Microsoft has acknowledged a new issue in the recently released Windows 11 24H2 version and the latest optional security update. The problem pertains to the Task Manager’s incorrect operation. According to information published on...
As cyberattacks continue to evolve, the risks to systems utilizing Active Directory (AD) are also increasing. One of the most serious vulnerabilities remains Kerberoasting — an attack targeting the Kerberos protocol that enables attackers...
On September 10, a summit on the Windows security ecosystem for endpoints brought together leading cybersecurity solution providers and representatives from U.S. and European government agencies. The primary objective of the forum, which included...
Chinese security researchers have recently uncovered real-world attacks exploiting the CVE-2024-30051 vulnerability (CVSS score: 7.8), which has been linked to cyberattacks involving QakBot, a notorious banking trojan. The vulnerability was first identified by Kaspersky...
Recently, security researcher Sergey Kornienko from PixiePoint published an analysis and demonstration of a critical zero-day vulnerability in the Windows kernel, identified as CVE-2024-38106. This privilege escalation vulnerability is already being actively exploited by...
Microsoft has addressed critical vulnerabilities in its AI assistant Copilot that allowed attackers to steal emails and other personal user information. This was reported by security researcher Johann Rehberger, who previously discovered and disclosed...
Recently, a critical security vulnerability (CVE-2024-38063) was discovered in Windows 10/11 and Windows Server systems, located within the IPv6 network stack. Exploiting this vulnerability, an attacker can trigger remote code execution merely by sending...
A specialist from SafeBreach, Alon Leviev, has released a tool called Windows Downdate, which enables the reintroduction of old vulnerabilities on updated systems, including Windows 10, Windows 11, and Windows Server. A downgrade attack...
Last week, numerous Linux users encountered a serious issue: their devices failed to boot after an update released by Microsoft as part of Patch Tuesday. Instead of the system starting normally, an error message...
Researchers at Tenable have discovered a critical vulnerability in the Microsoft Copilot Studio platform, which allows an attacker to gain access to confidential information through an SSRF attack. The flaw could affect Microsoft’s internal...
Microsoft has alerted users to a critical TCP/IP vulnerability that enables remote code execution (RCE) on all Windows systems with the IPv6 protocol enabled by default. The vulnerability, identified as CVE-2024-38063 (CVSS score: 9.8),...
Last month, Microsoft confirmed that cumulative updates for Windows 10/11 caused some systems with device encryption to automatically reboot into the BitLocker encryption recovery screen. However, this encryption was not intentionally enabled by the...
