Security News

How to download the Windows 10 21H1 ISO from Microsoft
2021-05-18 18:24

With today's release of the Windows 10 May 2021 Update, you now download the Windows 10 21H1 ISO for the operating system directly from Microsoft. This article will explain how you can download the Windows 10 21H1 ISO directly from Microsoft's servers.

Microsoft, Adobe Exploits Top List of Crooks’ Wish List
2021-05-18 12:32

You can't possibly patch all CVEs, so focus on the exploits crooks are willing to pay for, as tracked in a study of the underground exploit market. A year-long study into the underground market for exploits in cybercriminal forums shows that crooks are salivating for Microsoft bugs, which are far and away the most requested and most sold exploits.

Surface Laptop 4 showcases Microsoft's new approach to PC security
2021-05-18 09:30

Microsoft is bringing advanced hardware security to more Surface devices with cloud firmware management to help enterprises deploy new PCs quickly. Microsoft's Surface Laptop 4 is the second Surface device that uses Secured-core to protect the firmware.

Microsoft Build Engine Abused for Fileless Malware Delivery
2021-05-18 08:31

An ongoing campaign abuses the Microsoft Build Engine platform for the fileless delivery of malware, security researchers with threat intelligence firm Anomali reveal. Described as the build platform for Microsoft and Visual Studio, MSBuild has a feature that allows developers to specify for code to be executed in memory, and adversaries have abused this in a new campaign for the fileless delivery of their malicious payloads.

Cohesity’s BaaS offering allows organizations to successfully recover Microsoft 365 data
2021-05-18 01:30

This Backup as a Service offering provides data protection and retention that goes well beyond the default 30-day native backup capabilities included with a Microsoft 365 subscription. Cohesity's BaaS offering gives organizations even more choice in how they can back up and recover Microsoft 365 application data.

Microsoft Edge update fixes YouTube crashes, freezes
2021-05-17 01:40

Microsoft has fixed a nasty bug that was causing the Microsoft Edge browser to crash while watching YouTube videos or reading comments. At the time, Microsoft acknowledged the issue in numerous Reddit discussions and asked users to try Microsoft Edge Canary to test a fix that they were working on.

New Microsoft Edge version fixes crashes while using YouTube
2021-05-17 01:40

Microsoft has fixed a nasty bug that was causing the Microsoft Edge browser to crash while watching YouTube videos or reading comments. At the time, Microsoft acknowledged the issue in numerous Reddit discussions and asked users to try Microsoft Edge Canary to test a fix that they were working on.

Microsoft adds Windows 10 HDR support for Photoshop, Lightroom
2021-05-14 18:02

Microsoft has added HDR support to color managed apps to access your display's whole color gamut in the latest Windows 10 build released for Insiders in the Dev Channel. "HDR mode changes the behavior of some creative and artistic apps that use International Color Consortium display color profiles, such as Adobe Photoshop, Adobe Lightroom Classic, and CorelDraw," Microsoft's Amanda Langowski and Brandon LeBlanc said.

Microsoft investigating new Windows 10 high-pitched noise issue
2021-05-14 16:37

Microsoft is working on resolving a high-pitched noise issue Windows 10 users hear when using some 5.1 audio configurations after applying recently released cumulative updates. "After installing KB5000842 or later updates, 5.1 Dolby Digital audio may play containing a high-pitched noise or squeak in certain apps when using certain audio devices and Windows settings," Microsoft explains on the Windows 10 Health Dashboard.

Hackers Using Microsoft Build Engine to Deliver Malware Filelessly
2021-05-14 09:01

Threat actors are abusing Microsoft Build Engine to filelessly deliver remote access trojans and password-stealing malware on targeted Windows systems. The actively ongoing campaign is said to have emerged last month, researchers from cybersecurity firm Anomali said on Thursday, adding the malicious build files came embedded with encoded executables and shellcode that deploy backdoors, allowing the adversaries to take control of the victims' machines and steal sensitive information.