Recent Security News

  • DarkMe Malware Targets Traders Using Microsoft SmartScreen Zero-Day Vulnerability

    February 14, 2024 at 02:39AM A zero-day exploit in Microsoft Defender SmartScreen, leveraged by the threat actor Water Hydra (aka DarkCasino), targets financial market traders. Exploiting CVE-2024-21412, the attacker convinces victims to click on a booby-trapped URL, bypassing security checks. The end goal is to deliver the DarkMe trojan, capable of executing additional instructions and…

    Read More

  • Microsoft Rolls Out Patches for 73 Flaws, Including 2 Windows Zero-Days

    February 14, 2024 at 12:51AM Microsoft has released 73 patches to address security flaws in its software lineup for February 2024’s Patch Tuesday updates. This includes 5 Critical, 65 Important, and 3 Moderate vulnerabilities, along with fixes for the Chromium-based Edge browser. Among the critical flaws is a bypass vulnerability in Windows SmartScreen and Internet…

    Read More

  • Windows 10 KB5034763 update released with new fixes, changes

    February 13, 2024 at 03:28PM Microsoft has released the KB5034763 cumulative update for Windows 10 21H2 and 22H2. It includes compliance with Europe’s Digital Markets Act and security updates. The update introduces no new features but focuses on bug fixes, including an improved weather experience and fixing known issues. See the BleepingComputer for detailed information.…

    Read More

  • Microsoft February 2024 Patch Tuesday fixes 2 zero-days, 73 flaws

    February 13, 2024 at 03:28PM The provided text contains a list of CVE IDs and their associated vulnerabilities across various Microsoft products. The list spans different severity levels, such as Important, Moderate, and Critical. It outlines vulnerabilities related to .NET, Azure Active Directory, Azure DevOps, Azure File Sync, Microsoft Edge, Microsoft Office, Skype for Business,…

    Read More

  • SmartScreen Vulnerability: CVE-2024-21412 Facts and Fixes

    February 13, 2024 at 03:16PM Microsoft issued a patch for CVE-2024-21412, a zero-day SmartScreen vulnerability used by the Water Hydra APT group to target financial market traders. Trend Micro protects customers from this, emphasizing the importance of proactive cybersecurity measures and a dedicated bug bounty program. Trend customers have been protected since January 17 via…

    Read More