Categories: News Tags: BYOVD Tags: bring your own vulnerable driver Tags: blocklist Tags: microsoft Tags: windows updates We take a look at reports that Microsoft’s driver blocklist hadn’t been updated for three years, leaving people at risk from BYOVD attacks. |
The post Microsoft fixes driver blocklist placing users at risk from BYOVD attacks appeared first on Malwarebytes Labs.
Read more
Credit to Author: Paul Ducklin| Date: Thu, 20 Oct 2022 16:54:12 +0000
The coolest video game ever! And lots of solid cybersecurity advice – listen now!
Read more
This month’s Patch Tuesday update from Microsoft deals with 84 flaws and a zero-day affecting Microsoft Exchange that at the moment remains unresolved. The Windows updates focus on Microsoft security and networking components with a difficult-to-test update to COM and OLE db. And Microsoft browsers get 18 updates—nothing critical or urgent.
This month’s Patch Tuesday update from Microsoft deals with 84 flaws and a zero-day affecting Microsoft Exchange that at the moment remains unresolved. The Windows updates focus on Microsoft security and networking components with a difficult-to-test update to COM and OLE db. And Microsoft browsers get 18 updates—nothing critical or urgent.
Credit to Author: Paul Ducklin| Date: Fri, 14 Oct 2022 16:59:25 +0000
How 2022 is your encryption?
Read moreCategories: Exploits and vulnerabilities Categories: News Tags: Microsoft Tags: Apple Tags: Google Tags: Android Tags: Samsung Tags: Xiaomi Tags: Adobe Tags: SAP Tags: VMWare Tags: Fortinet Tags: CVE-2022-41033 Tags: CVE-2022-41040 Tags: zero-day No fix for ProxyNotShell |
The post Update now! October patch Tuesday fixes actively used zero-day…but not the one you expected appeared first on Malwarebytes Labs.
Read more
Credit to Author: Paul Ducklin| Date: Wed, 12 Oct 2022 16:58:26 +0000
There’s a zero-day patch, but it’s not for the zero-day you thought.
Read more
Credit to Author: Angela Gunn| Date: Tue, 11 Oct 2022 17:47:47 +0000
No joy for Exchange admins looking to seal off two widely reported Server vulns
Read more
Credit to Author: Paul Ducklin| Date: Mon, 10 Oct 2022 14:02:13 +0000
Microsoft calls it “Modern Auth”, though it’s a decade old, and is finally forcing Exchange Online customers to switch to it.
Read more
Credit to Author: Paul Ducklin| Date: Thu, 06 Oct 2022 14:43:53 +0000
Latest episode – listen and learn now (or read and revise, if the written word is your thing)…
Read more