Patch Tuesday: Remote Code Execution Flaw in Microsoft Message Queuing

June 11, 2024 at 05:36PM Microsoft has issued urgent patches for critical vulnerabilities in its Windows operating system. The most severe flaw, CVE-2024-30080, allows for remote code execution in the Microsoft Message Queuing component. Additionally, there are numerous code execution issues in Microsoft Office, Windows services, and a remote code execution vulnerability in Windows WiFi … Read more

Ransomware gang targets Windows admins via PuTTy, WinSCP malvertising

May 18, 2024 at 02:27PM A ransomware operation targeted Windows system administrators by using Google ads to promote fake download sites for WinSCP and PuTTY. The counterfeit sites hosted trojanized installers and exploited DLL sideloading to install the Sliver post-exploitation toolkit, allowing remote access and potential deployment of ransomware. This campaign utilized typosquatting and displayed … Read more

Microsoft: Copilot ‘app’ on Windows Server mistakenly added by Edge

April 18, 2024 at 08:13AM Microsoft revealed that the Copilot app, added to Windows installs by recent Edge updates, doesn’t collect or relay data, but was mistakenly included. Though tested in Windows Server 2025, it faced backlash and was removed. However, it unexpectedly appeared in Windows Server 2022 and impacted Windows 10 and 11. Microsoft … Read more

Windows 11 KB5031455 preview update enables Moment 4 features by default

October 27, 2023 at 10:38AM Microsoft has released the optional KB5031455 Preview cumulative update for Windows 11 22H2. The update includes 72 new Moment 4 features by default and resolves 22 issues. It is part of Microsoft’s monthly non-security preview updates schedule. Users can install the update through Windows Update or manually download it from … Read more