2948 matches found
North Korean Hackers Using Windows Update Service to Infect PCs with Malware
The notorious Lazarus Group actor has been observed mounting a new campaign that makes use of the Windows Update service to execute its malicious payload, expanding the arsenal of living-off-the-land LotL techniques leveraged by the APT group to further its objectives. The Lazarus Group, also kno...
North Korea’s Lazarus APT leverages Windows Update client, GitHub in latest campaign
This blog was authored by Ankur Saini and Hossein Jazi Lazarus Group is one of the most sophisticated North Korean APTs that has been active since 2009. The group is responsible for many high profile attacks in the past and has gained worldwide attention. The Malwarebytes Threat Intelligence team...
January 27, 2022 Servicing stack update (KB5009640)
None None...
Windows Update has changed over the years. Here are 25 group policies to avoid
Microsoft has published a list of 25 group policies that administrators should not use in Windows 10 and Windows 11 as they do not provide optimal behavior or cause unexpected results. Since November 2015 when Windows 10 was first introduced, there have been many changes and some of them have...
KLA12432 RCE vulnerability in Microsoft Products (ESU)
Remote code execution vulnerability was found in Microsoft Products Extended Security Update. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2013-3900 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Windows...
January 18, 2022—KB5010791 (OS Build 17763.2458) Out-of-band
None None...
January 17, 2022—KB5010793 (OS Builds 19042.1469, 19043.1469, and 19044.1469) Out-of-band
None None...
January 17, 2022—KB5010795 (OS Build 22000.438) Out-of-band
None None...
2022-01 Cumulative Update for Windows 10 Version 20H2 for x86-based Systems (KB5009543)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
January 11, 2022-KB5008880 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 11
None None...
January 11, 2022—KB5009543 (OS Builds 19042.1466, 19043.1466, and 19044.1466)
None None...
January 11, 2022—KB5009585 (OS Build 10240.19177) - EXPIRED
None None...
January 11, 2022-KB5008876 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10, version 20H2, Windows Server, version 20H2, Windows 10 Version 21H1, and Windows 10 Version 21H2
None None...
KLA12421 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges. Below is a complete list of vulnerabilities: 1. Denial of service vulnerability in .NET Framework can be exploited remotely to cause...
January 11, 2022 Security update (KB5009542)
None None...
KLA12419 ACE vulnerabilities in Microsoft Server Software
Remote code execution vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to execute arbitrary code. Original advisories CVE-2022-21855 CVE-2022-21846 CVE-2022-21969 Related products Microsoft-Exchange-Server CVE list CVE-2022-21855 critical...
KLA12393 RCE vulnerability in Microsoft System Center
Remote code execution vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2021-44228 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually such...
2021-12 Cumulative Update for Windows 10 Version 21H1 for ARM64-based Systems (KB5008212)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...