Experimental News Clipping Site

Tag: Hyper-V

  • The Register: Microsoft fixes under-attack privilege-escalation holes in Hyper-V

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/15/patch_tuesday_january_2025/ Source: The Register Title: Microsoft fixes under-attack privilege-escalation holes in Hyper-V Feedly Summary: Plus: Excel hell, angst for Adobe fans, and life’s too Snort for Cisco Patch Tuesday The first Patch Tuesday of 2025 has seen Microsoft address three under-attack privilege-escalation flaws in its Hyper-V hypervisor, plus plenty more problems that deserve…

  • Krebs on Security: Microsoft: Happy 2025. Here’s 161 Security Updates

    —

    by

    Kurt Seifried
    in

    Source URL: https://krebsonsecurity.com/2025/01/microsoft-happy-2025-heres-161-security-updates/ Source: Krebs on Security Title: Microsoft: Happy 2025. Here’s 161 Security Updates Feedly Summary: Microsoft today unleashed updates to plug a whopping 161 security vulnerabilities in Windows and related software, including three “zero-day" weaknesses that are already under active attack. Redmond’s inaugural Patch Tuesday of 2025 bundles more fixes than the company…

  • Alerts: CISA Adds Four Known Exploited Vulnerabilities to Catalog

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2025/01/14/cisa-adds-four-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Four Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added four vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-55591 Fortinet FortiOS Authorization Bypass Vulnerability CVE-2025-21333 Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability CVE-2025-21334 Microsoft Windows Hyper-V NT…

  • Cisco Talos Blog: Microsoft Patch Tuesday for December 2024 contains four critical vulnerabilities

    —

    by

    system automation
    in

    Source URL: https://blog.talosintelligence.com/december-patch-tuesday-release/ Source: Cisco Talos Blog Title: Microsoft Patch Tuesday for December 2024 contains four critical vulnerabilities Feedly Summary: The Patch Tuesday for December of 2024 includes 72 vulnerabilities, including four that Microsoft marked as “critical.” The remaining vulnerabilities listed are classified as “important.”  AI Summary and Description: Yes **Summary:** The December 2024 Patch…

  • Cisco Talos Blog: November Patch Tuesday release contains three critical remote code execution vulnerabilities

    —

    by

    system automation
    in

    Source URL: https://blog.talosintelligence.com/november-patch-tuesday-release/ Source: Cisco Talos Blog Title: November Patch Tuesday release contains three critical remote code execution vulnerabilities Feedly Summary: The Patch Tuesday for November of 2024 includes 91 vulnerabilities, including two that Microsoft marked as “critical.” The remaining 89 vulnerabilities listed are classified as “important.” AI Summary and Description: Yes Summary: The text…

  • Hacker News: Hyperlight: Virtual machine-based security for functions at scale

    —

    by

    system automation
    in

    Source URL: https://opensource.microsoft.com/blog/2024/11/07/introducing-hyperlight-virtual-machine-based-security-for-functions-at-scale/ Source: Hacker News Title: Hyperlight: Virtual machine-based security for functions at scale Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text discusses the launch of Hyperlight, a new open-source Rust library by Microsoft’s Azure Core Upstream team. Hyperlight enables the execution of small, embedded functions in a secure and efficient…

  • The Cloudflare Blog: 4.2 Tbps of bad packets and a whole lot more: Cloudflare’s Q3 DDoS report

    —

    by

    system automation
    in

    Source URL: https://blog.cloudflare.com/ddos-threat-report-for-2024-q3 Source: The Cloudflare Blog Title: 4.2 Tbps of bad packets and a whole lot more: Cloudflare’s Q3 DDoS report Feedly Summary: The number of DDoS attacks spiked in the third quarter of 2024. Cloudflare mitigated nearly 6 million DDoS attacks, representing a 49% increase QoQ and 55% increase YoY. AI Summary and…

  • Hacker News: Attacking PowerShell Clixml Deserialization

    —

    by

    system automation
    in

    Source URL: https://www.truesec.com/hub/blog/attacking-powershell-clixml-deserialization Source: Hacker News Title: Attacking PowerShell Clixml Deserialization Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text details a series of research findings related to security vulnerabilities associated with PowerShell’s CLIXML deserialization mechanism. Specifically, it highlights the risks stemming from the serialization and deserialization processes in PowerShell, emphasizing how these…