New critical Microsoft Outlook RCE bug is trivial to exploit

February 14, 2024 at 05:02PM Microsoft has identified a critical security vulnerability, CVE-2024-21413, in Outlook that allows remote unauthenticated attackers to exploit it, leading to remote code execution and the theft of NTLM credentials. The flaw bypasses Protected View and can be exploited through the Preview Pane, affecting multiple Office products. Check Point revealed a … Read more

Microsoft: New critical Outlook RCE bug exploited as zero-day

February 14, 2024 at 03:12PM Microsoft updated a security advisory warning about a critical Outlook bug, tracked as CVE-2024-21413, leading to remote code execution if exploited. The vulnerability allows bypassing Protected View, affecting multiple Office products including Microsoft Outlook 2016 and Office 2019. Check Point researchers discovered the vulnerability called Moniker Link, recommending applying the … Read more

Zoom Patches Critical Vulnerability in Windows Applications

February 14, 2024 at 09:03AM Zoom patched seven vulnerabilities in its desktop and mobile applications, including a critical-severity bug in Windows software (CVE-2024-24691). The company also addressed high-severity and medium-severity flaws, warning of potential exploitation for conducting denial-of-service attacks or leaking information. Users are urged to update their applications to the latest releases. No reported … Read more

Chipmaker Patch Tuesday: AMD and Intel Patch Over 100 Vulnerabilities

February 14, 2024 at 09:03AM AMD and Intel released patches for over 100 vulnerabilities, including 21 high-severity vulnerabilities, in their processors and software products. AMD addressed flaws in embedded processors, SEV firmware, and UltraScale and UltraScale+ FPGA series devices. Intel issued patches for various drivers, device firmware, Ethernet tools, and software products, resolving a total … Read more

Microsoft Rolls Out Patches for 73 Flaws, Including 2 Windows Zero-Days

February 14, 2024 at 12:51AM Microsoft has released 73 patches to address security flaws in its software lineup for February 2024’s Patch Tuesday updates. This includes 5 Critical, 65 Important, and 3 Moderate vulnerabilities, along with fixes for the Chromium-based Edge browser. Among the critical flaws is a bypass vulnerability in Windows SmartScreen and Internet … Read more

Windows 10 KB5034763 update released with new fixes, changes

February 13, 2024 at 03:28PM Microsoft has released the KB5034763 cumulative update for Windows 10 21H2 and 22H2. It includes compliance with Europe’s Digital Markets Act and security updates. The update introduces no new features but focuses on bug fixes, including an improved weather experience and fixing known issues. See the BleepingComputer for detailed information. … Read more

Windows 11 KB5034765 update released with Start Menu fixes

February 13, 2024 at 01:54PM Microsoft released the KB5034765 cumulative update for Windows 11 versions 23H2 and 22H2 to fix Start menu issues and improve system stability. The update includes security patches and changes to the taskbar. It also resolves problems with Copilot, search function, WMI, and BitLocker encryption settings. Users can install the update … Read more

Patch Tuesday: Adobe Warns of Critical Flaws in Widely Deployed Software

February 13, 2024 at 01:03PM Adobe released patches for 30 security vulnerabilities in various products, including Adobe Acrobat, Reader, and Magento Open Source, among others. Users are at risk of code execution, security feature bypass, and denial-of-service attacks. The urgent patches address critical flaws and code execution bugs, with Adobe’s assurance of no known exploits … Read more

ICS Patch Tuesday: Siemens Addresses 270 Vulnerabilities

February 13, 2024 at 07:39AM In February 2024, Siemens and Schneider Electric released 18 new security advisories for ICS Patch Tuesday. Siemens addressed 270 vulnerabilities as part of this release, as reported by SecurityWeek. It seems like you’ve shared a snippet of meeting notes or a news article related to cybersecurity. Is there a specific … Read more

Microsoft: Outlook clients not syncing over Exchange ActiveSync

February 9, 2024 at 01:03PM Microsoft warned Outlook for Microsoft 365 users of potential connection issues with Exchange ActiveSync (EAS) after a January update. This affects synchronization of email, calendar, contacts, and tasks with mobile devices. A temporary fix includes reverting to an unaffected Office build or disabling updates. Microsoft is investigating and will provide … Read more