Security News

Microsoft delivers 75-count box of patches for Valentine's Day
2023-02-14 22:25

Intel needs its own box for its bugs.... Intel dumped more than 30 security advisories on the world today, with updates and mitigations for folks to install or follow. Vulnerabilities in the Intel Media SDK can be exploited to gain privileges or crash software.

Microsoft Patch Tuesday: 36 RCE bugs, 3 zero-days, 75 CVEs
2023-02-14 22:12

We counted 75 CVE-numbered bugs dated 2023-02-14, given that this year's February updates arrived on Valentine's Day. We extracted a list and included it below, sorted so that the bugs dubbed Critical are at the top.

Microsoft: Some WSUS servers might not offer Windows 11 22H2 updates
2023-02-14 20:45

Microsoft says that some WSUS servers upgraded to Windows Server 2022 might fail to push Windows 11, version 22H2 updates released during this month's Patch Tuesday to endpoints across enterprise environments. This known issue only affects WSUS servers upgraded from Windows Server 2016 or Windows Server 2019.

Microsoft: Exchange Server 2013 reaches end of support in April
2023-02-14 19:30

Microsoft has reminded admins that Exchange Server 2013 is reaching its extended end-of-support date in 60 days, on April 11, 2023. The first version of Exchange Server 2013 was released in January 2013, and it reached its mainstream end date four years ago, in April 2018.

Microsoft patches three exploited zero-days (CVE-2023-21715, CVE-2023-23376, CVE-2023-21823)
2023-02-14 19:28

The February 2023 Patch Tuesday is upon us, with Microsoft releasing patches for 75 CVE-numbered vulnerabilities, including three actively exploited zero-day flaws. "The attack itself is carried out locally by a user with authentication to the targeted system. An authenticated attacker could exploit the vulnerability by convincing a victim, through social engineering, to download and open a specially crafted file from a website which could lead to a local attack on the victim computer," Microsoft explains.

Microsoft February 2023 Patch Tuesday fixes 3 exploited zero-days, 77 flaws
2023-02-14 18:28

Today is Microsoft's February 2023 Patch Tuesday, and security updates fix three actively exploited zero-day vulnerabilities and a total of 77 flaws. This month's Patch Tuesday fixes three actively exploited zero-day vulnerabilities used in attacks.

Microsoft Edge update starts disabling Internet Explorer 11 today
2023-02-14 17:51

Microsoft says the Internet Explorer 11 desktop web browser will be disabled on some Windows 10 systems starting today via a Microsoft Edge update. "As previously announced, the out-of-support Internet Explorer 11 desktop application will be permanently disabled on certain versions of Windows 10 starting today, February 14, 2023," Microsoft said.

Microsoft WinGet package manager failing from expired SSL certificate
2023-02-12 04:37

Microsoft's WinGet package manager is currently having problems installing or upgrading packages after WinGet CDN's SSL/TLS certificate expired. The problem appears to be connected to WinGet CDN's SSL/TLS certificate that has now expired.

Microsoft is adding native RGB lighting controls to Windows 11
2023-02-11 15:47

Microsoft will soon add native support to Windows 11 for controlling the RGB lighting on computer peripherals, like mice and gaming keyboards. The new RBG lighting controls are currently in development as a hidden feature of Windows 11 build 25295 in the Windows Insider developer channel.

Microsoft adding native RGB lighting controls in Windows 11
2023-02-11 15:47

Microsoft will soon add native controls to Windows 11 for controlling the RGB lighting on computer peripherals, like mice and gaming keyboards. The new RBG lighting controls are currently in development as a hidden feature of Windows 11 build 25295 in the Windows Insider developer channel.