Experimental News Clipping Site

Tag: Windows Update

  • Cisco Talos Blog: ReVault! When your SoC turns against you…

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.talosintelligence.com/revault-when-your-soc-turns-against-you/ Source: Cisco Talos Blog Title: ReVault! When your SoC turns against you… Feedly Summary: Talos reported 5 vulnerabilities to Broadcom and Dell affecting both the ControlVault3 Firmware and its associated Windows APIs that we are calling “ReVault”.  AI Summary and Description: Yes **Summary:** The report details significant vulnerabilities discovered in Dell’s ControlVault3…

  • Cisco Talos Blog: Decrement by one to rule them all: AsIO3.sys driver exploitation

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.talosintelligence.com/decrement-by-one-to-rule-them-all/ Source: Cisco Talos Blog Title: Decrement by one to rule them all: AsIO3.sys driver exploitation Feedly Summary: Cisco Talos uncovered and analyzed two critical vulnerabilities in ASUS’ AsIO3.sys driver, highlighting serious security risks and the importance of robust driver design. AI Summary and Description: Yes Summary: The text reveals critical vulnerabilities in…

  • Krebs on Security: Patch Tuesday, December 2024 Edition

    —

    by

    system automation
    in

    Source URL: https://krebsonsecurity.com/2024/12/patch-tuesday-december-2024-edition/ Source: Krebs on Security Title: Patch Tuesday, December 2024 Edition Feedly Summary: Microsoft today released updates to plug at least 70 security holes in Windows and Windows software, including one vulnerability that is already being exploited in active attacks. The zero-day seeing exploitation involves CVE-2024-49138, a security weakness in the Windows Common……

  • Hacker News: Sysadmin shock as Windows Server 2025 installs itself after labeling error

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/11/06/windows_server_2025_surprise/ Source: Hacker News Title: Sysadmin shock as Windows Server 2025 installs itself after labeling error Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses a significant incident where a security update intended for Windows Server 2022 unexpectedly upgraded systems to Windows Server 2025, caused by a mislabeling in Microsoft’s…

  • The Register: Sysadmin shock as Windows Server 2025 installs itself after update labeling error

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/11/06/windows_server_2025_surprise/ Source: The Register Title: Sysadmin shock as Windows Server 2025 installs itself after update labeling error Feedly Summary: Screens sprayed with coffee after techies find Microsoft’s latest OS in unexpected places Administrators are reporting unexpected appearances of Windows Server 2025 after what was published as a security update turned out to be…

  • Hacker News: New Windows Driver Signature bypass allows kernel rootkit installs

    —

    by

    system automation
    in

    Source URL: https://www.bleepingcomputer.com/news/security/new-windows-driver-signature-bypass-allows-kernel-rootkit-installs/ Source: Hacker News Title: New Windows Driver Signature bypass allows kernel rootkit installs Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses a vulnerability in Windows kernel security that allows attackers to downgrade kernel components, circumventing security measures like Driver Signature Enforcement (DSE). Despite the advancements in kernel security,…

  • Slashdot: Windows Update Zero-Day Being Exploited To Undo Security Fixes

    —

    by

    system automation
    in

    Source URL: https://tech.slashdot.org/story/24/09/10/229252/windows-update-zero-day-being-exploited-to-undo-security-fixes?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Windows Update Zero-Day Being Exploited To Undo Security Fixes Feedly Summary: AI Summary and Description: Yes Summary: This text highlights a critical security vulnerability in Windows Update (CVE-2024-43491) that is currently being exploited in the wild. With a high CVSS score, the flaw allows attackers to reverse previously implemented…