Recent Security News

  • Microsoft Blames Nation-State Threat Actor for Confluence Zero-Day Attacks

    October 10, 2023 at 07:54PM Researchers at Microsoft have identified a known nation-state threat actor, referred to as Storm-0062, as responsible for the recent zero-day exploits targeting Atlassian’s Confluence Data Center and Server products. The malicious activity had been ongoing since September 14, before Atlassian publicly disclosed the issue. Microsoft has provided IP addresses related…

    Read More

  • Internet-Wide Zero-Day Bug Fuels Largest-Ever DDoS Event

    October 10, 2023 at 03:35PM A new zero-day attack named “HTTP/2 Rapid Reset” has exploited a security vulnerability, resulting in a record-breaking distributed denial-of-service (DDoS) flood. The attack targeted cloud and Internet infrastructure providers and lasted for minutes. The attack utilized a bug in the HTTP/2 protocol, affecting about 60% of web applications. While mitigation…

    Read More

  • October 10, 2023 at 03:10PM – Windows 10 KB5031356 update released with 25 improvements

    October 10, 2023 at 03:10PM Microsoft has released the KB5031356 cumulative update for Windows 10 21H2 and 22H2, containing security updates and fixes for various issues. Users can manually install the update through Windows Update or Microsoft Update Catalog. Notable fixes include improvements to the search box experience on the taskbar and addressing issues with…

    Read More

  • October 10, 2023 at 03:03PM – Windows 10 KB5031356 update released with 11 improvements

    October 10, 2023 at 03:03PM Microsoft has released the optional KB5031356 cumulative update for Windows 10 21H2 and 22H2, containing 25 fixes for various issues. Users can install the update through the Windows Update settings or manually from the Microsoft Update Catalog. The update also addresses a new DDoS attack technique and provides steps to…

    Read More

  • October 10, 2023 at 02:36PM – Microsoft Fixes Exploited Zero-Days in WordPad, Skype for Business

    October 10, 2023 at 02:36PM Microsoft released a large batch of software and OS updates to address over 100 vulnerabilities across Windows systems. They warned that three of these vulnerabilities are already being exploited. The updates also targeted a zero-day vulnerability in HTTP/2 Rapid Reset that exposed the internet to DDoS attacks. Two other zero-day…

    Read More