#windows-security

[ follow ]
#cybersecurity
Theregister
5 days ago
Tech industry

Microsoft working on OS update to prevent another IT outage

Microsoft is enhancing Windows security by enabling endpoint solutions to operate outside the kernel to prevent outages. [ more ]
The Verge
6 days ago
Tech industry

Microsoft is building new Windows security features to prevent another CrowdStrike

Microsoft plans to help security vendors operate outside of the Windows kernel to improve system resilience and security.
The changes are a response to the CrowdStrike incident that affected 8.5 million systems. [ more ]
The Hacker News
1 week ago
Information security

Microsoft Issues Patches for 79 Flaws, Including 3 Actively Exploited Windows Flaws

Microsoft's September 2024 Patch Tuesday update addresses 79 vulnerabilities, including three actively exploited flaws requiring immediate attention to security protocols. [ more ]
Ars Technica
3 weeks ago
Tech industry

Microsoft to host security summit after CrowdStrike disaster

Microsoft is enhancing Windows security measures following a major outage caused by a third-party software update.
The company is convening a summit with cybersecurity experts to address these challenges. [ more ]
Engadget
3 weeks ago
Tech industry

Microsoft will host a security conference after the CrowdStrike shutdown

Microsoft's conference aims to address security vulnerabilities following the CrowdStrike outage, proposing new practices and technologies to enhance system stability. [ more ]
The Verge
3 weeks ago
Tech industry

Microsoft to host CrowdStrike and others to discuss Windows security changes

Microsoft is hosting a summit to enhance Windows security following a CrowdStrike incident that affected 8.5 million devices. [ more ]
Theregister
5 days ago
Tech industry

Microsoft working on OS update to prevent another IT outage

Microsoft is enhancing Windows security by enabling endpoint solutions to operate outside the kernel to prevent outages. [ more ]
The Verge
6 days ago
Tech industry

Microsoft is building new Windows security features to prevent another CrowdStrike

Microsoft plans to help security vendors operate outside of the Windows kernel to improve system resilience and security.
The changes are a response to the CrowdStrike incident that affected 8.5 million systems. [ more ]
The Hacker News
1 week ago
Information security

Microsoft Issues Patches for 79 Flaws, Including 3 Actively Exploited Windows Flaws

Microsoft's September 2024 Patch Tuesday update addresses 79 vulnerabilities, including three actively exploited flaws requiring immediate attention to security protocols. [ more ]
Ars Technica
3 weeks ago
Tech industry

Microsoft to host security summit after CrowdStrike disaster

Microsoft is enhancing Windows security measures following a major outage caused by a third-party software update.
The company is convening a summit with cybersecurity experts to address these challenges. [ more ]
Engadget
3 weeks ago
Tech industry

Microsoft will host a security conference after the CrowdStrike shutdown

Microsoft's conference aims to address security vulnerabilities following the CrowdStrike outage, proposing new practices and technologies to enhance system stability. [ more ]
The Verge
3 weeks ago
Tech industry

Microsoft to host CrowdStrike and others to discuss Windows security changes

Microsoft is hosting a summit to enhance Windows security following a CrowdStrike incident that affected 8.5 million devices. [ more ]
morecybersecurity
Theregister
3 weeks ago
Information security

PoCcode released for zero-click Windows critical vuln

Windows users must install the latest patches swiftly to protect against CVE-2024-38063, a critical vulnerability that allows remote code execution. [ more ]
#vulnerabilities
Theregister
1 month ago
Information security

Windows patches can be forcibly reversed, reopening bugs

Black Hat Techniques demonstrated how security patches on Windows machines can be forcibly removed to exploit fixed vulnerabilities again. [ more ]
Theregister
1 month ago
Information security

Researcher finds a way to invisibly reverse Windows updates

A Windows downgrade attack leveraging the Windows update process exposes vulnerabilities in key Windows components, allowing manipulation with high impact and difficulty of detection. [ more ]
Theregister
2 months ago
Tech industry

Windows: Insecure by design

Microsoft's security flaws have persisted since the 1990s, with recent high-severity vulnerabilities like CVE-2024-30080 and CVE-2024-30078 raising concerns. [ more ]
Theregister
1 month ago
Information security

Windows patches can be forcibly reversed, reopening bugs

Black Hat Techniques demonstrated how security patches on Windows machines can be forcibly removed to exploit fixed vulnerabilities again. [ more ]
Theregister
1 month ago
Information security

Researcher finds a way to invisibly reverse Windows updates

A Windows downgrade attack leveraging the Windows update process exposes vulnerabilities in key Windows components, allowing manipulation with high impact and difficulty of detection. [ more ]
Theregister
2 months ago
Tech industry

Windows: Insecure by design

Microsoft's security flaws have persisted since the 1990s, with recent high-severity vulnerabilities like CVE-2024-30080 and CVE-2024-30078 raising concerns. [ more ]
morevulnerabilities
Theregister
1 month ago
Information security

Bad apps bypass Windows alerts for six years using LNK files

Attackers can bypass Windows SmartScreen and Smart App Control using the 'LNK Stomping' technique, nullifying MotW and enabling the execution of malicious apps. [ more ]
The Hacker News
1 month ago
Information security

Google Chrome Adds App-Bound Encryption to Protect Cookies from Malware

Google Chrome introduces app-bound encryption on Windows for added data protection. [ more ]
Zero Day Initiative
1 month ago
JavaScript

Zero Day Initiative - Breaking Barriers and Assumptions: Techniques for Privilege Escalation on Windows: Part 2

Escalating privileges through file deletion and symbolic link creation in ESET Smart Security's ekrn.exe service. [ more ]
[ Load more ]