Microsoft patches Windows Kernel zero-day exploited since 2023
Slovak cybersecurity company ESET says a newly patched zero-day vulnerability in the Windows Win32 Kernel Subsystem has been ...
The Hacker News1d
URGENT: Microsoft Patches 57 Security Flaws, Including 6 Actively Exploited Zero-Days
Microsoft fixes 57 security flaws, including six zero-days exploited in the wild. CISA mandates patches by April 1.
CISA tags Windows, Cisco vulnerabilities as actively exploited
CISA has warned US federal agencies to secure their systems against attacks exploiting vulnerabilities in Cisco and Windows ...
CRN23h
Microsoft Discloses ‘Extraordinary’ Number Of Actively Exploited Vulnerabilities: Researcher
Microsoft’s monthly release of security fixes addresses vulnerabilities including six flaws that are believed to be under ...
CSO Online13d
Critical Microsoft Partner Center vulnerability under attack, CISA warns
With CISA’s warning now public, the window for mitigating the threat is rapidly closing. Organizations that depend on ...
Infosecurity Magazine2d
CISA Urges All Organizations to Patch Exploited Critical Ivanti Vulnerabilities
The US Cybersecurity and Infrastructure Security Agency (CISA) has added five new flaws in Ivanti and VeraCore products to ...
CSO Online8d
Microsoft pushes a lot of products on users, but here’s one cybersecurity can embrace
The Entra ID P2 license is just one among many products and services that Microsoft is making mandatory for users, but its ...
Feds add Windows, router vulnerabilities to actively exploited list
One exploit being tracked, CVE-2023-20118, allows hackers to remotely "execute arbitrary commands" on certain VPN routers.
Microsoft signed a dodgy driver and now ransomware scum are exploiting it
Paragon Software has released a new driver, BioNTdrv.sys version 2.0.0, which fixes these flaws. Vulnerable versions of the ...
The Hacker News15d
CISA Adds Microsoft and Zimbra Flaws to KEV Catalog Amid Active Exploitation
CISA adds Microsoft Partner Center and Zimbra ZCS flaws to its KEV catalog, citing active exploitation. Federal agencies must patch by March 18 to mit ...
Infosecurity Magazine9d
CISA Urges Government to Patch Exploited Cisco, Microsoft Flaws
The latest additions to the CISA Known Exploited Vulnerabilities (KEV) catalog include CVE-2023-20118, a command injection ...