Tag: windows
-
Frage: BlackLotus-Schwachstelle und ablaufendes UEFI-Zertifikat was droht uns?
Im März 2024 wurde bekannt, dass das BlackLotus UEFI-Bootkit den Secure Boot in Windows 11 überwinden könne. Microsofts Versuch, da etwas per Update z… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/08/27/frage-blacklotus-schwachstelle-und-ablaufendes-uefi-zertifikat-was-droht-uns/
-
Windows 10 KB5041582 update released with 5 changes and fixes
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-10-kb5041582-update-released-with-5-changes-and-fixes/
-
South Korean hackers exploited WPS Office zero-day to deploy malware
The South Korea-aligned cyberespionage group APT-C-60 has been leveraging a zero-day code execution vulnerability in the Windows version of WPS Office… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/apt-c-60-hackers-exploited-wps-office-zero-day-to-deploy-spyglace-malware/
-
EDR-killing capabilities added to PoorTry Windows driver
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/edr-killing-capabilities-added-to-poortry-windows-driver
-
Bad apps bypass Windows security alerts for six years using newly unveiled trick
Tags: windowsFirst seen on theregister.com Jump to article: www.theregister.com/2024/08/06/bad_apps_bypass_windows_security/
-
ESET Uncovers Zero-Day Vulnerabilities in WPS Office, Exploited by APT-C-60
ESET researchers have identified two severe vulnerabilities in WPS Office for Windows, widely exploited by the APT-C-60 cyberespionage group, which is… First seen on securityonline.info Jump to article: securityonline.info/eset-uncovers-zero-day-vulnerabilities-in-wps-office-exploited-by-apt-c-60/
-
Employee arrested for locking Windows admins out of 254 servers in extortion plot
A former core infrastructure engineer at an industrial company headquartered in Somerset County, New Jersey, was arrested after locking Windows admins… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/employee-arrested-for-locking-windows-admins-out-of-254-servers-in-extortion-plot/
-
PoorTry Windows driver evolves into a full-featured EDR wiper
The malicious PoorTry kernel-mode Windows driver used by multiple ransomware gangs to turn off Endpoint Detection and Response (EDR) solutions has evo… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/poortry-windows-driver-evolves-into-a-full-featured-edr-wiper/
-
Linux startet nicht: Microsoft patcht Dual-Boot-Systeme kaputt
Viele Linux-Systeme fahren nach dem letzten Windows-Update nicht mehr hoch. Das trifft auch Dual-Boot-Systeme, für die der verteilte Patch gar nicht v… First seen on golem.de Jump to article: www.golem.de/news/linux-startet-nicht-microsoft-patcht-dual-boot-systeme-kaputt-2408-188218.html
-
APT group exploits WPS Office for Windows RCE vulnerability (CVE-2024-7262)
ESET researchers discovered a remote code execution vulnerability in WPS Office for Windows (CVE-2024-7262). APT-C-60, a South Korea-aligned cyberespi… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/08/28/cve-2024-7262-cve-2024-7263/
-
Pootry EDR Killer Malware Wipes Out Security Tools From Windows Machine
Windows drivers can be abused to bypass security measures. Attackers can exploit vulnerabilities in legitimate drivers or use stolen or forged digital… First seen on gbhackers.com Jump to article: gbhackers.com/pootry-edr-wiper/
-
Copilot+ PCs – Recall schafft es am 18. Juni nicht in Windows 11 24H2
Tags: windowsFirst seen on computerbase.de Jump to article: www.computerbase.de/2024-06/copilot-plus-pcs-recall-schafft-es-am-18-juni-nicht-in-windows-11-24h2
-
Cryptomator: Open-source cloud storage encryption
Cryptomator offers open-source, client-side encryption of your files in the cloud. It’s available for Windows, Linux, macOS and iOS. Cryptomator works… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/08/28/cryptomator-open-source-cloud-storage-encryption/
-
Windows XP: Warum das alte Betriebssystem unsicher ist, wenn man es heute mit dem Internet verbindet
First seen on t3n.de Jump to article: t3n.de/news/windows-xp-mit-internet-verbunden-unsicher-1625219/
-
Sinister sysadmin allegedly locked up thousands of Windows workstations, demanded ransom
First seen on theregister.com Jump to article: www.theregister.com/2024/08/29/vm_engineer_extortion_attempt/
-
Sneaky SnakeKeylogger slithers into Windows inboxes to steal sensitive secrets
