Tag: windows
-
Brave New Kernel: Microsoft Previews Safer Windows Ecosystem
Windows 11 Revamp Means No Kernel Access Required for Third-Party Security Tools Nearly one year after a faulty CrowdStrike software update disrupted 8.5 million Windows hosts, causing global IT chaos, Microsoft is previewing multiple resilience changes to Windows, including enabling third-party endpoint security tools to do their magic without needing kernel-level access. First seen on…
-
Von 1,4 Mrd auf 1 Mrd Geräte – Windows verlor in 3 Jahren rund 400 Millionen Nutzer
Tags: windowsDie Anzahl der monatlich genutzten Windows-Geräte ist in drei Jahren von 1,4 Milliarden auf 1 Milliarde Geräte gefallen. First seen on computerbase.de Jump to article: www.computerbase.de/news/betriebssysteme/von-1-4-mrd-auf-1-mrd-geraete-windows-verlor-in-3-jahren-rund-400-millionen-nutzer.93338
-
Hackers Deliver Remcos Malware Via .pif Files and UAC Bypass in Windows
A sophisticated phishing campaign has emerged, distributing the notorious Remcos Remote Access Trojan (RAT) through the DBatLoader malware. This attack chain, analyzed in ANY.RUN’s Interactive Sandbox, leverages a combination of User Account Control (UAC) bypass techniques, obfuscated scripts, Living Off the Land Binaries (LOLBAS) abuse, and persistence mechanisms to infiltrate systems undetected. The campaign begins…
-
Microsoft warns of Windows update delays due to wrong timestamp
Microsoft has confirmed a new known issue causing delivery delays for June 2025 Windows security updates due to an incorrect metadata timestamp. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-warns-of-Windows-security-update-delays-due-to-incorrect-metadata-timestamp/
-
Microsoft hints at revoking access to the Windows kernel, eventually
Future kernel access in the balance Microsoft did not agree to an interview on its kernel strategy, but a representative did share with CSO a brief statement about the initial announcement’s intentions.”This is an opportunity for partners to test building their solutions outside the kernel and is not an announcement of future plans for kernel…
-
Windows 11 25H2: Nächster Windows-11-Patch soll nur einen Neustart brauchen
Kunden merken teilweise nicht einmal, dass ihre Geräte schon für das kommende Windows 11 25H2 vorbereitet werden. First seen on golem.de Jump to article: www.golem.de/news/windows-11-25h2-naechster-windows-11-patch-soll-nur-einen-neustart-brauchen-2506-197575.html
-
Gefahr für Windows-Systeme – OpenVPN veröffentlicht wichtiges Update
First seen on security-insider.de Jump to article: www.security-insider.de/openvpn-27alpha2-windows-treiber-sicherheitsluecke-fix-a-7bab44e7a21860c5037229a9fd64828a/
-
Threat Actors Exploit Windows and Linux Server Vulnerabilities to Deploy Web Shells
Threat actors have been observed exploiting file upload vulnerabilities to deploy web shells and advanced malware on both Windows and Linux systems. The campaign, which showcases a blend of publicly available tools and custom malicious payloads, indicates a highly coordinated effort to compromise organizational networks through initial access, persistence, and lateral movement. Sophisticated Attack Campaign…
-
Microsoft changes Windows in attempt to prevent next CrowdStrike-style catastrophe
AV vendors have worried that this could advantage Microsoft’s security software. First seen on arstechnica.com Jump to article: arstechnica.com/gadgets/2025/06/microsoft-is-trying-to-get-antivirus-software-away-from-the-windows-kernel/
-
TeamViewer-Schwachstelle CVE-2025-36537 im Remote Management
Noch ein kurzer Nachtrag von dieser Woche betreffs der Fernwartungssoftware TeamViewer. Deren Entwickler haben bereits zum 24. Juni 2025 eine Sicherheitswarnung vor einer kritischen Schwachstelle (CVE-2025-36537) im TeamViewer Remote Management unter Windows vermeldet. Patchen ist angesagt. TeamViewer-Schwachstelle CVE-2025-36537 Die Schwachstelle CVE-2025-36537 … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/06/27/teamviewer-schwachstelle-cve-2025-36537-im-remote-management/
-
Microsoft OS Security Exec Is Working With Competitors To Improve Deployment Practices. Here’s Why.
