Security News

New Windows Driver Signature bypass allows kernel rootkit installs
2024-10-26 12:28

Attackers can downgrade Windows kernel components to bypass security features such as Driver Signature Enforcement and deploy rootkits on fully patched systems. [...]

Windows 11 24H2 KB5044384 update fixes sfc /scannow corrupt file errors
2024-10-24 20:46

Microsoft has released the optional KB5044384 preview cumulative update for Windows 11 24H2, which includes twenty-four changes, including a bug that caused the sfc /scannow command to always...

Windows 11 KB5044380 preview update lets you remap the Copilot key
2024-10-23 19:36

Microsoft has released the optional KB5044380 Preview cumulative update for Windows 11 23H2 and 22H2, which brings seventeen changes, including a new Gamepad keyboard and the ability to remap the...

Windows 10 KB5045594 update fixes multi-function printer bugs
2024-10-22 20:50

Microsoft has released the optional KB5045594 preview cumulative update for Windows 10 22H2 with fixes for problems printing to multi-function printers and other issues. [...]

Exploit released for new Windows Server "WinReg" NTLM Relay attack
2024-10-22 17:26

Proof-of-concept exploit code is now public for a vulnerability in Microsoft's Remote Registry client that could be used to take control of a Windows domain by downgrading the security of the...

Microsoft blocks Windows 11 24H2 on two ASUS models due to crashes
2024-10-21 16:42

Microsoft is warning of Windows crashing with the blue screen of death on some ASUS laptop models when trying to upgrade to the latest version of the operating system, Windows 11 version 24H2. [...]

North Korean ScarCruft Exploits Windows Zero-Day to Spread RokRAT Malware
2024-10-16 10:50

The North Korean threat actor known as ScarCruft has been linked to the zero-day exploitation of a now-patched security flaw in Windows to infect devices with malware known as RokRAT. The...

Iranian hackers now exploit Windows flaw to elevate privileges
2024-10-13 14:17

The Iranian state-sponsored hacking group APT34, aka OilRig, has recently escalated its activities with new campaigns targeting government and critical infrastructure entities in the United Arab...

OilRig Exploits Windows Kernel Flaw in Espionage Campaign Targeting UAE and Gulf
2024-10-13 09:40

The Iranian threat actor known as OilRig has been observed exploiting a now-patched privilege escalation flaw impacting the Windows Kernel as part of a cyber espionage campaign targeting the...

Microsoft deprecates PPTP and L2TP VPN protocols in Windows Server
2024-10-12 15:25

Microsoft has officially deprecated the Point-to-Point Tunneling Protocol (PPTP) and Layer 2 Tunneling Protocol (L2TP) in future versions of Windows Server, recommending admins switch to different...