Windows – Page 19 – PossibleThreat Articles

Credit to Author: Woody Leonhard| Date: Mon, 11 Nov 2019 05:03:00 -0800

For those of you who haven’t patched since May, there’s exceedingly bad news on the horizon. Per Catalin Cimpanu at ZDNet, Metasploit’s working-but-just-barely BlueKeep exploit is about to get a significant bug fix. That’ll put BlueKeep infection capabilities in the hands of mere mortals. The script kiddies won’t be far behind.

If you’re using — or you know someone who’s using — Windows XP, Vista, Win7, Server 2003, Server 2008 or Server 2008 R2, get patched now. The fix is easy. Even Aunt Martha can handle it.

To read this article in full, please click here

Security Sophos

Office for Mac 2011 users warned about SYLK file format

November 5, 2019 0 Comments Apple, cert/cc, mac, Microsoft, Microsoft Office, Operating Systems, security threats, sylk, Technologies, vulnerability, Windows, xml macro

Credit to Author: John E Dunn| Date: Tue, 05 Nov 2019 17:14:21 +0000

Still running Office 2011 on a Mac? If so, there are at least two reasons why that might not be a good idea.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/HjBh551ovHI” height=”1″ width=”1″ alt=””/>

ComputerWorld Independent

With a few exceptions, all’s clear to install Microsoft’s October patches

November 1, 2019 0 Comments PCs, Security, Windows

Credit to Author: Woody Leonhard| Date: Fri, 01 Nov 2019 09:54:00 -0700

If you had automatic update turned on at the beginning of October, you got clobbered with a bug-infested, out-of-band update for an IE-related zero-day that never appeared in real life. Later in the month, those with automatic update turned on were treated to a wide assortment of bugs (Start and Search fails, RDP redlines, older Visual Basic program blasts) – only some of which were solved with the month’s final, optional, non-security patches.

To read this article in full, please click here

ComputerWorld Independent

How to and why you should disable LLMNR with Windows Server

October 30, 2019 0 Comments Security, Windows

Link-Local Multicast Name Resolution could enable a man-in-the-middle attack, so it’s best to disable the protocol when setting up Windows Server 2019.

ComputerWorld Independent

Microsoft Patch Alert: October updates bring problems with Start, RDP, Ethernet, older VB programs

October 29, 2019 0 Comments Microsoft, Microsoft Office, PCs, Security, Windows

Credit to Author: Woody Leonhard| Date: Tue, 29 Oct 2019 12:18:00 -0700

October started out on an extraordinarily low note. On Oct. 3, Microsoft released an “out of band” security update to protect all Windows users from an Internet Explorer scripting engine bug, CVE-2019-1367, once thought to be an imminent danger to all things (and all versions) Windows.

It was the third attempt to fix that security hole and each of the versions brought its own set of bugs.

To read this article in full, please click here

ComputerWorld Independent

How to double-check permissions post migration from Windows 7

October 23, 2019 0 Comments Security, Windows

It pays to make sure all permissions in your Windows environment are correct after migrating from Windows 7 or Server 2008 R2. Here’s how to check.

ComputerWorld Independent

Microsoft’s Windows, Office 365 advice for secure elections

October 16, 2019 0 Comments Security, Windows

Microsoft has issued guidance and offered resources to help election officials and candidate campaigns to better protect their Windows and Office 365 systems.

ComputerWorld Independent

9 ways to use Windows 7 (safely) when support ends

October 15, 2019 0 Comments IT Strategy, Security, Windows, Windows Security

Credit to Author: Andy Patrizio| Date: Tue, 15 Oct 2019 11:51:00 -0700

With support ending in January, our Windows 7 Survival Guide for 2020 offers ways to protect your older machines that can't or won't be upgraded.

Security Sophos

Update now! Windows users targeted by iTunes Software Updater zero-day

October 15, 2019 0 Comments Apple, apple software updater, bitpaymer, iOS, itunes, OS X, Ransomware, security threats, vulnerability, Windows

Credit to Author: John E Dunn| Date: Tue, 15 Oct 2019 12:06:07 +0000

The flaw is a rare ‘unquoted path class’ described as “so thoroughly documented that you would expect programmers to be well aware…” But that’s not the case.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/PLucYEnVB5k” height=”1″ width=”1″ alt=””/>

Security Sophos

Microsoft fixes drop in number for October, 2019 updates

October 9, 2019 0 Comments Adobe, chakra, ChakraCore, Edge, elevation of privilege, exploits, Microsoft, Patch Tuesday, SophosLabs Uncut, updates, VBscript, vulnerability, Windows

Credit to Author: SophosLabs Offensive Security| Date: Wed, 09 Oct 2019 20:00:31 +0000

A relatively low number of vulnerabilities were addressed in this month’s Windows update rollups<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/kC7qjGbuUh8″ height=”1″ width=”1″ alt=””/>