A year after the faulty CrowdStrike update that downed millions of Windows machines, Microsoft CVP Dave Weston works with third-party vendors to improve deployment practices. First seen on crn.com Jump to article: www.crn.com/news/security/microsoft-os-security-cvp-weston-is-working-with-competitors-to-improve-deployment-practices
-
Microsoft Teams to Auto-Detect Work Location Using Company Wi-Fi
Microsoft Teams is set to introduce a new feature that will automatically detect and set users’ work locations when they connect to their organization’s Wi-Fi network, marking a significant step forward in streamlining the hybrid workplace experience. The feature, scheduled for general availability in early September 2025, will be available for both Windows and Mac…
-
Frequently Asked Questions About Iranian Cyber Operations
Tags: access, advisory, api, apt, attack, authentication, awareness, cisa, cloud, credentials, cve, cyber, cybersecurity, data, data-breach, defense, dos, exploit, finance, framework, government, group, Hardware, identity, infrastructure, injection, Internet, iran, ivanti, malware, mfa, microsoft, middle-east, military, mitre, monitoring, network, password, ransomware, rce, remote-code-execution, risk, service, software, supply-chain, tactics, technology, terrorism, threat, tool, update, vpn, vulnerability, windowsTenable’s Research Special Operations team focuses on some frequently asked questions about Iranian cyber operations, including the tactics, techniques and procedures employed by Iran-based threat actors. Background Tenable’s Research Special Operations (RSO) team has compiled this blog to answer Frequently Asked Questions (FAQ) regarding Iranian cyber operations in the wake of the recent conflict and…
-
Windows 11 BSOD – Der Blue Screen of Death wird zum Black Screen
Der Blue Screen of Death (BSOD) als Fehlermeldung bei Microsoft Windows wird bald zum Black Screen of Death. First seen on computerbase.de Jump to article: www.computerbase.de/news/betriebssysteme/microsoft-windows-11-der-blue-screen-of-death-wird-zum-black-screen.93306
-
Windows 11 KB5060829 update released with 38 new changes, fixes
Microsoft has released the KB5060829 preview cumulative update for Windows 11 24H2, which includes 38 changes, including improvements to the taskbar and a new PC-to-PC migration experience. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-11-kb5060829-update-released-with-38-new-changes-fixes/
-
Windows Says Goodbye to Blue Screen of Death, Introduces Black Screen
After nearly four decades as a symbol of frustration and failure for PC users worldwide, Microsoft is officially retiring the iconic Blue Screen of Death (BSOD) in favor of a new, sleeker Black Screen of Death. The change, set to roll out later this summer with Windows 11 version 24H2, marks the most significant visual…
-
Windows File Explorer exploited in new ClickFix attack variant
First seen on scworld.com Jump to article: www.scworld.com/brief/windows-file-explorer-exploited-in-new-clickfix-attack-variant
-
Microsoft dangles extended Windows 10 support in exchange for Reward Points
Or your cloud-bound soul. Otherwise, $30 please First seen on theregister.com Jump to article: www.theregister.com/2025/06/25/microsoft_free_esu_tier/
-
Upcoming Microsoft Security, Resilience Updates Includes Ability To Run Services Outside Windows Kernel
Microsoft works with CrowdStrike, Trend Micro, ESET and other cybersecurity vendors to improve Windows security and resilience. First seen on crn.com Jump to article: www.crn.com/news/security/upcoming-microsoft-security-resilience-updates-includes-ability-to-run-services-outside-windows-kernel
-
Microsoft Windows Security, Resiliency Updates: 5 Things To Know
Microsoft is using its Microsoft Virus Initiative to improve competitor deployment practices, bringing a Windows endpoint security platform to private preview and launching quick machine recovery as part of a series of Windows security and resilience moves. First seen on crn.com Jump to article: www.crn.com/news/security/microsoft-windows-security-resiliency-updates-5-things-to-know
