Tag: windows
-
Whistleblower: Microsoft ignorierte Warnungen vor AD-Bug; wurde 2020 bei SolarWinds-Hack ausgenutzt
Bei Microsoft hat Sicherheit seit Jahren Priorität, wissen wir alle. Und jedes Windows ist das beste und sicherste Windows aller Zeiten. Whistleblower… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/06/14/whistleblower-microsoft-ignorierte-warnungen-vor-ad-bug-wurde-2020-bei-solarwinds-hack-ausgenutzt/
-
Microsoft Security Update Summary (11. Juni 2024)
Am 11. Juni 2024 hat Microsoft Sicherheitsupdates für Windows-Clients und -Server, für Office sowie für weitere Produkte veröffentlicht. Die Sicherhe… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/06/11/microsoft-security-update-summary-11-juni-2024/
-
Microsoft Backtracks on Recall Rollout
Tech Giant to Test AI Feature Via Windows Insider Program. Microsoft dialed back even further its plans to roll out Recall, an automatic screenshot fe… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/microsoft-backtracks-on-recall-rollout-a-25523
-
Critical ‘low complexity’ Windows bug patched; Part of June 2024 Patch Tuesday
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/june-2024-patch-tuesday-brings-fixes-for-49-security-flaws
-
Black Basta exploits patched Windows privilege escalation bug
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/black-basta-exploits-patched-windows-privilege-escalation-bug
-
Phishing emails abuse Windows search protocol to push malicious scripts
A new phishing campaign uses HTML attachments that abuse the Windows search protocol (search-ms URI) to push batch files hosted on remote servers that… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/phishing-emails-abuse-windows-search-protocol-to-push-malicious-scripts/
-
Russian Power Companies, IT Firms, and Govt Agencies Hit by Decoy Dog Trojan
Russian organizations are at the receiving end of cyber attacks that have been found to deliver a Windows version of a malware called Decoy Dog.Cybers… First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/russian-power-companies-it-firms-and.html
-
256,000+ Publicly Exposed Windows Servers Vulnerable to MSMQ RCE Flaw
Cybersecurity watchdog Shadowserver has identified 256,000+ publicly exposed servers vulnerable to a critical Remote Code Execution (RCE) flaw in Micr… First seen on gbhackers.com Jump to article: gbhackers.com/256000-windows-servers-msmq-rce-flaw/
-
Microsoft Windows Ntqueryinformationtoken Flaw Let Attackers Escalate Privileges
Microsofthas discloseda critical vulnerabilityidentified asCVE-2024-30088. With a CVSS score of 8.8, this flaw affects Microsoft Windows and allows lo… First seen on gbhackers.com Jump to article: gbhackers.com/microsoft-windows-ntqueryinformationtoken/
-
Neue Schwachstelle in Windows wird bereits ausgenutzt – So enttarnten Security-Experten eine Zero-Day-Schwachstelle in Windows
First seen on security-insider.de Jump to article: www.security-insider.de/kaspersky-entdeckt-zero-day-schwachstelle-in-windows-2024-a-bf1218123e4872260afea62685df983f/
-
Ransomware Group May Have Exploited Windows Vulnerability as Zero-Day
The Black Basta ransomware gang may have exploited the Windows privilege escalation flaw CVE-2024-26169 before it was patched. The post k Basta ransom… First seen on securityweek.com Jump to article: www.securityweek.com/ransomware-group-may-have-exploited-windows-vulnerability-as-zero-day/
-
Microsoft deprecates Windows DirectAccess, recommends Always On VPN
Microsoft has announced that the DirectAccess remote access solution is now deprecated and will be removed in a future release of Windows, recommendin… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-deprecates-windows-directaccess-recommends-always-on-vpn/
-
Black Basta ransomware gang linked to Windows zero-day attacks
The Cardinal cybercrime group (Storm-1811, UNC4394), who are the main operators of the Black Basta ransomware, is suspected of exploiting a Windows pr… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/black-basta-ransomware-gang-linked-to-windows-zero-day-attacks/
-
New Windows Server KB5039227 and KB5039217 updates fix LSASS crashes
Microsoft has released the Windows Server 2022 KB5039227 and Windows Server 2019 KB5039217 cumulative updates with security fixes and fixes for a vari… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/new-windows-server-kb5039227-and-kb5039217-updates-fix-lsass-crashes/
-
Windows 11 KB5039212 update released with 37 changes, fixes
Microsoft is rolling out the KB5039212 cumulative update for Windows 11 version 23H3 with thirty-seven improvements and changes, including better drag… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-11-kb5039212-update-released-with-37-changes-fixes/
