Microsoft has released the final security updates of 2024, addressing 72 vulnerabilities, including one that is actively exploited. Among these, 17 are classified as critical, 54 as important, and one as moderate in severity....
Microsoft has released the preview update KB5046740 for Windows 11 24H2, introducing 14 enhancements and fixes. This update addresses issues related to File Explorer, the clipboard, and secondary displays, while also improving voice functionality...
Users of Windows 11 version 24H2 have encountered significant issues following the installation of the November cumulative update. Patch KB5046617, released last week, fails to install on many systems, often halting mid-process and displaying...
Microsoft has released updates for several Windows products, addressing the CVE-2024-43629 vulnerability identified by a Positive Technologies security expert. The updates encompass Windows 10, Windows 11, and server versions—Windows Server 2025, Windows Server 2022,...
Splunk, a leader in data analytics and monitoring, has disclosed 12 new vulnerabilities in its Splunk Enterprise product for Windows, enabling remote code execution (RCE) by malicious actors. On October 14, 2024, the company...
Researchers from the French company HarfangLab have uncovered a new malicious campaign distributing the HijackLoader malware using legitimate digital signing certificates. This malicious activity was first detected in early October, with the primary aim...
ESET has resolved two privilege escalation vulnerabilities in its products for Windows and macOS operating systems. These vulnerabilities allowed attackers to gain unauthorized access to system resources. The first vulnerability, identified as CVE-2024-7400 and...
Google has introduced a new feature enabling Chrome users to synchronize passkeys across devices using a PIN code. This functionality is now available for Windows, macOS, Linux, ChromeOS, and Android. As highlighted by Chrome...
Chinese security researchers have recently uncovered real-world attacks exploiting the CVE-2024-30051 vulnerability (CVSS score: 7.8), which has been linked to cyberattacks involving QakBot, a notorious banking trojan. The vulnerability was first identified by Kaspersky...
Microsoft has alerted users to a critical TCP/IP vulnerability that enables remote code execution (RCE) on all Windows systems with the IPv6 protocol enabled by default. The vulnerability, identified as CVE-2024-38063 (CVSS score: 9.8),...
Last month, Microsoft confirmed that cumulative updates for Windows 10/11 caused some systems with device encryption to automatically reboot into the BitLocker encryption recovery screen. However, this encryption was not intentionally enabled by the...
At the Black Hat 2024 conference, currently taking place in Las Vegas (August 7-8), security researcher Alon Leviev from SafeBreach unveiled two new zero-day vulnerabilities that could be exploited in so-called Downgrade attacks to...
