Category Archives: Immersive Labs

Microsoft Patch Tuesday, August 2022 Edition

Posted on by

Microsoft today released updates to fix a record 141 security vulnerabilities in its Windows operating systems and related software. Once again, Microsoft is patching a zero-day vulnerability in the Microsoft Support Diagnostics Tool (MSDT), a service built into Windows. Redmond also addressed multiple flaws in Exchange Server — including one that was disclosed publicly prior to today — and it is urging organizations that use Exchange for email to update as soon as possible and to enable additional protections. Continue reading Microsoft Patch Tuesday, August 2022 Edition→

Microsoft fixes exploited zero-day in Windows Support Diagnostic Tool (CVE-2022-34713)

Posted on by

The August 2022 Patch Tuesday has arrived, with fixes for an unexpectedly high number of vulnerabilities in various Microsoft products, including two zero-days: one actively exploited (CVE-2022-34713) and one not yet (CVE-2022-30134). Vulnerabilities t… Continue reading Microsoft fixes exploited zero-day in Windows Support Diagnostic Tool (CVE-2022-34713)→

Microsoft Patch Tuesday, July 2022 Edition

Posted on by

Microsoft today released updates to fix at least 86 security vulnerabilities in its Windows operating systems and other software, including a weakness in all supported versions of Windows that Microsoft warns is actively being exploited. The software giant also has made a controversial decision to put the brakes on a plan to block macros in Office documents downloaded from the Internet. Continue reading Microsoft Patch Tuesday, July 2022 Edition→

Photos: Infosecurity Europe 2022, part 2

Posted on by

It’s day two of Infosecurity Europe 2022 at the ExCeL in London. Here’s a look at the event, the featured vendors are: Akamai, SecurityScorecard, Edgescan, ManageEngine, Securonix, F5, ServiceNow, and Vade. The first photo gallery is availa… Continue reading Photos: Infosecurity Europe 2022, part 2→

Immersive Labs Cyber Team Sim prepares teams for real-life cyber attacks

Posted on by

Immersive Labs announced the launch of technical multiplayer simulations, including scenarios for both offensive and defensive teams in complex environments. This capability offers security teams the ability to use their own tool sets for a more releva… Continue reading Immersive Labs Cyber Team Sim prepares teams for real-life cyber attacks→

Microsoft patches Windows LSA spoofing zero-day under active attack (CVE-2022-26925)

Posted on by

May 2022 Patch Tuesday is here, and Microsoft has marked it by releasing fixes for 74 CVE-numbered vulnerabilities, including one zero-day under active attack (CVE-2022-26925) and two publicly known vulnerabilities (CVE-2022-29972 and CVE-2022-22713). … Continue reading Microsoft patches Windows LSA spoofing zero-day under active attack (CVE-2022-26925)→

How fast can organizations respond to a cybersecurity crisis?

Posted on by

Immersive Labs launched an analysis of human cyber capabilities. The report analyzed cyber knowledge, skills and judgment from over half a million exercises and simulations run by more than 2,100 organizations in the last 18 months. These were broken d… Continue reading How fast can organizations respond to a cybersecurity crisis?→

Microsoft Patch Tuesday, March 2022 Edition

Posted on by

Microsoft on Tuesday released software updates to plug at least 70 security holes in its Windows operating systems and related software. For the second month running, there are no scary zero-day threats looming for Windows users (that we know of), and relatively few “critical” fixes. And yet we know from experience that attackers are already trying to work out how to turn these patches into a roadmap for exploiting the flaws they fix. Here’s a look at the security weaknesses Microsoft says are most likely to be targeted first. Continue reading Microsoft Patch Tuesday, March 2022 Edition→

March 2022 Patch Tuesday: Microsoft fixes RCEs in RDP client, Exchange Server

Posted on by

Microsoft marks March 2022 Patch Tuesday with patches for 71 CVE-numbered vulnerabilities, including three previously unknown “critical” ones and three “important” ones that were already public (but not actively exploited by att… Continue reading March 2022 Patch Tuesday: Microsoft fixes RCEs in RDP client, Exchange Server→

Microsoft Patch Tuesday, February 2022 Edition

Posted on by

Microsoft today released software updates to plug security holes in its Windows operating systems and related software. This month’s relatively light patch batch is refreshingly bereft of any zero-day threats, or even scary critical vulnerabilities. But it does fix four dozen flaws, including several that Microsoft says will likely soon be exploited by malware or malcontents. Continue reading Microsoft Patch Tuesday, February 2022 Edition→