This valentines Patch Tuesday brings us 75 new CVEs which contain 3 zero-days and 9 criticals. Let’s take a look at them! CVE-2023-21823 – Windows Graphics Component Elevation of Privilege Vulnerability The first zero-day is an EoP to SYSTEM privileges, which can lead to remote code execution and, with consequences, a total takeover of a […]
Microsoft Patch Tuesday – February 2023 Read More »
We are starting this year with a hard opening from Microsoft. 98 vulnerabilities where 2 are zero-days plus additional 11 criticals, and others marked as important. Let’s briefly review them! CVE-2023-21674 – Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability This is the first zero-day under active attack. This vulnerability could lead to
Microsoft Patch Tuesday – January 2023 Read More »
In the last month of 2022, Microsoft has published fixes for 69 vulnerabilities, and 5 of them come from third parties integrated into Microsoft products. We have patches for 2 zero-days and 6 criticals. This December is a light month, but it’s typical for Microsoft. Overall, in 2022 Microsoft fixed over 900 CVEs in total.
Microsoft Patch Tuesday – December 2022 Read More »
This article is part of the #GoIntune series that describes endpoint management and protection with use of the Microsoft Intune platform. Active Directory and computer objects In the on-premises only world, Windows device is joined to the domain or workgroup. Computer object joined to the on-premises Active Directory domain has SID (Security IDentifier) that uniquely
#GoIntune #1 Device identity in Azure AD and Intune Read More »
This month, Microsoft has published fixes for 69 vulnerabilities, and 5 of them come from third parties integrated into Microsoft products. We have patches for 6 zero-days (!), 9 criticals, and 2 highs. Let’s briefly review them. CVE-2022-41040 / CVE-2022-41082 – Microsoft Exchange Server Elevation of Privilege Vulnerability / Remote Code Execution Vulnerability These patches
Microsoft Patch Tuesday – November 2022 Read More »
This month, Microsoft has fixed 85 vulnerabilities, including 15 criticals (1 with the highest CVSS = 10.0) and 1 zero-day. Let’s briefly review them. CVE-2022-41033 – Windows COM+ Event System Service Elevation of Privilege Vulnerability This patch fixes a bug that Microsoft lists as being used in active attacks, but they didn’t provide any further
Microsoft Patch Tuesday – October 2022 Read More »
This month, Microsoft has fixed 121 vulnerabilities, including 17 criticals and 2 zero-days. CVE-2022-34713 – Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability This is the first zero-day and is jokingly known as DogWalk and is slightly similar to Follina from June 2022. To get affected, the user must open a “diagcab” file,
Microsoft Patch Tuesday – August 2022 Read More »
This month, Microsoft has fixed 55 vulnerabilities, including 3 criticals and 1 zero-day. CVE-2022-22047 – Windows CSRSS Elevation of Privilege Vulnerability Let’s start with the zero-day – Microsoft is silent about exploitation details, like where or how widely it is being exploited. This bug allows an attacker to gain SYSTEM privileges. An attacker might combine
Microsoft Patch Tuesday – July 2022 Read More »
This month, Microsoft has fixed 55 vulnerabilities, including 3 criticals and 1 zero-day (well-known ‘Follina’). CVE-2022-30190 – Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability (aka Follina) Microsoft finally fixed the widely-exploited Follina MSDT zero-day vulnerability!This zero-day vulnerability was discovered last month and bypassed security protections, like Microsoft Office’s Protected View, and executed
Microsoft Patch Tuesday – June 2022 Read More »
Azure MFA (Multi-Factor Authentication) is a well-known and commonly used 2nd factor authentication service delivered as part of the Azure AD platform. The configuration of the service is straightforward and shouldn’t cause a lot of problems for IT specialists. But the Azure MFA licensing is a completely different case, especially if you also have external
Azure MFA licensing explained Read More »