vulnerability management

On August 13, 2024, Microsoft disclosed a significant security vulnerability labeled CVE-2024-38134, which pertains to the Kernel Streaming WOW Thunk Service Driver. This vulnerability presents a potential elevation of privilege risk that could allow an attacker to gain elevated access to system...

Understanding CVE-2024-38133: A Windows Kernel Elevation of Privilege Vulnerability What is an Elevation of Privilege Vulnerability? Elevating privileges is a common tactic used by attackers to gain unauthorized access to a system. Specifically, an "elevation of privilege" (EoP) vulnerability...

Understanding CVE-2024-38209: A Deep Dive into Microsoft Edge's Remote Code Execution Vulnerability Introduction As cyber threats continue to evolve, organizations must remain vigilant about the vulnerabilities in their software. One such critical vulnerability recently documented is...

In a recent advisory from the Computer Emergency Response Team (CERT-In), users of Windows 10 and Windows 11 have been alerted to critical security vulnerabilities in the operating system. These vulnerabilities could potentially enable attackers to gain elevated privileges on affected systems...

A newly discovered bug in the Common Log File System (CLFS) driver is causing significant alarm among users of Windows 10 and Windows 11. This vulnerability, identified as CVE-2024-6768, can lead to system crashes, or the infamous Blue Screen of Death (BSoD), and is affecting even the most...

Original release date: January 6, 2020 Summary The Cybersecurity and Infrastructure Security Agency (CISA) is sharing the following information with the cybersecurity community as a primer for assisting in the protection of our Nation’s critical infrastructure in light of the current tensions...

Today, a single breach, physical or virtual, can cause millions of dollars of damage to an organization and potentially billions in financial losses to the global economy. Each week seems to bring a new disclosure of a cybersecurity breach somewhere in the world. As we look at the current state...

Original release date: October 03, 2018 Systems Affected Network Systems Overview The National Cybersecurity and Communications Integration Center (NCCIC) is aware of ongoing APT actor activity attempting to infiltrate the networks of global managed service providers (MSPs). Since May 2016...

Today, as part of Update Tuesday, we released eight security updates – three rated Critical and five rated Important - to address 24 Common Vulnerabilities & Exposures (CVEs) in Windows, Office, .NET Framework, .ASP.NET, and Internet Explorer (IE). We encourage you to apply all of these updates...