#error-3120
#error-3120
[ follow ]
#microsoft #cybersecurity #windows-11 #vulnerabilities #windows-update #remote-code-execution #secure-launch
#cybersecurity
Information security
fromTechCrunch
4 weeks agoCISA urges companies to secure Microsoft Intune systems after hackers mass-wipe Stryker devices | TechCrunch
Pro-Iran hackers breached Stryker's device management systems and mass-wiped thousands of employee devices, prompting CISA to urge companies to implement multi-administrator approval for sensitive endpoint changes.
Web development
fromTheregister
1 month agoBrilliant backups landed web developer in big trouble
A website migration oversight caused a two-year disconnect where office staff viewed outdated content due to hardcoded DNS settings, while the client only discovered the issue when accessing the site from the office.
fromTheregister
1 month agoServer crashes traced to one very literal knee-jerk reaction
It was the time of Novell networks, RG58 cables, and bulky tower PCs. It was also a time before the telemarketer's IT department employed specialists. Carter and his two colleagues - boss Mike and part-time student Stefan - therefore handled tasks ranging from programming to support, and everything in between.
Software development
fromTheregister
2 months agoMicrosoft stays quiet while emergency Windows fixes ramp up
But are things getting worse? According to Register readers, and the company's own release health dashboard, the answer has to be yes. It isn't just you. The frequency of emergency out-of-band releases for the company's operating systems has been rapidly increasing to the point where, for every Patch Tuesday update, there'll likely be at least one out-of-band patch to fix whatever got broken.
Tech industry
Tech industry
fromThe Verge
2 months agoMicrosoft's first Windows 11 update of 2026 stopped some computers from shuting down
January 2026 Windows update caused remote connection/authentication failures across multiple Windows releases; Secure Launch on Windows 11 23H2 may prevent shutdown or hibernation.
Gadgets
fromZDNET
2 months agoMicrosoft's latest update patches six zero-days and two critical flaws - but is it another buggy mess?
February Patch Tuesday refreshes Secure Boot certificates and fixes Windows 11/10 feature and security bugs such as full‑screen gaming, WPA3 connectivity, fonts, GPUs, and File Explorer.
Information security
fromTechRepublic
1 month agoMicrosoft Confirms Windows 11 Bug Crippling PCs, Blocking Access to Core Drive
A Windows 11 bug from the February 2026 security update locks users out of their C: drive, primarily affecting Samsung computers, preventing access to files and launching applications.
Information security
fromThe Hacker News
4 weeks ago9 Critical IP KVM Flaws Enable Unauthenticated Root Access Across Four Vendors
Nine critical vulnerabilities in low-cost IP KVM devices from multiple manufacturers allow unauthenticated attackers to gain root access and control compromised systems at the BIOS/UEFI level.
Information security
fromTechRepublic
1 month agoMicrosoft Issues Emergency Patch for Critical Windows 11 RRAS Vulnerabilities
Microsoft released an out-of-band security update for Windows 11 addressing three critical vulnerabilities in the Windows Routing and Remote Access Service that enable remote code execution through malicious server connections.
Information security
fromSecurityWeek
1 month agoCritical HPE AOS-CX Vulnerability Allows Admin Password Resets
HPE released patches for a critical vulnerability in Aruba Networking AOS-CX switches that allows remote, unauthenticated attackers to reset administrator passwords and gain full system control.
Information security
fromThe Hacker News
1 month agoDozens of Vendors Patch Security Flaws Across Enterprise Software and Network Devices
SAP released security updates for two critical vulnerabilities enabling arbitrary code execution: CVE-2019-17571 in Quotation Management Insurance and CVE-2026-27685 in NetWeaver Enterprise Portal Administration.
fromTheregister
2 months agoOld Windows quirks help punch through new admin defenses
The issue focuses on how Windows handles these directories for specific user sessions. Because the kernel creates a DOS device object directory on demand, rather than at login, it cannot check whether the user is an admin during the creation process. Unlike UAC, Administrator Protection uses a hidden shadow admin account whose token handle can be returned by the system when calling the NtQueryInformationToken API function.
Information security
Information security
fromTechzine Global
2 months agoBeyondTrust Remote Support has a critical vulnerability
Unauthenticated remote-code-execution vulnerability in BeyondTrust Remote Support and Privileged Remote Access enables full system compromise; affected versions require urgent patching or upgrades.
[ Load more ]