823 matches found
Microsoft Defender 输入验证错误漏洞
A denial-of-service vulnerability exists in Microsoft Windows Defender, a suite of antivirus software that comes with Windows from Microsoft. The vulnerability stems from a failure to properly handle incoming error messages, and can be exploited by attackers to cause a denial of service...
PT-2022-2868 · Microsoft · Defender
Name of the Vulnerable Software and Affected Versions: Microsoft Defender affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Defender, which can be exploited by a remote attacker to cause a denial of service. Recommendations: At the...
New security features for Windows 11 will help protect hybrid work
Attackers haven’t wasted any time capitalizing on the rapid move to hybrid work. Every day cybercriminals and nation-states alike have improved their targeting, speed, and accuracy as the world adapted to working outside the office. These changes have put "cybersecurity issues and risks” at the t...
3 steps to secure your multicloud and hybrid infrastructure with Azure Arc
As businesses around the world grapple with the growth of an industrialized, organized attacker ecosystem, the need for customers to secure multicloud and hybrid infrastructure and workloads is increasingly urgent. Today, organizations face an attacker ecosystem that is highly economically...
3 steps to secure your multicloud and hybrid infrastructure with Azure Arc
As businesses around the world grapple with the growth of an industrialized, organized attacker ecosystem, the need for customers to secure multicloud and hybrid infrastructure and workloads is increasingly urgent. Today, organizations face an attacker ecosystem that is highly economically...
Uncovering Trickbot’s use of IoT devices in command-and-control infrastructure
Trickbot, a sophisticated trojan that has evolved significantly since its discovery in 2016, has continually expanded its capabilities and, even with disruption efforts and news of its infrastructure going offline, it has managed to remain one of the most persistent threats in recent years. The...
Microsoft Patch Tuesday March 2022
Hello everyone! I am glad to greet you from the most sanctioned country in the world. Despite all the difficulties, we carry on. I even have some time to release new episodes. This time it will be about Microsoft Patch Tuesday for March 2022. Alternative video link for Russia: I do the analysis a...
Secure your healthcare devices with Microsoft Defender for IoT and HCL’s CARE
It wasn’t long ago that medical devices were isolated and unconnected, but the rise of IoT has brought real computing power to the network edge. Today, medical devices are transforming into interconnected, smart assistants with decision-making capabilities. Any device in a medical setting must be...
Secure your healthcare devices with Microsoft Defender for IoT and HCL’s CARE
It wasn’t long ago that medical devices were isolated and unconnected, but the rise of IoT has brought real computing power to the network edge. Today, medical devices are transforming into interconnected, smart assistants with decision-making capabilities. Any device in a medical setting must be...
CVE-2022-23266
Microsoft Defender for IoT Elevation of Privilege Vulnerability...
CVE-2022-23266
Microsoft Defender for IoT Elevation of Privilege Vulnerability...
CVE-2022-23278
Microsoft Defender for Endpoint Spoofing Vulnerability...
CVE-2022-23265
Microsoft Defender for IoT Remote Code Execution Vulnerability...
CVE-2022-23265
Microsoft Defender for IoT Remote Code Execution Vulnerability...
CVE-2022-23265
Microsoft Defender for IoT Remote Code Execution Vulnerability...
Spoofing
Microsoft Defender for Endpoint Spoofing Vulnerability...
Remote code execution
Microsoft Defender for IoT Remote Code Execution Vulnerability...
Privilege escalation
Microsoft Defender for IoT Elevation of Privilege Vulnerability...
CVE-2022-23278 Microsoft Defender for Endpoint Spoofing Vulnerability
...
CVE-2022-23278
CVE-2022-23278 is a Microsoft Defender for Endpoint spoofing vulnerability. The issue concerns spoofing to tamper with security protections. Microsoft released a security update to address the vulnerability (MG MSRC guidance and OS updates referenced). CVSS v3.1 base score is 5.9 (NETWORK, HIGH a...