Time to Patch – Page 4 – PossibleThreat Articles

Wormable Flaw, 0days Lead Sept. 2022 Patch Tuesday

September 13, 2022 0 Comments asheer malhotra, Cisco Talos, dustin childs, ios 16, jon munshaw, kevin breen, lily hay newman, lockdown mode, microsoft patch tuesday september 2022, pangu lab, safety check, satnam narang, security tools, Time to Patch, trend micro, xinru chi

Credit to Author: BrianKrebs| Date: Wed, 14 Sep 2022 00:23:45 +0000

This month’s Patch Tuesday offers a little something for everyone, including security updates for a zero-day flaw in Microsoft Windows that is under active attack, and another Windows weakness experts say could be used to power a fast-spreading computer worm. Also, Apple has also quashed a pair of zero-day bugs affecting certain macOS and iOS users, and released iOS 16, which includes a nifty new privacy and security feature called “Lockdown Mode.” And Adobe axed 63 vulnerabilities in a range of products.

Independent Krebs Security

Microsoft Patch Tuesday, August 2022 Edition

August 9, 2022 0 Comments cve-2022-21980, cve-2022-24477, cve-2022-24516, cve-2022-30133, cve-2022-30134, cve-2022-34713, cve-2022-35743, follina, greg wiseman, immersive labs, kevin breen, microsoft patch tuesday august 2022, rapid7, sans internet storm center, Time to Patch, visual studio, windows hello

Credit to Author: BrianKrebs| Date: Tue, 09 Aug 2022 23:01:10 +0000

Microsoft today released updates to fix a record 141 security vulnerabilities in its Windows operating systems and related software. Once again, Microsoft is patching a zero-day vulnerability in the Microsoft Support Diagnostics Tool (MSDT), a service built into Windows. Redmond also addressed multiple flaws in Exchange Server — including one that was disclosed publicly prior to today — and it is urging organizations that use Exchange for email to update as soon as possible and to enable additional protections.

Independent Krebs Security

Microsoft Patch Tuesday, July 2022 Edition

July 12, 2022 0 Comments cve-2022-22022, cve-2022-22029, cve-2022-22038, cve-2022-22039, cve-2022-22041, cve-2022-22047, cve-2022-30206, cve-2022-30221, cve-2022-30226, dan goodin, greg wiseman, immersive labs, kevin breen, microsoft patch tuesday july 2022, rapid7, security tools, sergiu gatlan, tenable, Time to Patch

Credit to Author: BrianKrebs| Date: Wed, 13 Jul 2022 01:02:49 +0000

Microsoft today released updates to fix at least 86 security vulnerabilities in its Windows operating systems and other software, including a weakness in all supported versions of Windows that Microsoft warns is actively being exploited. The software giant also has made a controversial decision to put the brakes on a plan to block macros in Office documents downloaded from the Internet.

Independent Krebs Security

Microsoft Patch Tuesday, June 2022 Edition

June 14, 2022 0 Comments amit yoran, azure synapse, cve-2022-30190, follina, kevin beaumont, mayuresh dani, microsoft patch tuesday june 2022, microsoft support diagnostics tool, msdt, orca security, tenable, Time to Patch, trend micro zero day initiative

Credit to Author: BrianKrebs| Date: Wed, 15 Jun 2022 04:52:30 +0000

Microsoft on Tuesday released software updates to fix 60 security vulnerabilities in its Windows operating systems and other software, including a zero-day flaw in all supported Microsoft Office versions on all flavors of Windows that’s seen active exploitation for at least two months now. On a lighter note, Microsoft is officially retiring its Internet Explorer (IE) web browser, which turns 27 years old this year.

Independent Krebs Security

Microsoft Patch Tuesday, May 2022 Edition

May 10, 2022 0 Comments Adobe, cve-2022-26925, cve-2022-26937, dustin childs, greg wiseman, local security authortity, microsoft patch tuesday may 2022, petitpotam, rapid7, satnam narang, tenable, Time to Patch, trend micro zero day initiative, windows print spooler

Credit to Author: BrianKrebs| Date: Wed, 11 May 2022 02:34:59 +0000

Microsoft today released updates to fix at least 74 separate security problems in its Windows operating systems and related software. This month’s patch batch includes fixes for seven “critical” flaws, as well as a zero-day vulnerability that affects all supported versions of Windows.

