article thumbnail

Microsoft Patch Tuesday, August 2020 Edition

Krebs on Security

Yes, good people of the Windows world, it’s time once again to backup and patch up! The most concerning of these appears to be CVE-2020-1380 , which is a weaknesses in Internet Explorer that could result in system compromise just by browsing with IE to a hacked or malicious website.

Backups 357
article thumbnail

Microsoft Patch Tuesday, April 2020 Edition

Krebs on Security

Near the top of the heap is CVE-2020-1020 , a remotely exploitable bug in the Adobe Font Manager library that was first detailed in late March when Microsoft said it had seen the flaw being used in active attacks. A reliable backup means you’re not losing your mind when the odd buggy patch causes problems booting the system.

Backups 260
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Microsoft Patch Tuesday, May 2020 Edition

Krebs on Security

” For example, Satnam Narang from Tenable notes that two remote code execution flaws in Microsoft Color Management ( CVE-2020-1117 ) and Windows Media Foundation ( CVE-2020-1126 ) could be exploited by tricking a user into opening a malicious email attachment or visiting a website that contains code designed to exploit the vulnerabilities.

Backups 283
article thumbnail

Microsoft Patch Tuesday, Sept. 2020 Edition

Krebs on Security

The majority of the most dangerous or “critical” bugs deal with issues in Microsoft’s various Windows operating systems and its web browsers, Internet Explorer and Edge. “We have seen the previously patched Exchange bug CVE-2020-0688 used in the wild, and that requires authentication.

Software 254
article thumbnail

Security in 2020: Revisited

Schneier on Security

Ten years ago, I wrote an essay : "Security in 2020." Well, it's finally 2020. Computers become temporary; user backup becomes irrelevant. Others, like Internet-enabled game machines or digital cameras, are truly special purpose. Similarly, connecting objects to the Internet will soon be cheap enough to be viable.

article thumbnail

This World Backup Day, Our Customers Do the Talking

Webroot

Are you taking the pledge this World Backup Day? Now in its tenth year, World Backup Day remains one of our favorite reminders of the risks of not backing up the data we hold dear. Numbers are great, and necessary for showing the scope of the problem, but I wanted to see how data loss—and backups—affect real people.

Backups 62
article thumbnail

‘Wormable’ Flaw Leads July Microsoft Patches

Krebs on Security

Top of the heap this month in terms of outright scariness is CVE-2020-1350 , which concerns a remotely exploitable bug in more or less all versions of Windows Server that attackers could use to install malicious software simply by sending a specially crafted DNS request. .” Thankfully, I was able to restore from a recent backup.

DNS 287