Patch Tuesday – Page 6 – Computer Security Articles

Security Sophos

January 2023 patch roundup: Microsoft tees up 98 updates

January 10, 2023 admin 3d builder, Adobe Reader, cve-2023-21531, cve-2023-21552, cve-2023-21559, cve-2023-21674, cve-2023-21678, cve-2023-21743, exp/2321552-a, exp/2321674-a, Featured, microsoft, Patch Tuesday, Sharepoint, sophos x-ops, threat research, windows, Windows 7, x-ops

Credit to Author: Angela Gunn| Date: Wed, 11 Jan 2023 02:05:40 +0000

Adobe greets the new year with patches for 18 vulns in Reader, Acrobat, and others; sun sets on the last of Win7, 8, RT support

MalwareBytes Security

Update now! Two zero-days fixed in 2022’s last patch Tuesday

December 14, 2022 admin Android, apple, Cisco, Citrix, cve-2022-41076, cve-2022-44670, cve-2022-44676, cve-2022-44698, cve-2022-44710, Exploits and vulnerabilities, fortinet, google, microsoft, motw, Mozilla, news, Patch Tuesday, race condition, remote powershell, SAP

Categories: Exploits and vulnerabilities

Categories: News

Tags: patch Tuesday

Tags: Microsoft

Tags: Android

Tags: Apple

Tags: Mozilla

Tags: Google

Tags: Sap

Tags: Citrix

Tags: Fortinet

Tags: Cisco

Tags: CVE-2022-44698

Tags: MotW

Tags: CVE-2022-44710

Tags: race condition

Tags: CVE-2022-44670

Tags: CVE-2022-44676

Tags: CVE-2022-41076

Tags: remote powershell

The last patch Tuesday of 2022 is here—find out what Microsoft and many others have fixed

(Read more…)

The post Update now! Two zero-days fixed in 2022’s last patch Tuesday appeared first on Malwarebytes Labs.

Security Sophos

2022 Patch Tuesday cycle wraps with 48 CVEs, one advisory

December 13, 2022 admin cve-2022-44690, cve-2022-44693, cve-2022-44698, cve-2022-44710, driver certificate deprecation, driver signature enforcement, drivers, microsoft, Patch Tuesday, threat research, x-ops

Credit to Author: Angela Gunn| Date: Tue, 13 Dec 2022 18:00:22 +0000

Windows-heavy collection closes out a year of elevation-of-privilege vulnerabilities; no Exchange patches in sight

Security Sophos

Signed driver malware moves up the software trust chain

December 13, 2022 admin 2022-12, adv220005, burntcigar, byovd, cuba ransomware, driver signature enforcement, drivers, Featured, Patch Tuesday, sbom, security operations, signed drivers, sophos x-ops, supply chain compromise, threat research, whcp, whql, windows, x-ops

Credit to Author: Andrew Brandt| Date: Tue, 13 Dec 2022 18:00:15 +0000

The criminals signed their AV-killer malware, closely related to one known as BURNTCIGAR, with a legitimate WHCP certificate

Security Sophos

Microsoft patches 62 vulnerabilities, including Kerberos, and Mark of the Web, and Exchange…sort of

November 8, 2022 admin microsoft, Patch Tuesday, sophos x-ops, threat research

Credit to Author: Matt Wixey| Date: Tue, 08 Nov 2022 18:05:18 +0000

Still no fix for ProxyNotShell, but two MOTW bypasses get squashed

Security Sophos

You can’t always get what you want on Patch Tuesday

October 11, 2022 admin microsoft, Patch Tuesday, threat research

Credit to Author: Angela Gunn| Date: Tue, 11 Oct 2022 17:47:47 +0000

No joy for Exchange admins looking to seal off two widely reported Server vulns

Security Sophos

A lighter Patch Tuesday, but one heavy with remote code execution bugs

September 13, 2022 admin microsoft, Patch Tuesday, sophos x-ops, threat research

Credit to Author: Matt Wixey| Date: Tue, 13 Sep 2022 18:38:14 +0000

There are fewer bugs in September’s update than in previous months, with RCE vulns making up the bulk of the addressed CVEs

MalwareBytes Security

Update now! Microsoft fixes two zero-days in August’s Patch Tuesday

August 11, 2022 admin adobe, Android, Cisco, cve-2022-24477, cve-2022-24516, cve-2022-30133, cve-2022-30134, cve-2022-34713, cve-2022-34715, cve-2022-35743, dogwalk, Exchange, Exploits and vulnerabilities, google, microsoft, msdt, news, nfs, Patch Tuesday, ppp, SAP, VMware

Categories: Exploits and vulnerabilities

Categories: News

Tags: Microsoft

Tags: patch Tuesday

Tags: MSDT

Tags: NFS

Tags: PPP

Tags: Exchange

Tags: CVE-2022-34713

Tags: CVE-2022-35743

Tags: DogWalk

Tags: CVE-2022-30134

Tags: CVE-2022-24477

Tags: CVE-2022-24516

Tags: CVE-2022-30133

Tags: CVE-2022-34715

Tags: Adobe

Tags: Cisco

Tags: Google

Tags: Android

Tags: SAP

Tags: VMWare

Patch Tuesday for August 2022 has come around. We take a look at the most important vulnerabilities that Microsoft’s fixed and a brief look at what other vendors did.

(Read more…)

The post Update now! Microsoft fixes two zero-days in August’s Patch Tuesday appeared first on Malwarebytes Labs.