recent Windows Vulnerability Exploited as Zero-Day
Microsoft warns that a recently patched Windows vulnerability was exploited in the wild as a zero-day prior to July 2024. The post Microsoft Says Rece… First seen on securityweek.com Jump to article: www.securityweek.com/microsoft-says-recent-windows-vulnerability-exploited-as-zero-day/