Security News

CISA warns of Windows bug exploited in ransomware attacks
2024-06-14 16:39

The U.S. Cybersecurity and Infrastructure Security Agency has added a high-severity Windows vulnerability abused in ransomware attacks as a zero-day to its catalog of actively exploited security bugs. Successful exploitation lets local attackers gain SYSTEM permissions in low-complexity attacks that don't require user interaction.

Microsoft removes Copilot app ‘incorrectly’ added on Windows PCs
2024-06-14 15:15

Microsoft says it removed a Copilot app that was "Incorrectly" added to Windows 10 and Windows 11 systems in April due to buggy Microsoft Edge updates. The AI-powered Copilot digital assistant was also added to some Windows Server 2025 preview builds earlier this year, but the company removed it after backlash from Windows admins.

Microsoft delays Windows Recall rollout, more security testing needed
2024-06-14 12:39

Microsoft is delaying the release of Recall, a controversial Windows 11 feature that will allow users to search their computer for specific content that has previously been viewed by them. "Following receiving feedback on Recall from our Windows Insider Community, as we typically do, we plan to make Recall available for all Copilot+ PCs coming soon."

Microsoft delays Windows Recall amid privacy and security concerns
2024-06-14 02:11

Microsoft is delaying the release of its AI-powered Windows Recall feature to test and secure it further before releasing it in a public preview on Copilot+ PCs. Initially slated for release in a public preview on June 18 with the arrival of the new Copilot+ AI PCs, the company now says they are delaying its release by making it first available for preview with Windows Insiders. "Recall will now shift from a preview experience broadly available for Copilot+ PCs on June 18, 2024, to a preview available first in the Windows Insider Program in the coming weeks," reads an update to a recent Windows Recall blog post.

Pakistan-linked Malware Campaign Evolves to Target Windows, Android, and macOS
2024-06-13 10:26

Threat actors with ties to Pakistan have been linked to a long-running malware campaign dubbed Operation Celestial Force since at least 2018. The activity, still ongoing, entails the use of an...

New Cross-Platform Malware 'Noodle RAT' Targets Windows and Linux Systems
2024-06-13 06:25

A previously undocumented cross-platform malware codenamed Noodle RAT has been put to use by Chinese-speaking threat actors either for espionage or cybercrime for years. While this backdoor was...

Phishing emails abuse Windows search protocol to push malicious scripts
2024-06-12 22:30

A new phishing campaign uses HTML attachments that abuse the Windows search protocol to push batch files hosted on remote servers that deliver malware. The Windows Search protocol is a Uniform Resource Identifier that enables applications to open Windows Explorer to perform searches using specific parameters.

Ransomware crew may have exploited Windows make-me-admin bug as a zero-day
2024-06-12 22:10

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

Microsoft deprecates Windows DirectAccess, recommends Always On VPN
2024-06-12 15:05

Microsoft has announced that the DirectAccess remote access solution is now deprecated and will be removed in a future release of Windows, recommending companies migrate to the 'Always On VPN' for enhanced security and continued support. DirectAccess is a bidirectional remote access technology introduced by Microsoft in Windows 7 and Windows Server 2008 R2, providing domain-joined remote users an "Always on" connection to internal corporate networks without using VPN connections.

Black Basta Ransomware May Have Exploited MS Windows Zero-Day Flaw
2024-06-12 11:11

Threat actors linked to the Black Basta ransomware may have exploited a recently disclosed privilege escalation flaw in the Microsoft Windows Error Reporting Service as zero-day, according to new...