Crypto AG Was Owned by the CIA

The Swiss cryptography firm Crypto AG sold equipment to governments and militaries around the world for decades after World War II. They were owned by the CIA: But what none of its customers ever knew was that Crypto AG was secretly owned by the CIA in a highly classified partnership with West...

February 11, 2020—KB4537803 (Security-only update)

None None...

Windows Key Isolation Service Information Disclosure Vulnerability

An information disclosure vulnerability exists in the Cryptography Next Generation CNG service when it fails to properly handle objects in memory. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The security update...

Windows Key Isolation Service Information Disclosure Vulnerability

An information disclosure vulnerability exists in the Cryptography Next Generation CNG service when it fails to properly handle objects in memory. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The security update...

Windows Key Isolation Service Information Disclosure Vulnerability

An information disclosure vulnerability exists in the Cryptography Next Generation CNG service when it fails to properly handle objects in memory. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The security update...

Windows Key Isolation Service Information Disclosure Vulnerability

An information disclosure vulnerability exists in the Cryptography Next Generation CNG service when it fails to properly handle objects in memory. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The security update...

Windows Key Isolation Service Information Disclosure Vulnerability

An information disclosure vulnerability exists in the Cryptography Next Generation CNG service when it fails to properly handle objects in memory. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The security update...

Windows Key Isolation Service Information Disclosure Vulnerability

An information disclosure vulnerability exists in the Cryptography Next Generation CNG service when it fails to properly handle objects in memory. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The security update...

KB4537789: Windows 10 Version 1709 February 2020 Security Update

The remote Windows host is missing security update 4537789. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server. An attacker who successfully exploited this...

KB4532691: Windows 10 Version 1809 and Windows Server 2019 February 2020 Security Update

The remote Windows host is missing security update 4532691. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server. An attacker who successfully exploited this...

KB4537762: Windows 10 Version 1803 February 2020 Security Update

The remote Windows host is missing security update 4537762. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server. An attacker who successfully exploited this...

KB4537803: Windows 8.1 and Windows Server 2012 R2 February 2020 Security Update

The remote Windows host is missing security update 4537803 or cumulative update 4537821. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server. An attacker who...

KB4537776: Windows 10 February 2020 Security Update

The remote Windows host is missing security update 4537776. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server. An attacker who successfully exploited this...

KB4537794: Windows Server 2012 February 2020 Security Update

The remote Windows host is missing security update 4537794 or cumulative update 4537814. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server. An attacker who...

CVE-2019-4540

IBM Security Directory Server 6.4.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 165813...

CVE-2019-4540

IBM Security Directory Server 6.4.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 165813...

CVE-2019-4639

IBM Security Secret Server 10.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 170045...

CVE-2019-4639

IBM Security Secret Server 10.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 170045...

CVE-2019-4639

IBM Security Secret Server 10.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 170045...

ApplicationInspector - A Source Code Analyzer Built For Surfacing Features Of Interest And Other Characteristics To Answer The Question 'What'S In It' Using Static Analysis With A Json Based Rules Engine

Microsoft Application Inspector is a software source code analysis tool that helps identify and surface well-known features and other interesting characteristics of source code to aid in determining what the software is or what it does. Application Inspector is different from traditional static...