article thumbnail

Microsoft Patch Tuesday, July 2021 Edition

Krebs on Security

.” Among the critical bugs is of course the official fix for the PrintNightmare print spooler flaw in most versions of Windows ( CVE-2021-34527 ) that prompted Microsoft to rush out a patch for a week ago in response to exploit code for the flaw that got accidentally published online. out of a possible 10.

DNS 272
article thumbnail

Microsoft Patch Tuesday, December 2021 Edition

Krebs on Security

.” Part of the difficulty in patching against the Log4Shell attack is identifying all of the vulnerable web applications, said Johannes Ullrich , an incident handler and blogger for the SANS Internet Storm Center. Microsoft also patched CVE-2021-43883 , an elevation of privilege vulnerability in Windows Installer.

Internet 303
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Patch Tuesday, October 2021 Edition

Krebs on Security

to fix a zero-day vulnerability (CVE-2021-30883) that is being leveraged in active attacks targeting iPhone and iPad users. CVE-2021-38672 affects Windows 11 and Windows Server 2022; CVE-2021-40461 impacts both Windows 11 and Windows 10 systems, as well as Server versions. Firstly, Apple has released iOS 15.0.2

article thumbnail

MyBook Users Urged to Unplug Devices from Internet

Krebs on Security

Hard drive giant Western Digital is urging users of its MyBook Live brand of network storage drives to disconnect them from the Internet, warning that malicious hackers are remotely wiping the drives using a critical flaw that can be triggered by anyone who knows the Internet address of an affected device.

Internet 299
article thumbnail

Microsoft Patch Tuesday, May 2021 Edition

Krebs on Security

On deck this month are patches to quash a wormable flaw, a creepy wireless bug, and yet another reason to call for the death of Microsoft’s Internet Explorer (IE) web browser. 5, 2021 to Microsoft was in Exchange Server. “IE needs to die – and I’m not the only one that thinks so,” Breen said.

Wireless 273
article thumbnail

Microsoft Patch Tuesday, November 2021 Edition

Krebs on Security

The other critical flaw patched today that’s already being exploited in the wild is CVE-2021-42321 , yet another zero-day in Microsoft Exchange Server. As Exchange zero-days go, CVE-2021-42321 appears somewhat mild by comparison. Microsoft has published a blog post/FAQ about the Exchange zero-day here.

Backups 242
article thumbnail

BSides Berlin 2021 – Aditya K. Sood’s ‘(Internet of Things or Threats) Anatomizing The Structure Of loT Botnets’

Security Boulevard

Our thanks to BSides Berlin for publishing their tremendous videos from the BSides Berlin 2021 Conference on the organization’s’ YouTube channel. The post BSides Berlin 2021 – Aditya K. Sood’s ‘(Internet of Things or Threats) Anatomizing The Structure Of loT Botnets’ appeared first on Security Boulevard.

Internet 111