by Surur
2 months
If you are administering an on-premise Exchange Server (2013, 2016, 2019) you need to urgently apply a set of patches Microsoft released today for vulnerabilities in the OS which are being actively exploited. The vulnerabilities h...
by Surur
2 months
Better make sure your Windows 10 patches are up to date, as Google’s Project Zero has just released Proof of Concept code for a just-patched Windows 10 flaw which can be exploited by simply visiting a web page. Microsoft Dir...
by Surur
2 months
Apple is introducing a new security technique in iOS 14.5 which will make it much more difficult for nation-states to hack iPhone users without them knowing. State-sponsored hackers have been using so-called 0-click exploits, wher...
by Surur
3 months
Microsoft has posted their final update on the Solarwinds attack which infected 18,000 companies last year, including Microsoft’s network. Microsoft says based on their investigation, more than 1,000 enemy engineers have wor...
by Surur
3 months
Telegram’s main selling point is that their chat network is secure and private, but it appears the company has failed users on the Mac on both accounts. Security researcher Dhiraj Mishra has discovered that Telegram was not ...
by Pradeep
3 months
During the quarterly earnings call, Microsoft CEO Satya Nadella revealed that Microsoft’s security business has surpassed $10 billion in revenue in the past 12 months. This number includes revenue from security, compliance, ...
by Surur
3 months
Apple is pushing out a new update for the iPhone OS, taking it to iOS 14.4. The update addresses a flaw which is being actively exploited, with Apple noting: WebKit Impact: A remote attacker may be able to cause arbitrary code exe...
by Surur
4 months
Microsoft has posted another update on the Solarwinds attack which infected 18,000 companies last year, including Microsoft’s network. This time their post is a deep dive on how the attackers worked to evade detection and sp...
by Surur
4 months
In a post on the Microsoft Security Response Centre Microsoft has warned network admins that a coming Windows Security Update will soon mean that Domain Controller enforcement mode will be enabled by default. The move is to addres...
by Surur
4 months
On the Microsoft Security and Compliance blog, Microsoft has just announced that they are switching Microsoft Defender for Endpoint from Require approval for any remediation (semi) to Remediate threats automatically (full), starti...
by Surur
4 months
Infosec researcher Jonas L has discovered a short string which, when it forms part of a filesystem pathway, will cause any Windows 10 hard drive to be corrupted. The short string can be delivered to the OS in a number of ways, suc...