Update Windows 10 Immediately to Patch a Flaw Discovered by the NSA

After Adobe today releases its first Patch Tuesday updates for 2020, Microsoft has now also published its January security advisories warning billions of users of 49 new vulnerabilities in its various products.

What’s so special about the latest Patch… Continue reading Update Windows 10 Immediately to Patch a Flaw Discovered by the NSA

Are You Ready for Microsoft Windows 7 End of Support on 14th January 2020?

January 14, 2020, is a day cybersecurity stakeholders should pay attention to, as it marks the end of Microsoft support in Windows 7.

From a security perspective, both the routine monthly security patches as well as hotfixes for attacks in the wild wi… Continue reading Are You Ready for Microsoft Windows 7 End of Support on 14th January 2020?

New Chrome 0-day Bug Under Active Attacks – Update Your Browser Now!

Attention readers, if you are using Chrome on your Windows, Mac, and Linux computers, you need to update your web browsing software immediately to the latest version Google released earlier today.

With the release of Chrome 78.0.3904.87, Google is war… Continue reading New Chrome 0-day Bug Under Active Attacks – Update Your Browser Now!

Patches for 2 Severe LibreOffice Flaws Bypassed — Update to Patch Again

If you are using LibreOffice, you need to update it once again.

LibreOffice has released the latest version 6.2.6/6.3.0 of its open-source office software to address three new vulnerabilities that could allow attackers to bypass patches for two previo… Continue reading Patches for 2 Severe LibreOffice Flaws Bypassed — Update to Patch Again

New Brute-Force Botnet Targeting Over 1.5 Million RDP Servers Worldwide

Security researchers have discovered an ongoing sophisticated botnet campaign that is currently brute-forcing more than 1.5 million publicly accessible Windows RDP servers on the Internet.

Dubbed GoldBrute, the botnet scheme has been designed in a way… Continue reading New Brute-Force Botnet Targeting Over 1.5 Million RDP Servers Worldwide

Update: Hacker Disclosed 4 New Microsoft Zero-Day Exploits in Last 24 Hours

Less than 24 hours after publicly disclosing an unpatched zero-day vulnerability in Windows 10, the anonymous hacker going by online alias “SandboxEscaper” has now dropped new exploits for two more unpatched Microsoft zero-day vulnerabilities.

The two… Continue reading Update: Hacker Disclosed 4 New Microsoft Zero-Day Exploits in Last 24 Hours

PoC Exploit For Unpatched Windows 10 Zero-Day Flaw Published Online

An anonymous hacker with an online alias “SandboxEscaper” today released proof-of-concept (PoC) exploit code for a new zero-day vulnerability affecting Windows 10 operating system—that’s his/her 5th publicly disclosed Windows zero-day exploit [1, 2, 3]… Continue reading PoC Exploit For Unpatched Windows 10 Zero-Day Flaw Published Online

Microsoft Releases Patches For A Critical ‘Wormable Flaw’ and 78 Other Issues

It’s Patch Tuesday—the day when Microsoft releases monthly security updates for its software.

Microsoft has software updates to address a total of 79 CVE-listed vulnerabilities in its Windows operating systems and other products, including a critical … Continue reading Microsoft Releases Patches For A Critical ‘Wormable Flaw’ and 78 Other Issues

Researcher Hijacks a Microsoft Service Using Loophole in Azure Cloud Platform

A cybersecurity professional today demonstrated a long-known unpatched weakness in Microsoft’s Azure cloud service by exploiting it to take control over Windows Live Tiles, one of the key features Microsoft built into Windows 8 operating system.

Intro… Continue reading Researcher Hijacks a Microsoft Service Using Loophole in Azure Cloud Platform