-
Windows 10 Support-Ende – Extended Security Updates kosten 61 US-Dollar pro Gerät
First seen on computerbase.de Jump to article: www.computerbase.de/2024-04/windows-10-support-ende-extended-security-updates-kosten-61-us-dollar-pro-geraet
-
Hackers Exploiting Linux SSH Services to Deploy Malware
SSH and RDP provide remote access to server machines (Linux and Windows respectively) for administration. Both protocols are vulnerable to brute-force… First seen on gbhackers.com Jump to article: gbhackers.com/hackers-exploiting-linux-ssh/
-
Attacking an Internal Windows Medical Device from the Internet
This firmware attack scenario demonstrates the type of attacks seen in the wild and showcases how an attacker can target, implant, or even destroy an … First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/06/attacking-an-internal-windows-medical-device-from-the-internet/
-
Microsoft Urges Windows Admins to Patch Microsoft Message Queuing RCE Flaw
Microsoft has disclosed two Critical remote code execution vulnerabilities in MSMQ (Microsoft Message Queuing) and the Windows Wi-Fi Driver. The CVE f… First seen on gbhackers.com Jump to article: gbhackers.com/microsoft-message-queuing-rce-flaw/
-
Security-Desaster Recall: Neues Tool liest Passwörter aus Microsofts KI-Feature
Mit Recall will Microsoft die Vergangenheit auf Windows-PCs durchsuchbar machen. Ein neues Tool gewährt auch potenziellen Angreifern Zugang zu diesem … First seen on golem.de Jump to article: www.golem.de/news/security-desaster-recall-neues-tool-liest-passwoerter-aus-microsofts-ki-feature-2406-185757.html
-
SSLoad Malware Employs MSI Installer To Kick-Start Delivery Chain
Malware distributors use MSI installers as Windows OS already trusts them to run with administrative rights by bypassing security controls. For this r… First seen on gbhackers.com Jump to article: gbhackers.com/ssload-malware-msi-installer/
-
Nach drei Jahren starten Beta-Tests für Windows 10 wieder
First seen on golem.de Jump to article: www.golem.de/news/microsoft-nach-drei-jahren-starten-beta-tests-fuer-windows-10-wieder-2406-185761.html
-
Ransomware Group Jumps on PHP Vulnerability
A long-running ransomware campaign that has been targeting Windows and Linux systems since 2019 is the latest example of how closely threat groups tra… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/06/ransomware-group-jumps-on-php-vulnerability/
-
Detecting Attacks Against Kerberos with Network Metadata
Netography recently released a new collection of capabilities for detecting attacks on the Kerberos protocol that are often launched against Windows d… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/06/detecting-attacks-against-kerberos-with-network-metadata/
-
Windows 10 KB5039211 update released with new feature, 12 fixes
Microsoft has released the KB5039211 cumulative update for Windows 10 21H2 and Windows 10 22H2 with 12 changes, including a Snipping Tool feature that… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-10-kb5039211-update-released-with-new-feature-12-fixes/
-
New Warmcookie Windows backdoor pushed via fake job offers
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-warmcookie-windows-backdoor-pushed-via-fake-job-offers/
-
Patch Tuesday: Remote Code Execution Flaw in Microsoft Message Queuing
Tags: cvss, exploit, flaw, malicious, microsoft, remote-code-execution, update, vulnerability, windowsThe Windows vulnerability carries a CVSS severity score of 9.8/10 and can be exploited by via specially crafted malicious MSMQ packets. The post ows v… First seen on securityweek.com Jump to article: www.securityweek.com/patch-tuesday-remote-code-execution-flaw-in-microsoft-message-queuing/
-
Adobe Plugs Code Execution Holes in After Effects, Illustrator
Patch Tuesday: Adobe fixes critical flaws and warns of the risk of code execution attacks on Windows and macOS platforms. The post esday: Adobe fixes … First seen on securityweek.com Jump to article: www.securityweek.com/adobe-plugs-code-execution-holes-in-after-effects-illustrator/
-
Microsoft pulls Windows 11 24H2 from Insider Release Preview Channel
First seen on theregister.com Jump to article: www.theregister.com/2024/06/10/microsoft_pulls_windows_24h2_11/
-
PHP addressed critical RCE flaw potentially impacting millions of servers
A new PHP for Windows remote code execution (RCE) flaw affects version 5.x and earlier versions, potentially impacting millions of servers worldwide. … First seen on securityaffairs.com Jump to article: securityaffairs.com/164302/breaking-news/php-critical-rce.html