Security News

Cybercriminals Exploiting Microsoft’s Quick Assist Feature in Ransomware Attacks
2024-05-16 03:16

The Microsoft Threat Intelligence team said it has observed a threat it tracks under the name Storm-1811 abusing the client management tool Quick Assist to target users in social engineering...

It's Time to Master the Lift & Shift: Migrating from VMware vSphere to Microsoft Azure
2024-05-15 10:55

While cloud adoption has been top of mind for many IT professionals for nearly a decade, it’s only in recent months, with industry changes and announcements from key players, that many recognize...

Microsoft Patches 61 Flaws, Including Two Actively Exploited Zero-Days
2024-05-15 07:17

Microsoft has addressed a total of 61 new security flaws in its software as part of its Patch Tuesday updates for May 2024, including two zero-days which have been actively exploited in the wild....

Microsoft fixes a bug abused in QakBot attacks plus a second under exploit
2024-05-14 22:15

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

Microsoft fixes VPN failures caused by April Windows updates
2024-05-14 20:15

"Windows devices might face VPN connection failures after installing the April 2024 security update or the April 2024 non-security preview update," Redmond explains on the Windows health dashboard. The list of impacted Windows versions includes Windows 11, Windows 10, and Windows Server 2008 and later.

Microsoft fixes Windows Server bug causing crashes, NTLM auth failures
2024-05-14 19:11

Microsoft has fixed a known issue causing NTLM authentication failures and domain controller reboots after installing last month's Windows Server security updates. [...]

May 2024 Patch Tuesday: Microsoft fixes exploited zero-days (CVE-2024-30051, CVE-2024-30040)
2024-05-14 18:48

For May 2024 Patch Tuesday, Microsoft has released fixes for 59 CVE-numbered vulnerabilities, including two zero-days actively exploited by attackers. CVE-2024-30051 is a heap-based buffer overflow vulnerability affecting the Windows DWM Core Library that can be exploited to elevate attackers' privileges on a target system.

Microsoft fixes Windows zero-day exploited in QakBot malware attacks
2024-05-14 18:18

Microsoft has fixed a zero-day vulnerability exploited in attacks to deliver QakBot and other malware payloads on vulnerable Windows systems. Kaspersky security researchers discovered the vulnerability while investigating another Windows DWM Core Library privilege escalation bug tracked as CVE-2023-36033 and also exploited as a zero-day in attacks.

Microsoft May 2024 Patch Tuesday fixes 3 zero-days, 61 flaws
2024-05-14 17:49

Today is Microsoft's May 2024 Patch Tuesday, which includes security updates for 61 flaws and three actively exploited or publicly disclosed zero days. The total count of 61 flaws does not include 2 Microsoft Edge flaws fixed on May 2nd and four fixed on May 10th. To learn more about the non-security updates released today, you can review our dedicated articles on the new Windows 11 KB5037771 cumulative update and the Windows 10 KB5037768 update.

Microsoft's Brad Smith summoned by Homeland Security committee over 'cascade' of infosec failures
2024-05-10 15:01

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.