Independent Krebs Security

Microsoft Patch Tuesday, April 2022 Edition

April 13, 2022 0 Comments Latest Warnings, security tools, Time to Patch

Credit to Author: BrianKrebs| Date: Wed, 13 Apr 2022 15:01:24 +0000

Microsoft on Tuesday released updates to fix roughly 120 security vulnerabilities in its Windows operating systems and other software. Two of the flaws have been publicly detailed prior to this week, and one is already seeing active exploitation, according to a report from the U.S. National Security Agency (NSA).

Independent Krebs Security

Microsoft Patch Tuesday, March 2022 Edition

March 9, 2022 0 Comments cve-2022-21967, cve-2022-21990, cve-2022-23277, cve-2022-23285, cve-2022-24459, cve-2022-24503, cve-2022-24508, cve-2022-24512, dustin childs, greg wiseman, immersive labs, kevin breen, microsoft exchange server, microsoft patch tuesday march 2022, rapid7, remote desktop, Time to Patch, trend micro zero day initiative, windows smbv3

Credit to Author: BrianKrebs| Date: Wed, 09 Mar 2022 16:22:12 +0000

Microsoft on Tuesday released software updates to plug at least 70 security holes in its Windows operating systems and related software. For the second month running, there are no scary zero-day threats looming for Windows users (that we know of), and relatively few “critical” fixes. And yet we know from experience that attackers are already trying to work out how to turn these patches into a roadmap for exploiting the flaws they fix. Here’s a look at the security weaknesses Microsoft says are most likely to be targeted first.

Independent Krebs Security

Microsoft Patch Tuesday, February 2022 Edition

February 8, 2022 0 Comments allan liska, andrew cunningham, ars technica, cve-2022-21989, cve-2022-21996, cve-2022-22005, greg wiseman, immersive labs, kevin breen, print spooler, rapid7, recorded future, Time to Patch, win32k

Credit to Author: BrianKrebs| Date: Tue, 08 Feb 2022 22:38:16 +0000

Microsoft today released software updates to plug security holes in its Windows operating systems and related software. This month’s relatively light patch batch is refreshingly bereft of any zero-day threats, or even scary critical vulnerabilities. But it does fix four dozen flaws, including several that Microsoft says will likely soon be exploited by malware or malcontents.

Independent Krebs Security

‘Wormable’ Flaw Leads January 2022 Patch Tuesday

February 2, 2022 0 Comments cve-2021-22947, cve-2021-36976, cve-2022-21846, cve-2022-21907, dustin childs, exchange server, http protocol stack, Latest Warnings, microsoft patch tuesday january 2022, National Security Agency, rapid7, satnam narang, tenable, The Coming Storm, Time to Patch, trend micro, zero day initiative

Credit to Author: BrianKrebs| Date: Tue, 11 Jan 2022 22:18:55 +0000

Microsoft today released updates to plug nearly 120 security holes in Windows and supported software. Six of the vulnerabilities were publicly detailed already, potentially giving attackers a head start in figuring out how to exploit them in unpatched systems. More concerning, Microsoft warns that one of the flaws fixed this month is “wormable,” meaning no human interaction would be required for an attack to spread from one vulnerable Windows box to another.

Independent Krebs Security

Microsoft Patch Tuesday, March 2020 Edition

March 17, 2020 0 Comments animesh jain, application inspector, cve-2020-0688, cve-2020-0852, cve-2020-0872, Qualys, recorded future, Time to Patch

Credit to Author: BrianKrebs| Date: Tue, 10 Mar 2020 23:44:29 +0000

Microsoft Corp. today released updates to plug more than 100 security holes in its various Windows operating systems and associated software. If you (ab)use Windows, please take a moment to read this post, backup your system(s), and patch your PCs.