Windows Cybersecurity - TechnoidHost

New Zero day vulnerabilities for Windows have been discovered, Microsoft has rolled out security patches to fix 71 vulnerabilities in Microsoft Windows and other softwares. You need to update your Windows PC immediately to the latest patches as it includes fixes for an actively exploited privilege escalation vulnerability. This can be exploited in conjunction with remote code execution bugs to take control over vulnerable systems. Of the 71 vulnerabilities discovered, two are rated critical, 68 are rated Important and one is rated low in terms of severity. While the other three issues are listed as publicly known at the time of the release. Four zero-days listed are as follows CVE-2021-40449 (CVSS score: 7.8) - Win32k Elevation of Privilege Vulnerability CVE-2021-41335 (CVSS score: 7.8) - Windows Kernel Elevation of Privilege Vulnerability CVE-2021-40469 (CVSS score: 7.2) - Windows DNS Server Remote Code Execution Vulnerability CVE-2021-41338 (CVSS score: 5.5) - Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability According to Kaspersky, who discovered the CVE-2021-40449 a use-after-free vulnerability in the Win32k kernel driver is on top of the list. It has been exploited in the wild since August and early September 2021 as part of a widespread espionage campaign targeting IT companies, defense contractors, and diplomatic entities. The threat cluster is dubbed as "MysterySnail" by the Russian cybersecurity company. According to Boris Larin and Costin Raiu, Kaspersky researchers in a technical write-up said, "Code similarity and re-use of C2 infrastructure we discovered allowed us to connect these attacks with the actor known as IronHusky and Chinese-speaking APT activity dating back to 2012." The infection chains are capable of deploying remote access trojans capable of collecting and exfiltrating system information from compromised hosts before reaching out to its C2 server for further instructions. Other Remote Code Execution Vulnerabilities Affecting Microsoft Exchange Server - CVE-21-2642702 Affecting Windows Hyper-V - CVE-2021-38672 and CVE-2021-40461 Affecting SharePoint Server - CVE-2021-40487 and CVE-2021-41344 Affecting Microsoft Word - CVE-2021-40486 An information disclosure flaw in Rich Text Edit Control - CVE-2021-40454 The latest patch fixed two shortcomings newly discovered in the Print Spooler component — CVE-2021-41332 and CVE-2021-36970. According to security researcher Ollypwn, "In this case, it looks like an attacker can abuse the Spooler service to upload arbitrary files to other servers." Other Software Patches Software patches from other vendors have also been released to address several vulnerabilities, this includes — Adobe Android Apple Cisco Citrix Intel Oracle Linux Red Hat SUSE SAP Schneider Electric Siemens VMware Related Articles: Can you Run Windows 11 on Old PC’s? AMD Says, Windows 11 Bug Slows Down Ryzen CPU Performance by up to 15% Microsoft Accidentally Leaks New Windows 11 Media Player

Top News

New Batmobile Features in the Latest Trailer

Facebook Plans to Hire 10000 to build Metaverse

Beware NFTs Now Come with Wallet Emptying Malwares

How Major Carriers in the US Are Coping with 5G

Fortnite Chapter 2 Season 8 – FNCS Twitch drop started!

Categories

Top News

Top 10 Bitcoin Storage Wallets in 2021

Microsoft Edge Latest Feature Makes it The Best Browser on Mac

DeepNude App alternative sites available and more dangerous

Top 10 Artificial Intelligence Technologies In 2021

Latest

New Batmobile Features in the Latest Trailer

Facebook Plans to Hire 10000 to build Metaverse

Beware NFTs Now Come with Wallet Emptying Malwares

How Major Carriers in the US Are Coping with 5G

Fortnite Chapter 2 Season 8 – FNCS Twitch drop started!

Slides

Newsletter

New Nagios Software Bugs Can Allow Hackers to Compromise your IT Infrastructures

Microsoft plans to decrease share of money from game developers

WhatsApp Payments – You May Soon Earn Cash Back

Fortnite Alien Abduction – How To Get Abducted By Aliens In Fortnite?

Are NFT Trading Cards Collectibles or An Asset Bubble?

DOJ charges 4 Chinese Nationals with State-Backed Worldwide Hacking Campaign

How to Refund cosmetic items in Fortnite using Return Requests

PayPal UK Customers Can Now Buy, Sell, and Hold Bitcoin

Millions of Dell PCs Worldwide affected by BIOS PrivEsc Bugs

Business Intelligence Company – MicroStrategy Turns into Bitcoin Addict Grabs Another $10m Crypto Coins

Top News

Categories

Top News

Latest

Slides

Newsletter

Subscribe to our email newsletter.

Follow Us