Windows – Page 15 – PossibleThreat Articles

Yesterday we were treated to a remarkable Patch Tuesday. “Remarkable” specifically in the sense that the U.S. National Security Agency was moved to put out a press release (PDF):

NSA recommends installing all January 2020 Patch Tuesday patches as soon as possible to effectively mitigate the vulnerability on all Windows 10 and Windows Server 2016/2019 systems.
To read this article in full, please click here

Security Sophos

Microsoft fixes critical bugs in CryptoAPI, RD Gateway and .NET

January 15, 2020 0 Comments Adobe, barcelona, CVEs, Microsoft, Operating Systems, Patch Tuesday, Patches, rce, rd gateway, RDP, remote code execution, security threats, vulnerability, Windows, windows remote desktop gateway, windows server

Credit to Author: Danny Bradbury| Date: Wed, 15 Jan 2020 12:10:33 +0000

Here are the most serious bugs from Microsoft’s Patch Tuesday – Including CryptoAPI and RCE flaws in Windows Remote Desktop Gateway.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/_JcrLmlUQmc” height=”1″ width=”1″ alt=””/>

ComputerWorld Independent

Microsoft to Windows 7: Beat it, you bum

January 14, 2020 0 Comments Microsoft, PCs, Security, Windows

Credit to Author: Gregg Keizer| Date: Tue, 14 Jan 2020 12:36:00 -0800

Microsoft today figuratively told Window 7 – which ended support with a final security update – not to let the door hit it on the way out.

“Ten-year-old tech just can’t keep up,” Jared Spataro, an executive on the Microsoft 365 team, wrote in a post to a company blog. “As we end support for Windows 7, I encourage you to transition to these newer options right away.”

Not surprisingly, Spataro named those newer options as Windows 10 to replace Windows 7, and Office 365 to fill in for the retiring-in-October Office 2010. Combined, they make up the bulk of Microsoft 365, the business subscription plan Microsoft wants all customers to adopt.

To read this article in full, please click here

Security Sophos

January 2020 Patch Tuesday delivers fixes for 50 bugs

January 14, 2020 0 Comments chromium, Edge, elevation of privilege, exploits, Microsoft, Patch Tuesday, RDP, SophosLabs Uncut, updates, vulnerability, Windows

Credit to Author: SophosLabs Offensive Security| Date: Tue, 14 Jan 2020 18:15:18 +0000

This month’s big security news from Microsoft is the end of support for Windows 7, and a patch of a cryptographic library<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/wiyw9sHJyLE” height=”1″ width=”1″ alt=””/>

ComputerWorld Independent

Today's Patch Tuesday brings fireworks and — a magic bullet?

January 14, 2020 0 Comments Microsoft, Security, Windows

Credit to Author: Woody Leonhard| Date: Tue, 14 Jan 2020 05:48:00 -0800

Over the past few years we’ve seen a few security holes that have drawn Chicken Little warnings and vast amounts of unthinking press reports. When you turn on a local news program and hear from the hometown weather reporter that you really need to get Windows patched, a bit of skepticism might be in order.

Today’s Patch Tuesday appears to be headed down the same well-worn chute.

Brian Krebs, the security guru with impeccable credentials, fired an opening salvo in his blog post yesterday:

To read this article in full, please click here

ComputerWorld Independent

Seven high points of Windows 7

January 14, 2020 0 Comments Microsoft, PCs, Security, Windows

Credit to Author: Gregg Keizer| Date: Tue, 14 Jan 2020 04:16:00 -0800

Today Microsoft issues its final free security update for Windows 7, putting an end to that operating system’s decade.

To remember that service – a retirement party but without the cloyingly-sweet cake and cheap gold watch – Computerworld selected seven highlights of Windows 7. While the seven do not pretend to trace Windows 7’s history, they illustrate the influence and impact of the OS.

Here’s to Windows 7. Raise a glass, for cryin’ out loud.

It salvaged Microsoft’s reputation after the Vista debacle

The numbers say it all.

Windows Vista, the 2006 replacement for Windows XP, topped out at 20% of all Windows versions in October 2009. Even though the OS it followed was long in the tooth – XP was nearly twice the age of a typical version when it was supplanted – Vista struggled to put a dent in its forerunner’s share.

To read this article in full, please click here

ComputerWorld Independent

Saying goodbye to Windows 7 isn’t easy, but you must

January 14, 2020 0 Comments Security, Windows

Credit to Author: Steven J. Vaughan-Nichols| Date: Tue, 14 Jan 2020 03:00:00 -0800

Listen, I get it. Windows 7 has worked really well. After the Vista fiasco, you were so happy to get a decent version of Windows. You dodged the Windows 8.x sinkhole, and, boy, were you glad! Then, you thought about Windows 10, but 7 just did the job so you stuck with it, and then you felt vindicated because of Windows 10’s dodgy upgrades and patches. Now, today, Jan. 14, 2020, Windows 7 has reached its end of life, and either you’ve upgraded to Windows 10 or you’re working on another Windows 7 alternative like Chrome OS, macOS or Linux, right?

To read this article in full, please click here

Independent Krebs Security

Cryptic Rumblings Ahead of First 2020 Patch Tuesday

January 13, 2020 0 Comments anne neuberger, cert coordination center, cert/cc, crypt32.dll, Microsoft, microsoft cryptoapi, National Security Agency, NSA, patch tuesday january 2020, Time to Patch, will dormann, Windows

Credit to Author: BrianKrebs| Date: Mon, 13 Jan 2020 22:17:47 +0000

Sources tell KrebsOnSecurity that Microsoft Corp. is slated to release a software update on Tuesday to fix an extraordinarily serious security vulnerability in a core cryptographic component present in all versions of Windows. Those sources say Microsoft has quietly shipped a patch for the bug to branches of the U.S. military and to other high-value customers/targets that manage key Internet infrastructure, and that those organizations have been asked to sign agreements preventing them from disclosing details of the flaw prior to Jan. 14, the first Patch Tuesday of 2020.

ComputerWorld Independent

Your Windows PC may become collateral damage in any conflict with Iran

January 9, 2020 0 Comments cyber attacks, Security, Windows

Credit to Author: Preston Gralla| Date: Thu, 09 Jan 2020 10:18:00 -0800

When Iran launches cyberattacks in revenge for the killing of Major Gen. Qasem Soleimani — which it almost certainly will do — the attack vector, as always, will be Windows. And when that happens, your PC and your business’s PCs will be right in the crosshairs. Here’s why — and how you can protect your machines and your business.

A long history of U.S.-Iranian cyberwarfare

To understand the coming cyberattacks, it’s useful to look back. For more than a decade, the U.S. and Iran have engaged in low-level cyberwarfare, with occasional bursts of higher-level attacks. The most destructive of them was Stuxnet, launched in 2009 by the U.S. and Israel against Iran’s nuclear program. It exploited four zero-day flaws in Windows machines, which controlled the centrifuges Iran used to create nuclear material that can be used in nuclear weapons.

To read this article in full, please click here