rapid7 – PossibleThreat Articles

Bug Left Some Windows PCs Dangerously Unpatched

September 12, 2024 0 Comments cve-2024-38217, cve-2024-38226, cve-2024-43491, immersive labs, kev breen, mark of the web, Microsoft, Microsoft Office, patch tuesday september 2024, rapid7, satnam narang, Time to Patch

Credit to Author: BrianKrebs| Date: Tue, 10 Sep 2024 21:46:21 +0000

Microsoft Corp. today released updates to fix at least 79 security vulnerabilities in its Windows operating systems and related software, including multiple flaws that are already showing up in active attacks. Microsoft also corrected a critical bug that has caused some Windows 10 PCs to remain dangerously unpatched against actively exploited vulnerabilities for several months this year.

Independent Krebs Security

Patch Tuesday, June 2024 “Recall” Edition

June 11, 2024 0 Comments adam barnett, copilot, cve-2004-30080, cve-2024-30078, immersive labs, kevin beaumont, kevin breen, mastodon, microsoft message queuing, microsoft patch tuesday june 2024, patrick gray, rapid7, recall, risky business podcast, Time to Patch, Windows, windows wifi driver

Credit to Author: BrianKrebs| Date: Tue, 11 Jun 2024 22:57:35 +0000

Microsoft today released updates to fix more than 50 security vulnerabilities in Windows and related software, a relatively light Patch Tuesday this month for Windows administrators. The software giant also responded to a torrent of negative feedback on a new feature of Redmond’s flagship operating system that constantly takes screenshots of whatever users are doing on their computers, saying the feature would no longer be enabled by default.

Independent Krebs Security

Fat Patch Tuesday, February 2024 Edition

February 13, 2024 0 Comments adam barnett, cve-2024-21351, cve-2024-21410, cve-2024-21412, cve-2024-21413, immersive labs, kevin breen, Latest Warnings, Microsoft Office, patch tuesday february 2024, rapid7, satnam narang, security tools, tenable, Time to Patch, trend micro, windows smartscreen

Credit to Author: BrianKrebs| Date: Tue, 13 Feb 2024 22:28:48 +0000

Microsoft Corp. today pushed software updates to plug more than 70 security holes in its Windows operating systems and related products, including two zero-day vulnerabilities that are already being exploited in active attacks.

Independent Krebs Security

Patch Tuesday, October 2023 Edition

October 10, 2023 0 Comments adam barnett, amazon, Apple, CloudFlare, cve-2023-35349, cve-2023-36563, cve-2023-36778, cve-2023-41763, cve-2023-44487, damian menscher, Google, immersive labs, ios 17.0.3, ipados 17.0.3, libvpx, Microsoft, natalie silva, patch tuesday october 2023, rapid reset attack, rapid7, security tools, skype for business, Time to Patch, Windows, wordpad

Credit to Author: BrianKrebs| Date: Tue, 10 Oct 2023 22:51:31 +0000

Microsoft today issued security updates for more than 100 newly-discovered vulnerabilities in its Windows operating system and related software, including four flaws that are already being exploited. In addition, Apple recently released emergency updates to quash a pair of zero-day bugs in iOS.

Independent Krebs Security

Apple & Microsoft Patch Tuesday, July 2023 Edition

July 11, 2023 0 Comments adam barnett, andrew brandt, apple zero-day, Cisco, cve-2023-32046, cve-2023-32049, cve-2023-35311, cve-2023-36884, immersive labs, ios 16.5.1, kevin breen, macos 13.4.1, patch tuesday july 2023, rapid7, safari 16.5.2, security tools, sophos, storm-0978, Time to Patch, trend micro

Credit to Author: BrianKrebs| Date: Tue, 11 Jul 2023 22:55:07 +0000

Microsoft Corp. today released software updates to quash 130 security bugs in its Windows operating systems and related software, including at least five flaws that are already seeing active exploitation. Meanwhile, Apple customers have their own zero-day woes again this month: On Monday, Apple issued (and then quickly pulled) an emergency update to fix a zero-day vulnerability that is being exploited on MacOS and iOS devices.

