Windows 11 Task Manager bug shows wrong number of running processes

October 31, 2024 at 04:10PM Microsoft is addressing a reporting issue in Windows 11, where Task Manager displays zero running apps and processes after the KB5044384 preview update. Although the app remains functional, this issue is linked to the “Group by Type” view. A fix is underway for a future update. ### Meeting Notes Takeaways … Read more

Windows 11 Task Manager says no apps are active after preview update

October 31, 2024 at 12:50PM Microsoft is investigating a Windows 11 issue, where Task Manager incorrectly displays zero running apps and processes after the October 2024 update (KB5044384). While the app functions normally, the error occurs only when “Group by Type” view is enabled. A fix is forthcoming. **Meeting Notes Summary: Key Takeaways** 1. **Issue … Read more

Russia’s APT29 Mimics AWS to Steal Windows Credentials

October 25, 2024 at 04:29PM APT29, a notorious Russian cyber threat group, has targeted military, government, and private sectors through phishing campaigns. They recently aimed to steal Windows credentials by disguising emails as AWS communications. Experts advise blocking RDP files at email gateways and monitoring outgoing connections to thwart future attacks. **Meeting Takeaways: APT29 Phishing … Read more

Microsoft SharePoint RCE flaw exploits in the wild – you’ve had 3 months to patch

October 23, 2024 at 03:35PM A deserialization vulnerability in Microsoft SharePoint, CVE-2024-38094, is actively exploited, allowing attackers to inject code remotely. CISA added it to its catalog, urging timely remediation for all organizations. Microsoft previously patched the issue, emphasizing the need for swift action, especially for federal agencies by November 12. ### Meeting Takeaways 1. … Read more

Exploit released for new Windows Server “WinReg” NTLM Relay attack

October 22, 2024 at 01:33PM Public exploit code has been released for CVE-2024-43532, a vulnerability in Microsoft’s Remote Registry client that may allow attackers to downgrade authentication security. It affects Windows server versions from 2008 to 2022 and Windows 10/11, enabling potential domain takeover through NTLM authentication relay attacks. A fix has been issued. ### … Read more

Certain ASUS laptops get BSOD when upgrading to Windows 11 24H2

October 21, 2024 at 12:48PM Microsoft warns that ASUS X415KA and X515KA laptops may encounter blue screen of death (BSOD) issues when upgrading to Windows 11 version 24H2. Users are advised not to attempt manual updates until a solution is found, as the previous version has reached end of servicing. ### Meeting Takeaways: 1. **Issue … Read more

Microsoft: macOS Vulnerability Potentially Exploited in Adware Attacks

October 18, 2024 at 08:55AM Microsoft reports that the Adload macOS adware may exploit a privacy bypass vulnerability that was recently fixed in Sequoia 15. This highlights ongoing security concerns related to adware attacks on macOS platforms. **Meeting Takeaways:** 1. **Adware Concern:** The Adload macOS adware is potentially exploiting a vulnerability related to privacy bypass. … Read more

Microsoft deprecates PPTP and L2TP VPN protocols in Windows Server

October 12, 2024 at 02:10PM Microsoft has deprecated the Point-to-Point Tunneling Protocol (PPTP) and Layer 2 Tunneling Protocol (L2TP) in future Windows Server versions, urging administrators to transition to more secure protocols. **Meeting Takeaways:** 1. **Deprecation Announcement:** Microsoft has officially deprecated the Point-to-Point Tunneling Protocol (PPTP) and Layer 2 Tunneling Protocol (L2TP) for future versions … Read more

Microsoft fixes Remote Desktop issues caused by Windows Server update

October 8, 2024 at 03:10PM Microsoft’s October 2024 Patch Tuesday addresses a known issue in Windows servers disrupting Remote Desktop connections post-July security updates. It may affect legacy protocol usage. Temporary fixes include firewall customization and registry edits. Notably, this follows previous instances of connectivity problems after security updates. The update addresses 118 vulnerabilities, including … Read more

Microsoft October 2024 Patch Tuesday fixes 5 zero-days, 118 flaws

October 8, 2024 at 02:18PM The text lists numerous CVE IDs and their associated vulnerabilities, including remote code execution, denial of service, elevation of privilege, and information disclosure. These vulnerabilities impact various Microsoft products such as .NET, Visual Studio, Azure, Windows, and Office, among others. The severity ranges from critical to moderate. Based on the … Read more