Microsoft delivers a solid, low-impact Patch Tuesday

Credit to Author: Greg Lambert| Date: Sat, 12 Mar 2022 05:10:00 -0800

March brings us a solid set of updates from Microsoft for Windows, Microsoft Office, Exchange, and Edge (Chromium), but no critical issues requiring a “Patch Now” release schedule (though Microsoft Exchange will require some technical effort this month). We have published some testing guidelines, with a focus on printing, remote desktop over VPN connections, and server-based networking changes. We also recommend testing your Windows installer packages with a specific focus on roll-back and uninstall functionality.

You can find more information about the risk of deploying these Patch Tuesday updates with this useful infographic. And, if you are looking for more information on .NET updates, there is a great post from Microsoft that highlights this month’s changes.

To read this article in full, please click here

Read more

Blunting RDP brute-force attacks with rate limiting

Credit to Author: Mark Stockley| Date: Fri, 11 Mar 2022 22:33:07 +0000

Rate limiting can slow a determined password guessing attack to a crawl, giving defenders months of extra time to respond.

The post Blunting RDP brute-force attacks with rate limiting appeared first on Malwarebytes Labs.

Read more

HBO sued for sharing subscriber data with Facebook

Credit to Author: Malwarebytes Labs| Date: Fri, 11 Mar 2022 20:50:16 +0000

Some HBO Max subscribers have filed a class action suit against HBO for allegedly sharing their data with Facebook, without their consent.

The post HBO sued for sharing subscriber data with Facebook appeared first on Malwarebytes Labs.

Read more

Report: Recent 10x Increase in Cyberattacks on Ukraine

Credit to Author: BrianKrebs| Date: Fri, 11 Mar 2022 16:50:11 +0000

As their cities suffered more intense bombardment by Russian military forces this week, Ukrainian Internet users came under renewed cyberattacks, with one Internet company providing service there saying they blocked ten times the normal number of phishing and malware attacks targeting Ukrainians.

Read more

Linux “Dirty Pipe” vulnerability gives unprivileged users root access

Credit to Author: Pieter Arntz| Date: Fri, 11 Mar 2022 14:38:30 +0000

A vulnerability in the Linux kernel allows an unprivileged user to overwrite data in read-only files owned by root.

The post Linux “Dirty Pipe” vulnerability gives unprivileged users root access appeared first on Malwarebytes Labs.

Read more

Why decentralization is the future of digital identities

Credit to Author: Emma Jones| Date: Thu, 10 Mar 2022 17:00:00 +0000

Our identity is increasingly becoming digitized –more of our hard copy credentials are converting into digital formats. We use these digital credentials to work, learn, play, socialize, shop, and consume services online and offline every day.

The post Why decentralization is the future of digital identities appeared first on Microsoft Security Blog.

Read more