impact

  1. Why Some Website ask for cookies.

    Hello.., I have seen many websites ask for accepting cookies. What is the purpose of the acceptance of the cookies what will be the impact if don't accept the cookies? Thanks in advance.
  2. AA20-020A: Critical Vulnerability in Citrix Application Delivery Controller, Gateway, and SD-WAN WANOP

    Original release date: January 20, 2020<br/><h3>Summary</h3><p>On January 19, 2020, Citrix released firmware updates for Citrix Application Delivery Controller (ADC) and Citrix Gateway versions 11.1 and 12.0 to address CVE-2019-19781. Citrix expects to release updates for other vulnerable...
  3. TA18-141A: Side-Channel Vulnerability Variants 3a and 4

    Original release date: May 21, 2018 Systems Affected CPU hardware implementations Overview On May 21, 2018, new variants—known as 3A and 4—of the side-channel central processing unit (CPU) hardware vulnerability were Link Removed. These variants can allow an attacker to obtain access to...
  4. 2

    How big do you think the reaction to the Win7 EOL in 2020 be?

    If I remember correctly, XP's EOL had a HUGE reaction because of all the people's fond memories of it. So Win7's will be that, but bigger in my personal opinion.
  5. The MSRC 2017 list of “Top 100” security researchers

    Security researchers play an essential role in Microsoft’s security strategy and are key to community-based defense. To show our appreciation for their hard work and partnership, each year at BlackHat North America, the Microsoft Security Response Center highlights contributions of these...
  6. TA16-336A: Avalanche (crimeware-as-a-service infrastructure)

    Original release date: December 01, 2016 | Last revised: December 14, 2016 Systems Affected Microsoft Windows Overview “Avalanche” refers to a large global network hosting infrastructure used by cyber criminals to conduct phishing and malware distribution campaigns and money mule schemes...
  7. Taking your feedback on the Security Update Guide

    The Link Removed has been in public preview since November 2016. This month marked our first release when security update information was published entirely in the new format. Over the last few months, customers and partners have provided a lot of feedback on the direction and implementation of...
  8. NEWS Massive Amazon cloud service outage disrupts sites

    Massive Amazon cloud service outage disrupts sites Affected server: Amazon's S3 service on the east coast, US-EAST-1. Operations were fully recovered by 4:49 pm ET, Amazon said. AN FRANCISCO — Amazon didn't, quite, break the Internet Tuesday but a more than four-hour problem at one of the main...
  9. MS16-120 - Critical: Security Update for Microsoft Graphics Component (3192884) - Version: 1.0

    Severity Rating: Critical Revision Note: V1.0 (October 11, 2016): Bulletin published. Summary: This security update resolves vulnerabilities in Microsoft Windows, Microsoft Office, Skype for Business, Silverlight and Microsoft Lync. The most serious of these vulnerabilities could allow remote...
  10. MS16-002 - Critical: Cumulative Security Update for Microsoft Edge (3124904) - Version: 1.0

    Severity Rating: Critical Revision Note: V1.0 (January 12, 2016): Bulletin published. Summary: This security update resolves vulnerabilities in Microsoft Edge. The vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Microsoft Edge. An attacker who...
  11. Dorkbot Botnet: Overview, Impact, and Solutions for Microsoft Windows Users

    Original release date: December 03, 2015 Systems Affected Microsoft Windows Overview Dorkbot is a botnet used to steal online payment, participate in distributed denial-of-service (DDoS) attacks, and deliver other types of malware to victims’ computers. According to Microsoft, the family of...
  12. TA15-286A: Dridex P2P Malware

    Original release date: October 13, 2015 Systems Affected Microsoft Windows Overview Dridex, a peer-to-peer (P2P) bank credential-stealing malware, uses a decentralized network infrastructure of compromised personal computers and web servers to execute command-and-control (C2). The United...
  13. POLL RESULTS: Ignite vs Build 2015

    We asked you which of Microsoft's big conferences would have the largest impact on Windows 10 - here are the results. read more Continue reading...
  14. VIDEO Skype Translator preview

    The Skype Translator Preview was released December 2014 and has now been added to the Windows Store.. No need to sign up just download! :) Ref: http://blogs.skype.com/2015/05/12/skype-translator-preview-access-just-got-easier/
  15. TA15-119A: Top 30 Targeted High Risk Vulnerabilities

    Original release date: April 29, 2015 Systems Affected Systems running unpatched software from Adobe, Microsoft, Oracle, or OpenSSL. Overview Cyber threat actors continue to exploit unpatched software to conduct attacks against critical infrastructure organizations. As many as 85 percent of...
  16. TA15-103A: DNS Zone Transfer AXFR Requests May Leak Domain Information

    Original release date: April 13, 2015 Systems Affected Misconfigured Domain Name System (DNS) servers that respond to global Asynchronous Transfer Full Range (AXFR) requests. Overview A remote unauthenticated user may request a DNS zone transfer from a public-facing DNS server. If...
  17. AAEH Malware: Overview, Impact, and Mitigation Strategies for Multiple Windows Systems

    Original release date: April 09, 2015 Systems Affected Microsoft Windows 95, 98, Me, 2000, XP, Vista, 7, and 8 Microsoft Server 2003, Server 2008, Server 2008 R2, and Server 2012 Overview AAEH is a family of polymorphic downloaders created with the primary purpose of downloading other...
  18. TA15-051A: Lenovo Superfish Adware Vulnerable to HTTPS Spoofing

    Original release date: February 20, 2015 Systems Affected Lenovo consumer PCs that have Superfish VisualDiscovery installed and potentially others. Overview Superfish adware installed on some Lenovo PCs install a non-unique trusted root certification authority (CA) certificate, allowing an...
  19. TA14-323A: Microsoft Windows Kerberos KDC Remote Privilege Escalation Vulnerability

    Original release date: November 19, 2014 Systems Affected Microsoft Windows Vista, 7, 8, and 8.1 Microsoft Server 2003, Server 2008, Server 2008 R2, Server 2012, and Server 2012 R2 Overview A remote escalation of privilege vulnerability exists in implementations of Kerberos Key Distribution...
  20. TA14-318A: Microsoft Secure Channel (Schannel) Vulnerability (CVE-2014-6321)

    Original release date: November 14, 2014 Systems Affected Microsoft Windows Vista, 7, 8, 8.1, RT, and RT 8.1 Microsoft Server 2003, Server 2008, Server 2008 R2, Server 2012, and Server 2012 R2 Microsoft Windows XP and 2000 may also be affected. Overview A critical vulnerability in...