Security News > 2015 > December > Microsoft Patches 71 Flaws, Two Under Attack; Warns of Leaked XBox Live Cert (Threatpost)

2015-12-08 19:57
Microsoft patches 71 vulnerabilities in its December Patch Tuesday security bulletins, including two currently under attack. It has also revoked a leaked Xbox Live certificate and private key.
News URL
Related news
- Microsoft Uncovers Sandworm Subgroup's Global Cyber Attacks Spanning 15+ Countries (source)
- Microsoft: Hackers steal emails in device code phishing attacks (source)
- Microsoft fixes Power Pages zero-day bug exploited in attacks (source)
- Botnet targets Basic Auth in Microsoft 365 password spray attacks (source)
- CERT-UA Warns of UAC-0173 Attacks Deploying DCRat to Compromise Ukrainian Notaries (source)
- New ClickFix attack deploys Havoc C2 via Microsoft Sharepoint (source)
- Hidden Threats: How Microsoft 365 Backups Store Risks for Future Attacks (source)
- Recent GitHub supply chain attack traced to leaked SpotBugs token (source)
- Microsoft Warns of Tax-Themed Email Attacks Using PDFs and QR Codes to Deliver Malware (source)