Windows – Page 9 – PossibleThreat Articles

After a Windows update, what should you expect?

June 6, 2022 0 Comments Microsoft, Security, small and medium business, Windows

Credit to Author: Susan Bradley| Date: Mon, 06 Jun 2022 05:17:00 -0700

Let’s get this straight: It’s not normal for a Windows update to remove software. It’s designed to install the update, not change software already in place on your system.

At least, updates are not supposed to remove software. Since March, however, if you run the RDgateway broker service on Server 2022 (and only that version), the monthly cumulative updates have removed that service. This behavior is not normal; this is a bug.

As Microsoft notes in the Microsoft 365 Admin dashboard: “We have received reports that after installing KB5005575 or later updates on Windows Server 2022 Standard Edition, Remote Desktop Services Connection Broker role and supporting services might be removed unexpectedly. We have expedited investigation and are working on a resolution. Note: Windows Server 2022 Datacenter edition and other versions of Windows Server are not affected by this issue.”

To read this article in full, please click here

Security Sophos

Yet another zero-day (sort of) in Windows “search URL” handling

June 2, 2022 0 Comments Microsoft, url, vulnerability, Windows

Credit to Author: Paul Ducklin| Date: Thu, 02 Jun 2022 13:46:57 +0000

More trouble with special-purpose URLs on Windows.

ComputerWorld Independent

Windows 11: Should you bypass the hardware block?

May 31, 2022 0 Comments small and medium business, Windows, Windows 10, windows 11, Windows Security

Credit to Author: Susan Bradley| Date: Tue, 31 May 2022 12:55:00 -0700

If you’re like most PC users, your current computer can’t run Windows 11. Microsoft has placed a line in the hardware sand to ensure that only modern machines with certain specifications that harden security can run Windows 11.

Well, sort of. The company provides a workaround, as I’ll discuss in a moment. Whether you should take advantage of this loophole to upgrade PCs (whether yours or your users’) to Windows 11 is the question.

First, if you want to know if a computer can run Windows 11, you can use the PC Health Check app, Microsoft’s diagnostic tool. But if your PC doesn’t support Windows 11, Microsoft’s app doesn’t do a great job of explaining why. Instead, I recommend using either the Windows 11 Requirements Check Tool from ByteJams.com or WhyNotWin11, available on Github. Both tools provide granular detail about why a machine won’t run Windows 11. On my personal laptop at home, for instance, the processor can’t support hardware for hypervisor enforced code integrity, nor does Windows 11 like the graphics display.

To read this article in full, please click here

MalwareBytes Security

Update now! Nvidia released fixes for 10 flaws in Windows GPU drivers

May 28, 2022 0 Comments cve-2022-28181, cve-2022-28182, cve-2022-28183, cve-2022-28184, cve-2022-28185, cve-2022-28186, cve-2022-28187, cve-2022-28188, cve-2022-28189, cve-2022-28190, Exploits and vulnerabilities, kernel mode layer, Linux, NVIDIA, out-of-bounds, Windows

Credit to Author: Jovi Umawing| Date: Mon, 23 May 2022 11:15:01 +0000

NVIDIA recently released patches to address multiple flaws in Windows. Four of them were rated high in severity.

The post Update now! Nvidia released fixes for 10 flaws in Windows GPU drivers appeared first on Malwarebytes Labs.

Security Sophos

Microsoft patches the Patch Tuesday patch that broke authentication

May 20, 2022 0 Comments authentication, Microsoft, out-of-band, patch-to-patch, vulnerability, Windows, woindows

Credit to Author: Paul Ducklin| Date: Fri, 20 May 2022 22:35:09 +0000

Remember the good old days when security patches rarely needed patches? Because security patches themlelves were rare enough anyway?

ComputerWorld Independent

Not all patching problems are created equal

May 16, 2022 0 Comments Microsoft, Microsoft Office, Security, small and medium business, Windows

Credit to Author: Susan Bradley| Date: Mon, 16 May 2022 09:00:00 -0700

It’s the third week of the month — the week we find out whether Microsoft acknowledges any side effects it’s investigating as part of the monthly patch-release process.

First, a bit of background. Microsoft has released patches for years. But they haven’t always been released on a schedule. In the early days, Microsoft would release updates any day of the week. Then in October 2003, Microsoft formalized the release of normal security updates on the second Tuesday of the month. Thus was born Patch Tuesday. (Note: depending on where you are in the world, Patch Tuesday may be a Patch Wednesday.) The following day, or in some cases, over the next week, users and admins report issues with updates — and Microsoft finally acknowledges that, yes, there are issues.

To read this article in full, please click here

ComputerWorld Independent

May's Patch Tuesday updates make urgent patching a must

May 14, 2022 0 Comments Microsoft, Microsoft Office, Security, small and medium business, Windows

Credit to Author: Greg Lambert| Date: Sat, 14 May 2022 05:51:00 -0700

This past week’s Patch Tuesday started with 73 updates, but ended up (so far) with three revisions and a late addition (CVE-2022-30138) for a total of 77 vulnerabilities addressed this month. Compared with the broad set of updates released in April, we see a greater urgency in patching Windows — especially wiith three zero-days and several very serious flaws in key server and authentication areas. Exchange will require attention, too, due to new server update technology.

To read this article in full, please click here

Security Sophos

Hyper-V and Active Directory Front and Center for May Patch Tuesday

May 10, 2022 0 Comments Hyper-V, Microsoft, Patch Tuesday, SophosLabs Uncut, threat research, Windows

Credit to Author: Christopher Budd| Date: Tue, 10 May 2022 17:47:43 +0000

Organizations should look at last month’s and this month’s bulletins and put their Hyper-V and Active Directory servers and infrastructure at the top of the priority list.

QuickHeal Security

Update Security Certificate to Install Quick Heal Product Successfully

May 4, 2022 0 Comments security certificate, Uncategorized, update, Windows

Credit to Author: Quickheal| Date: Wed, 04 May 2022 10:30:05 +0000

Issue Received the following installer setup file corruption error during installation of the Quick Heal product. Reason This…

The post Update Security Certificate to Install Quick Heal Product Successfully appeared first on Quick Heal Blog | Latest computer security news, tips, and advice.

ComputerWorld Independent

Russia is losing the cyberwar against Ukraine, too

May 2, 2022 0 Comments Security, small and medium business, Windows

Credit to Author: Preston Gralla| Date: Mon, 02 May 2022 03:00:00 -0700

When Russia launched its all-out attack against Ukraine in February, the world expected the invaders to roll over the country quickly. That didn’t happen, and Ukraine today, though still under assault, has so far thwarted Russia’s ambitions to conquer it.

Russia has also been fighting a quieter war against Ukraine, a cyberwar, deploying what had been considered the most feared state-sponsored hackers in the world. And in the same way that Ukraine has fended off Russia’s military might, it’s been winning the cyberwar as well.

In that cyberwar, as always, the terrain is primarily Windows, because it represents the largest and most vulnerable attack surface in the world. The facts about what exactly is going on have been shadowy. But there’s plenty of evidence that Ukraine may keep the upper hand.

To read this article in full, please click here