2837 matches found
Extending the Microsoft Office Bounty Program
Microsoft announces the extension of the Microsoft Office Bounty Program through December 31, 2017. This extension is retroactive for any cases submitted during the interim. The engagement we have had with the security community has been great and we are looking to continue that collaboration on...
Ransomware 1H 2017 review: Global outbreaks reinforce the value of security hygiene
In the first six months of 2017, ransomware threats reached new levels of sophistication. The same period also saw the reversal of a six-month downward trend in ransomware encounters. New ransomware code was released at a higher rate with increasing complexity. Two high-profile ransomware inciden...
MSRC の 2017 年 “トップ 100 人” セキュリティ研究者一覧
本記事は、Microsoft Security Response Center のブログ “The MSRC 2017 list of “Top 100” security researchers”...
August 2, 2017 – Morning Cyber Coffee Headlines – “Declaration of Independence” Edition
Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! August 2, 2017 - Headlines Carbon Black in the News: Carbon Black Hires Former...
Microsoft Releases Security Updates
Microsoft has released updates to address vulnerabilities affecting Microsoft Office. Exploitation of these vulnerabilities may allow a remote attacker to take control of an affected system. US-CERT encourages users and administrators to review the following Microsoft security advisories and appl...
Security update for the Windows elevation of privilege vulnerability in Windows Server 2008: July 11, 2017
Security update for the Windows elevation of privilege vulnerability in Windows Server 2008: July 11, 2017 Summary An elevation of privilege vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully forward an authentication request to a Windows LDAP...
Microsoft Malware Protection Engine < 1.1.13903 RCE
The version of Microsoft Malware Protection Engine MMPE installed on the remote Windows host is prior to 1.1.13903.0. It is, therefore, affected by a remote code execution vulnerability due to improper handling of files during scanning. An unauthenticated, remote attacker can exploit this, via a...
Microsoft Malware Protection Engine on Security Essentials Multiple Vulnerabilities
This host is missing an important security update according to Microsoft Security Updates released for Microsoft Malware Protection Engine dated 05-25-2017 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Microsoft's New Security Update Guides Get Mixed Reviews
Microsoft is receiving mixed reviews for its shift to delivering security update information via its newly launched Security Update Guides. The change was official in April, with Microsoft explaining it would allow system administrators to effectively pair specific patches with vulnerabilities, a...
Microsoft Security Essentials / SCEP (Microsoft Windows 8/8.1/10 / Windows Server) - 'MsMpEng' Remote Type Confusion
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1252&desc=5 MsMpEng is the Malware Protection service that is enabled by default on Windows 8, 8.1, 10, Windows Server 2012, and so on. Additionally, Microsoft Security Essentials, System Centre Endpoint Protection and various othe...
Microsoft .NET Framework Remote Code Execution Vulnerability (KB4014983)
This host is missing a critical security update according to Microsoft Security Updates KB4014983 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...
Microsoft .NET Framework Remote Code Execution Vulnerability (KB4014984)
This host is missing a critical security update according to Microsoft Security Updates KB4014984 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...
Office 365 のセキュリティ研究者の皆さまへ: 2017 年 3 月 ～ 5 月は報奨金が 2 倍になります
本記事は、Microsoft Security Response Center のブログ “Office 365 security researchers: Double your bounties March-May 2017” 2017 年 3 月 1 日 米国時間...
Receiver for Windows - Unable to remove old version
This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information Question: Unable to install new receiver since we were getting the pop-up that later version already...
MS16-035: Description of the security update for the .NET Framework 4.5.2 in Windows Server 2012: March 8, 2016
MS16-035: Description of the security update for the .NET Framework 4.5.2 in Windows Server 2012: March 8, 2016 October 11, 2016 This security update has been re-released to Windows Server Update Services WSUS channel because of an offering issue that may have affected some WSUS customers who had...
MS14-009: Description of the security update for the .NET Framework 3.5.1 for Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: February 11, 2014
MS14-009: Description of the security update for the .NET Framework 3.5.1 for Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: February 11, 2014 View products that this article applies to. Introduction This update resolves vulnerabilities that could allow elevation of privilege...
MS11-022: Description of the security update for PowerPoint Viewer 2010: April 12, 2011
MS11-022: Description of the security update for PowerPoint Viewer 2010: April 12, 2011 Microsoft has released security bulletin MS11-022. To view the complete security bulletin, visit one of the following Microsoft websites: Home...
MS16-131: Security Update for Microsoft Video Control (3199151)
The remote Windows host is missing a security update. It is, therefore, affected by a remote code execution vulnerability in Microsoft Video Control due to improper handling of objects in memory. An unauthenticated, remote attacker can exploit this vulnerability by convincing a user to open a...
Beware of Hicurdismos: It’s a fake Microsoft Security Essentials installer that can lead to a support call scam
Note: Our Tech support scams FAQ page has the latest info on this type of threat, including scammer tactics, fake error messages, and the latest scammer hotlines. Wouldn’t it be a shame if, in trying to secure your PC, you inadvertently install malware and run the risk of being scammed? We recent...