Severity Rating: Critical
Revision Note: V1.0 (July 14, 2015): Bulletin published.
Summary: This security update resolves vulnerabilities in Internet Explorer. The most severe of the vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Internet...
administrative
browser security
bulletin
critical
exploitation
internet explorer
itsecurity
july 2015
ms15-065
patch
remote code execution
security bulletin
security update
software update
system security
technet
update
user rights
vulnerabilities
webpage
Today, as part of Update Tuesday, we released 8 security bulletins.
We encourage customers to apply all of these updates. For more information about this month’s security updates, including the detailed view of the Exploitability Index (XI), visit the Microsoft Bulletin Summary webpage. If you...
Severity Rating: Moderate
Revision Note: V1.0 (November 11, 2014): Bulletin published.
Summary: This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow denial of service if an attacker places a specially crafted TrueType font on a...
bulletin
compromised websites
denial of service
email threats
exploit
internet safety
itsecurity
kernel-mode
microsoft
moderate rating
network share
november 2014
security
technical article
truetype
update
user content
vulnerability
web attack
windows
Security vendors FireEye and Fox IT have launched a Web tool which allows victims of Cryptolocker Malware attacks to decrypt files without paying ransom to cybercriminals. Cryptolocker is Windows-based ransomware which relies on disguise to infect systems and encrypt files, demanding a payment...
cryptolocker
cybercrime
cybersecurity
data recovery
decryption
encryption
fireeye
fox it
free tools
government
itsecurity
malware
online safety
privacy
ransomware
security
tech news
victims
web tool
windows 8
I work in a relatively small business. We have 11 computers in the office that are all on a network with our server. Is there a way to make it so no matter which computer we are sitting at we can log in to the network under our own username/password?
access control
business solutions
itsecurity
multiple computers
network setup
networking
server management
small business
user login
workplace technology
Original release date: July 31, 2014
Systems Affected
Point-of-Sale Systems
Overview
This advisory was prepared in collaboration with the National Cybersecurity and Communications Integration Center (NCCIC), United States Secret Service (USSS), Financial Sector Information Sharing and...
Severity Rating:
Revision Note: V1.1 (June 13, 2012): Advisory revised to notify customers that Windows Mobile 6.x, Windows Phone 7, and Windows Phone 7.5 devices are not affected by the issue.
Summary: Microsoft is aware of active attacks using three unauthorized digital certificates derived...
active attacks
browser security
certificate authority
cybersecurity
digital certificates
internet explorer
itsecurity
man-in-the-middle
microsoft
phishing
revision note
security advisory
security update
spoofing
unauthorized access
vulnerability
web security
windows mobile
windows phone
Severity Rating: Critical
Revision Note: V1.0 (July 9, 2013): Bulletin published.
Summary: This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if a user opens a specially crafted image...
Today, we published Security Advisory 2743314, which provides guidance that will help protect customers from a technique that could allow a man-in-the middle attack to obtain a user’s domain credentials when VPN is configured to use PPTP and MSCHAPv2.
Customers concerned with this...
Severity Rating: Important
Revision Note: V1.0 (November 8, 2011): Bulletin published.
Summary: This security update resolves a privately reported vulnerability in Active Directory, Active Directory Application Mode (ADAM), and Active Directory Lightweight Directory Service...
active directory
ad lds
adam
authentication
certificate
configuration
domain
elevated privileges
important
itsecurity
ldaps
microsoft
network security
patch
patch management
revocation
security
update
vulnerability
windows
application crashes
business impact
cybersecurity
data protection
ddos attack
denial of service
itsecurity
revenue loss
risk management
security awareness
Thousands of Web Sites Hit With New Twist on Old SQL Injection Hack
Thousands of Web Sites Hit With New Twist on Old SQL Injection Hack | Arik Hesseldahl | NewEnterprise | AllThingsD
A relatively simple hack has been used to compromise at least 500,000 Web sites, and perhaps as many as 1.5...
Hello,
As we announced on Friday, today we released Link Removed due to 404 Error out-of-band to address a vulnerability in Windows. This security update addresses a vulnerability in the handling of shortcuts that affects all currently supported versions of Windows XP, Vista, Windows 7, Windows...
automatic updates
customer notification
itsecurity
malware
microsoft
ms10-046
out-of-band
patch management
securitysecurity advisory
software update
tech news
update
vulnerability
webcast
windows 7
windows server
windows vista
windows xp