Patch Tuesday – Page 4 – PossibleThreat Articles

Security Sophos

S3 Ep143: Supercookie surveillance shenanigans

July 13, 2023 0 Comments Microsoft, Naked Security Podcast, Patch Tuesday, Podcast, rowhammer, vulnerability

Credit to Author: Paul Ducklin| Date: Thu, 13 Jul 2023 16:48:00 +0000

Latest episode – listen now! (Full transcript inside.)

Security Sophos

Microsoft patches four zero-days, finally takes action against crimeware kernel drivers

July 12, 2023 0 Comments elevation of privilege, eop, Microsoft, Patch Tuesday, security bypass, vulnerability

Credit to Author: Paul Ducklin| Date: Wed, 12 Jul 2023 18:57:00 +0000

Here’s a brief reminder to do two things. The first is to patch. The second is to read up why it’s a good idea to patch…

Security Sophos

Microsoft Revokes Malicious Drivers in Patch Tuesday Culling

July 11, 2023 0 Comments 2023-07, anti-edr, drivers, drivers.stl, EDR, featured, fivesys, fk_undead, fu rootkit, netfilter, Patch Tuesday, Patches, rootkit, sophos x-ops, threat research, uac, wfp, windows filtering platform, windows update

Credit to Author: Andrew Brandt| Date: Tue, 11 Jul 2023 17:20:38 +0000

In December 2022, Microsoft published their monthly Windows Update packages that included an advisory about malicious drivers, signed by Microsoft and other code-signing authorities, that Sophos X-Ops (and others) observed threat actors abusing during attacks. Today, Microsoft issued Security Advisory ADV230001 as part of their July Windows Update that addresses Sophos’ discovery of more than […]

Security Sophos

July’s Patch Tuesday: A rich harvest

July 11, 2023 0 Comments adv23001, cve-2023-32049, featured, Patch Tuesday, threat research

Credit to Author: Angela Gunn| Date: Tue, 11 Jul 2023 17:18:08 +0000

Over a hundred Windows patches, a high-impact advisory, and a guest appearance by… Internet Explorer?!

MalwareBytes Security

Microsoft fixes six critical vulnerabilities in June Patch Tuesday

June 14, 2023 0 Comments cve-2023-24897, cve-2023-29357, cve-2023-29363, cve-2023-32013, cve-2023-32014, cve-2023-32015, cve-2023-32031, exchange, Exploits and vulnerabilities, Hyper-V, Microsoft, news, Patch Tuesday, pgm, sharepoint

Categories: Exploits and vulnerabilities

Categories: News

Tags: Microsoft

Tags: patch Tuesday

Tags: CVE-2023-29357

Tags: CVE-2023-29363

Tags: CVE-2023-32014

Tags: CVE-2023-32015

Tags: CVE-2023-32013

Tags: CVE-2023-24897

Tags: CVE-2023-32031

Tags: SharePoint

Tags: PGM

Tags: Exchange

Tags: Hyper-V

Patch Tuesday of June 2023 is relatively relaxed. No actively exploited zero-days and only six critical vulnerabilities.

Security Sophos

Patch Tuesday fixes 4 critical RCE bugs, and a bunch of Office holes

June 13, 2023 0 Comments Microsoft, office, Patch Tuesday, sharepoint, vulnerability

Credit to Author: Paul Ducklin| Date: Tue, 13 Jun 2023 23:32:18 +0000

No zero-days this month, if you ignore the Edge RCE hole patched last week

Security Sophos

A smorgasbord for June’s Patch Tuesday

June 13, 2023 0 Comments Adobe, autodesk, cve-2023-29357, cve-2023-29363, cve-2023-32014, cve-2023-32015, cve-2023-33146, featured, fortinet, github, Microsoft, Patch Tuesday, threat research, Windows

Credit to Author: Angela Gunn| Date: Tue, 13 Jun 2023 21:05:13 +0000

Between its own fixes and a slew of FYI alerts covering Edge, GitHub, and Autodesk, Microsoft piles 94 CVEs onto sysadmins’ plates; Fortinet and Adobe also at the table

MalwareBytes Security