brangberg – Page 1109

3 Actively Exploited Zero-Day Flaws Patched in Microsoft’s Latest Security Update

Microsoft kicked off 2025 with a new set of patches for a total of 161 security vulnerabilities across its software portfolio, including three zero-days that have been actively exploited in attacks.
Of the 161 flaws, 11 are rated Critical, and 149 are rated Important in severity. One other flaw, a non-Microsoft CVE related to a Windows Secure Boot bypass (CVE-2024-7344), has not been assigned

Critical SimpleHelp Flaws Allow File Theft, Privilege Escalation, and RCE Attacks

Cybersecurity researchers have disclosed multiple security flaws in SimpleHelp remote access software that could lead to information disclosure, privilege escalation, and remote code execution.
Horizon3.ai researcher Naveen Sunkavally, in a technical report detailing the findings, said the “vulnerabilities are trivial to reverse and exploit.”
The list of identified flaws is as follows –

Author: brangberg

3 Actively Exploited Zero-Day Flaws Patched in Microsoft’s Latest Security Update

Critical SimpleHelp Flaws Allow File Theft, Privilege Escalation, and RCE Attacks

January Windows updates may fail if Citrix SRA is installed

Allstate car insurer sued for tracking drivers without permission

WP3.XYZ malware attacks add rogue admins to 5,000+ WordPress sites

Adobe: Critical Code Execution Flaws in Photoshop

US govt says North Korea stole over $659 million in crypto last year

Windows 10 KB5049981 update released with new BYOVD blocklist

Microsoft Patches Trio of Exploited Windows Hyper-V Zero-Days

Biden Signs Executive Order Aimed at Growing AI Infrastructure in the US