Tags: windowsFirst seen on theregister.com Jump to article: www.theregister.com/2024/08/05/snakekeylogger_malware_windows/
-
Proofconcept code released for zero-click critical Windows vuln
Tags: windowsFirst seen on theregister.com Jump to article: www.theregister.com/2024/08/28/proofofconcept_code_released_for_zeroclick/
-
NTLM Credential Theft Risk in Python Apps Threaten Windows Security
First seen on hackread.com Jump to article: hackread.com/ntlm-credential-theft-python-apps-windows-security/
-
Windows 11 KB5041587 update adds sharing to Android devices
Microsoft has released the optional KB5041587 preview cumulative update for Windows 11 23H2 and 22H2, which adds sharing to Android devices and fixes … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-11-kb5041587-update-adds-sharing-to-android-devices/
-
Microsoft Delays Recall Launch for Windows Insider Members Until October
First seen on techrepublic.com Jump to article: www.techrepublic.com/article/microsoft-recall-ai-delay/
-
Hacker nutzen Zero-Day-Lücke für Kernelzugriff aus
Möglich ist der Kernelzugriff durch einen Windows-Treiber namens AFD.sys. Mindestens seit Juni installiert eine bekannte Hackergruppe darüber ein Root… First seen on golem.de Jump to article: www.golem.de/news/windows-hacker-nutzen-zero-day-luecke-fuer-kernelzugriff-aus-2408-188165.html
-
97% of Windows sensors back online after outage
While most Windows systems are back online after last week’s outage, CrowdStrike CEO George Kurtz said the vendor remains ‘committed to restoring ever… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366599094/CrowdStrike-97-of-Windows-sensors-back-online-after-outage
-
Windows Downdate tool lets you ‘unpatch’ Windows systems
SafeBreach security researcher Alon Leviev has released his Windows Downdate tool, which can be used for downgrade attacks that reintroduce old vulner… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-downdate-tool-lets-you-unpatch-windows-systems/
-
Windows 11: Microsoft schränkt Umgehung des TPM-Zwangs ein
Durch einen einfachen Trick lässt sich Windows 11 auch auf inkompatibler Hardware installieren. Microsoft arbeitet jedoch daran, das künftig zu unterb… First seen on golem.de Jump to article: www.golem.de/news/windows-11-microsoft-schraenkt-umgehung-des-tpm-zwangs-ein-2408-188126.html
-
Secure Boot: Microsoft erweitert Workaround für parallele Linux-Installationen
Die unausgereifte Linux-Erkennung im Windows-Update verursacht Probleme bei Parallelinstallationen. Microsofts Workaround soll das beheben, greift abe… First seen on heise.de Jump to article: www.heise.de/news/Microsoft-erweitert-Workaround-fuer-Windows-SBAT-Update-9847760.html
-
News Chrome 0-Day Vulnerability (CVE-2024-7965) Actively Exploited in the Wild
The Chrome team announced that Chrome 128 has been promoted to the stable channel for Windows, Mac, and Linux. This update, Chrome 128.0.6613.84/.85, … First seen on gbhackers.com Jump to article: gbhackers.com/news-chrome-0-day-vulnerability/
-
Cheana Stealer Attacking Windows macOS VPN Users to Deploy Malware Payloads
Threat actors exploit phishing websites to distribute malware, often posing as well-known product brands on several platforms in order to increase the… First seen on gbhackers.com Jump to article: gbhackers.com/cheana-stealer-vpn-users/
-
Microsoft Convenes Endpoint Security Firms Following CrowdStrike Incident
Microsoft has called together cybersecurity firms and government representatives for its Windows Endpoint Security Ecosystem Summit. The post Microsof… First seen on securityweek.com Jump to article: www.securityweek.com/microsoft-convenes-endpoint-security-firms-following-crowdstrike-incident/
-
0-day-Schwachstelle CVE-2024-38193 wurde durch Lazarus angegriffen
Zum 13. August 2024 hat Microsoft die 0-day-Schwachstelle CVE-2024-38193 im Treiber afd.sys mit einem Sicherheitsupdate geschlossen. Dort hieß es vage… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/08/20/windows-0-day-schwachstelle-cve-2024-38193-wurde-durch-lazarus-angegriffen/
-
Microsoft Patches Zero-Day Flaw Exploited by North Korea’s Lazarus Group
A newly patched security flaw in Microsoft Windows was exploited as a zero-day by Lazarus Group, a prolific state-sponsored actor affiliated with Nort… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/microsoft-patches-zero-day-flaw.html