Microsoft Windows
Patch Tuesday not Done ’til LINUX Won’t Run?
Richi Jennings | | CVE-2022-2601, Dual boot, GRUB2 Bootloader Secure Boot Bypass, Linux, Microsoft, Microsoft Patch Tuesday August 2024, Microsoft Windows, Patch Tuesday, SB Blogwatch, SBAT, secure boot, Secure Boot Advanced Targeting, Windows
Redmond reboot redux: “Something has gone seriously wrong.” You can say that again, Microsoft ...
Security Boulevard
Microsoft Privacy FAIL: Windows 11 Silently Backs Up to OneDrive
Richi Jennings | | Microsoft, Microsoft Account Security, Microsoft OneDrive, Microsoft Windows, OneDrive, Privacy, SB Blogwatch, Windows, Windows 11
Copying users’ files and deleting some? Even a cartoon hound knows this isn’t fine ...
Security Boulevard
Use Windows 10? You Must PAY for Security
Richi Jennings | | ESU, Extended Lifecycle Support, Extended Support Updates, Microsoft, Microsoft 365, Microsoft 365 (365), Microsoft patch tuesday, Microsoft Windows, MSFT, Patch Tuesday, SB Blogwatch, Windows 10, Windows Update, Windows updates, Windows10
Micro$oft Window$ E$U: From October 2025, Microsoft will start charging for security updates to Windows 10 ...
Security Boulevard
Rust in Windows — it’s Official — Safe and Fast
Richi Jennings | | David Weston, memory safe, memory safe language, Microsoft, Microsoft Windows, rust, SB Blogwatch, Windows
40-year-old code: Starting with ancient, vulnerable legacy, Redmond team is rewriting chunks in the trendy secure language ...
Security Boulevard
Introducing RPC Investigator
A new tool for Windows RPC research By Aaron LeMasters Trail of Bits is releasing a new tool for exploring RPC clients and servers on Windows. RPC Investigator is a .NET application ...
What child is this?
A Primer on Process Reparenting in Windows By Yarden Shafir Process reparenting is a technique used in Microsoft Windows to create a child process under a different parent process than the one ...
Broken Windows: ‘Follina’ Flaw not Fixed — For 22 MONTHS
A nasty zero-click, zero-day RCE bug remains unpatched in Windows. Dubbed “Follina,” Microsoft’s done diddly-squat about it ...
Security Boulevard
Blocking the Exploitation of PrintNightmare
Virsec Team | | application aware protection, application aware workload protection, Cyber Security, Cyber-attack, Microsoft Windows, printers, PrintNightmare vulnerability, runtime protection, vulnerability
Last week, in its Patch Tuesday update, Microsoft Security Response Center released an additional security fix for the series of zero-day vulnerabilities known collectively as “PrintNightmare,” which can be used to break ...
Try This One Weird Trick Russian Hackers Hate
BrianKrebs | | Allison Nixon, Colonial Pipeline ransomware attack, Cybereason, DarkSide ransomware, FBI, Lance James, Microsoft Windows, Ransomware, rEvil, Security Tools, Sodinokibi, Twitter, Unit221B
In a Twitter discussion last week on ransomware attacks, KrebsOnSecurity noted that virtually all ransomware strains have a built-in failsafe designed to cover the backsides of the malware purveyors: They simply will ...
Google ‘Irresponsibly’ Discloses Windows Zero-Day
Google discovered a “threat actor” exploiting a pair of bugs—one in Chrome and one in Windows ...
Security Boulevard