#windows-xp-support
#windows-xp-support
[ follow ]
#patch-tuesday
Information security
fromComputerworld
1 month agoFor March, Patch Tuesday delivers fixes for 83 vulnerabilities
Microsoft's March Patch Tuesday addresses 83 vulnerabilities including two zero-day exploits in SQL Server and .NET, while introducing Common Log File System hardening with signature verification.
Information security
fromComputerworld
1 month agoFor March, Patch Tuesday delivers fixes for 83 vulnerabilities
Microsoft's March Patch Tuesday addresses 83 vulnerabilities including two zero-day exploits in SQL Server and .NET, while introducing Common Log File System hardening with signature verification.
fromTheregister
2 months agoMicrosoft stays quiet while emergency Windows fixes ramp up
But are things getting worse? According to Register readers, and the company's own release health dashboard, the answer has to be yes. It isn't just you. The frequency of emergency out-of-band releases for the company's operating systems has been rapidly increasing to the point where, for every Patch Tuesday update, there'll likely be at least one out-of-band patch to fix whatever got broken.
Tech industry
Information security
fromTechRepublic
1 month agoMicrosoft Issues Emergency Patch for Critical Windows 11 RRAS Vulnerabilities
Microsoft released an out-of-band security update for Windows 11 addressing three critical vulnerabilities in the Windows Routing and Remote Access Service that enable remote code execution through malicious server connections.
Information security
fromTechzine Global
1 month agoMicrosoft is blocking automatic Windows installations via WDS
Microsoft is discontinuing automatic Windows network deployments via WDS and Unattend.xml due to security vulnerability CVE-2026-0386 that allows attackers to execute unauthorized code and steal credentials.
fromTheregister
2 months agoOld Windows quirks help punch through new admin defenses
The issue focuses on how Windows handles these directories for specific user sessions. Because the kernel creates a DOS device object directory on demand, rather than at login, it cannot check whether the user is an admin during the creation process. Unlike UAC, Administrator Protection uses a hidden shadow admin account whose token handle can be returned by the system when calling the NtQueryInformationToken API function.
Information security
fromTechzine Global
1 month agoSupport for Windows Server 2016 is coming to an end
Microsoft is warning organizations about the impending end of support for several Windows products from 2016. These include Windows Server 2016, Windows 10 Enterprise 2016 LTSB, and Windows IoT Enterprise LTSB 2016. According to Microsoft, these products are approaching the final stage of their lifecycle, which has direct consequences for organizations that still depend on this software. The lifecycle documentation on Microsoft Learn shows that Windows Server 2016 has not received regular support since January 2022 and is now fully in the extended support phase.
Information security
fromTechRepublic
1 month agoMicrosoft: Critical Windows Admin Center Flaw Allows Privilege Escalation
A newly disclosed Windows Admin Center flaw carries a CVSS score of 8.8 and could let an authorized user quietly escalate privileges across enterprise environments. The vulnerability affects WAC version 2.6.4 and, if exploited, may grant sweeping administrative control over the very systems it was built to manage. "Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network," Microsoft said in its advisory.
Information security
[ Load more ]