On Monday May 30, 2022, Microsoft issued CVE-2022-30190 regarding the Microsoft Support Diagnostic Tool (MSDT) in Windows vulnerability.
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully...
Original release date: September 22, 2021
Summary
Immediate Actions You Can Take Now to Protect Against Conti Ransomware
• Use Link Removed.
• Segment and segregate networks and functions.
• Update your operating system and software.
Note: This Alert uses the MITRE Adversarial Tactics...
Original release date: September 16, 2021
Summary
This Joint Cybersecurity Advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) framework, Version 8. See the ATT&CK for Enterprise for referenced threat actor tactics and for techniques.
This joint advisory is...
In brief: It seems that gaining administrator-level Windows privileges on a PC doesn't require much work; all you need is physical access and a Razer mouse or keyboard. It's the result of a zero-day vulnerability in the company's popular Synapse software that exploits the plug-and-play...
apple
awareness
breach
cybersecurity
data
digital
exploit
hacking
incident
iphones
malware
network
pentest
privacy
risk
security
threat
tor
vulnerability
Original release date: April 20, 2021
Summary
The Cybersecurity and Infrastructure Security Agency (CISA) is aware of compromises affecting U.S. government agencies, critical infrastructure entities, and other private sector organizations by a cyber threat actor—or actors—beginning in June 2020...
Pretty significant vulnerability that Microsoft is patching even for out of support versions of Windows. For the out of support the update is available only through the Windows Update Catalog. Microsoft Update Catalog
TechNet Blog about the vulnerability and direct links to the patch download...
catalog
cve-2019-0708
exploit
microsoft
networking
outdated
patch
rdp
remote desktop
risk
security
software
support
system
technet
update
vulnerability
windows
windows update
Today Microsoft released fixes for a critical Remote Code Execution vulnerability, CVE-2019-0708, in Remote Desktop Services – formerly known as Terminal Services – that affects some older versions of Windows. The Remote Desktop Protocol (RDP) itself is not vulnerable. This vulnerability is...
authentication
cve-2019-0708
emergency patch
exploit
legacy systems
malware threats
microsoft security
network level authentication
out-of-support
patching
remote code execution
remote desktop services
security update
vulnerabilities
wannacry
windows 2003
windows 2008
windows 7
windows server
windows xp
Original release date: May 25, 2018
Systems Affected
Small office/home office (SOHO) routers
Networked devices
Network-attached storage (NAS) devices
Overview
Cybersecurity researchers have identified that foreign cyber actors have compromised hundreds of thousands of home and office...
Looks like EMET is coming back as a built-in feature in the fall creators update. I've personally always used it as a free added security measure. Like other security software it's not bullet proof and there have been bypasses, but it does a good job of protecting against common avenues used...
In a recent post, we outlined the layered strategy that the Microsoft Edge security team employs to protect you from vulnerabilities that could be used to compromise your device or personal data. In particular, we showed how Microsoft Edge is leveraging technologies like Code Integrity Guard...
Severity Rating: Important
Revision Note: V1.0 (March 14, 2017): Click here to enter text.
Summary: This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if an attacker with access to the local system executes a malicious...
administrative rights
exploit
local system
malicious application
march 2017
microsoft
ms17-016
remote code execution
security
security patch
severity rating
system security
update
user accounts
user rights
version 1.0
vulnerability
windows
windows iis
Severity Rating: Critical
Revision Note: V1.0 (March 14, 2017): Bulletin published.
Summary: This security update resolves vulnerabilities in Microsoft Windows. The most severe of the vulnerabilities could allow remote code execution if an attacker sends specially crafted messages to a Windows...
critical
cybersecurity
exploit
march 2017
microsoft
ms17-010
network security
patch
remote code execution
revision note
security update
server
smb server
technet
threat
update
version 1.0
vulnerabilities
windows
windows update
Severity Rating: Critical
Revision Note: V1.0 (March 14, 2017): Bulletin published.
Summary: This security update resolves vulnerabilities in Microsoft Edge. The most severe of the vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Microsoft Edge...
control system
critical
cumulative
data security
exploit
march 2017
microsoft edge
ms17-007
remote code execution
revision note
security update
update bulletin
user rights
vulnerabilities
webpage
Severity Rating: Critical
Revision Note: V1.0 (December 13, 2016): Bulletin published.
Summary: This security update resolves vulnerabilities in Internet Explorer. The most severe of the vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Internet...
account management
administrative rights
attacks
bulletin
control
critical
cumulative
data protection
december 2016
exploit
internet explorer
ms16-144
remote code execution
revision note
security
update
user rights
vulnerabilities
webpage