Windows 11 KB5046617 and KB5046633 cumulative updates released

November 12, 2024 at 01:36PM Microsoft has released mandatory cumulative updates KB5046617 and KB5046633 for Windows 11 versions 24H2 and 23H2, addressing security vulnerabilities and various issues. Users can install these updates via Windows Update or the Microsoft Update Catalog. Key fixes include enhancements to Task Manager, internet connectivity, and notification settings. ### Meeting Takeaways: … Read more

New Linux Bug Could Lead to User Password Leaks and Clipboard Hijacking

March 29, 2024 at 07:09AM A vulnerability in the “wall” command of the util-linux package, tracked as CVE-2024-28085, allows unprivileged users to manipulate other users’ terminals on certain Linux distributions. This could lead to password leaks or clipboard alteration. Users are advised to update to util-linux version 2.40 to address this issue. Another vulnerability, CVE-2024-1086, … Read more

QNAP warns of critical command injection flaws in QTS OS, apps

November 6, 2023 at 07:52AM QNAP Systems has issued security advisories regarding two critical command injection vulnerabilities in its QTS operating system and applications for network-attached storage (NAS) devices. The flaws, tracked as CVE-2023-23368 and CVE-2023-23369, can be exploited remotely by attackers. Multiple QTS versions are affected, but fixes are available for download. Admins are … Read more

HelloKitty Ransomware Group Exploiting Apache ActiveMQ Vulnerability

November 2, 2023 at 05:30AM Researchers have identified a critical security flaw in the Apache ActiveMQ message broker service that could allow remote code execution. The flaw has been exploited to deploy HelloKitty ransomware on target systems. The vulnerability has a severity score of 10.0 and has been addressed in the latest ActiveMQ versions. Users … Read more