-
Microsoft to make Windows more resilient following 2024 IT outage
The company has been working with security partners to make sure future software updates don’t lead to operational disruptions for customers. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/microsoft-windows-resilient-2024-it-outage/751740/
-
SAP-Schwachstellen gefährden Windows-Nutzerdaten
Tags: access, compliance, cve, cvss, cyberattack, encryption, fortinet, GDPR, PCI, phishing, risk, sap, spear-phishing, update, vulnerability, windowsSchwachstellen in SAP GUI geben sensible Daten durch schwache oder fehlende Verschlüsselung preis.Die Forscher Jonathan Stross von Pathlock, und Julian Petersohn von Fortinet warnen vor zwei neuen Sicherheitslücken in einer Funktion von SAP GUI, die für die Speicherung der Benutzereingaben in den Windows- (CVE-2025-0055) und Java-Versionen (CVE-2025-0056) zuständig ist .Dadurch werden sensible Informationen wie Benutzernamen,…
-
Microsoft confirms Family Safety blocks Google Chrome from launching
Microsoft has confirmed that its Family Safety parental control service is blocking users from launching Google Chrome and other web browsers on Windows systems. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-confirms-family-safety-blocks-google-chrome-from-launching/
-
Researchers Demonstrate Windows Registry Manipulation via C++ Program
Cybersecurity researchers have developed a C++ program demonstrating how attackers manipulate the Windows Registry to establish persistence, evade defenses, and alter system behavior. This technique, central to many cyberattacks, exploits the registry’s role as Windows’ configuration database. The program uses Windows API functions to modify registry keys, simulating tactics employed by real-world malware while highlighting…
-
Windows Family Safety: Chrome-Blockade bestätigt
Nutzer beklagen sich seit Anfang Juni 2025, dass sie den Google Chrome-Browser nicht mehr verwenden können, wenn Microsoft Family Safety unter Windows installiert ist. Ich hatte darüber berichtet und nun hat Microsoft das Ganze offiziell in einem Support-Beitrag bestätigt … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/06/26/windows-family-safety-chrome-blockade-bestaetigt/
-
Google releases Gemini CLI with free Gemini 2.5 Pro
Google has released Gemini 2.5 Pro-powered Gemini CLI, which allows you to use Gemini inside your terminal, including Windows Terminal. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/artificial-intelligence/google-releases-gemini-cli-with-free-gemini-25-pro/
-
Citrix Bleed 2 Flaw Enables Token Theft; SAP GUI Flaws Risk Sensitive Data Exposure
Cybersecurity researchers have detailed two now-patched security flaws in SAP Graphical User Interface (GUI) for Windows and Java that, if successfully exploited, could have enabled attackers to access sensitive information under certain conditions.The vulnerabilities, tracked as CVE-2025-0055 and CVE-2025-0056 (CVSS scores: 6.0), were patched by SAP as part of its monthly updates for January First…
-
SAP GUI flaws expose sensitive data via weak or no encryption
Tags: attack, breach, cve, data, encryption, exploit, flaw, phishing, sap, spear-phishing, threat, update, vulnerability, windowsThe impact could be much greater: Dani noted that a breach through these vulnerabilities can facilitate further targeted attacks. “Not undermining the fact that this extracted data provides attackers with enough gunpowder for reconnaissance activities, a threat actor could comprehend organizational structure, usage patterns, and system configurations from the exploitation of these vulnerabilities and weaponize…
-
Windows 11 Configuration Bug Freezes Update Scanning Process
A recently discovered bug in Windows 11 has caused significant frustration among users, as the operating system’s update scanning process can freeze unexpectedly, leaving systems unable to check for or install critical updates. Microsoft has officially acknowledged the issue and is rolling out fixes to affected devices worldwide. The problem, which primarily impacts users running…