Independent Krebs Security

Barracuda Urges Replacing — Not Patching — Its Email Security Gateways

June 8, 2023 0 Comments barracuda networks, caitlin condon, cve-2023-2868, email security gateway, international computer science institute, Latest Warnings, mandiant, nicholas weaver, rapid7, Time to Patch

Credit to Author: BrianKrebs| Date: Thu, 08 Jun 2023 20:17:06 +0000

It’s not often that a zero-day vulnerability causes a network security vendor to urge customers to physically remove and decommission an entire line of affected hardware — as opposed to just applying software updates. But experts say that is exactly what transpired this week with Barracuda Networks, as the company struggled to combat a sprawling malware threat which appears to have undermined its email security appliances in such a fundamental way that they can no longer be safely updated with software fixes.

Independent Krebs Security

Microsoft Patch Tuesday, May 2023 Edition

May 11, 2023 0 Comments adam barnett, blacklotus, cve-2023-24932, cve-2023-24941, cve-2023-28283, cve-2023-29325, cve-2023-29336, immersive labs, kevin breen, rapid7, sans internet storm center, Time to Patch

Credit to Author: BrianKrebs| Date: Wed, 10 May 2023 01:19:58 +0000

Microsoft today released software updates to fix at least four dozen security holes in its Windows operating systems and other software, including patches for two zero-day vulnerabilities that are already being exploited in active attacks.

Independent Krebs Security

Microsoft Patch Tuesday, March 2023 Edition

March 15, 2023 0 Comments cve-2023-23397, cve-2023-24800, dustin childs, immersive labs, kevin breen, microsoft 365 apps for enterprise, microsoft patch tuesday march 2023, rapid7, security tools, The Coming Storm, Time to Patch, windows smartscreen, zero day initiative

Credit to Author: BrianKrebs| Date: Wed, 15 Mar 2023 15:19:32 +0000

Microsoft on Tuesday released updates to quash at least 74 security bugs in its Windows operating systems and software. Two of those flaws are already being actively attacked, including an especially severe weakness in Microsoft Outlook that can be exploited without any user interaction.

Independent Krebs Security

Microsoft Patch Tuesday, December 2022 Edition

December 14, 2022 0 Comments apple zero-day, cve-2022-41076, cve-2022-44698, cve-2022-44710, cve-2022-44713, greg wiseman, immersive labs, kevin breen, Latest Warnings, microsoft patch tuesday december 2022, PowerShell, rapid7, security tools, sophos, Time to Patch, trend micro's zero day initiative, will dormann, Windows

Credit to Author: BrianKrebs| Date: Wed, 14 Dec 2022 17:01:07 +0000

Microsoft has released its final monthly batch of security updates for 2022, fixing more than four dozen security holes in its various Windows operating systems and related software. The most pressing patches include a zero-day vulnerability in a Windows feature that tries to flag malicious files from the Web, a critical bug in PowerShell, and a dangerous flaw in Windows 11 systems that was detailed publicly prior to this week’s Patch Tuesday.

Independent Krebs Security

Microsoft Patch Tuesday, October 2022 Edition

October 11, 2022 0 Comments caitlin condon, cve-2022-37968, cve-2022-41033, immersive labs, kevin breen, Latest Warnings, microsoft patch tuesday october 2022, rapid7, satnam narang, tenable, Time to Patch

Credit to Author: BrianKrebs| Date: Tue, 11 Oct 2022 21:06:23 +0000

Microsoft today released updates to fix at least 85 security holes in its Windows operating systems and related software, including a new zero-day vulnerability in all supported versions of Windows that is being actively exploited. However, noticeably absent from this month’s Patch Tuesday are any updates to address a pair of zero-day flaws being exploited this past month in Microsoft Exchange Server.

← Previous