2943 matches found
March 8, 2022—KB5011487 (OS Builds 19042.1586, 19043.1586, and 19044.1586)
None None...
March 8, 2022—Hotpatch KB5011580 (OS Build 20348.587)
None None...
Windows Update Stack Elevation of Privilege Vulnerability
...
Microsoft Windows Update 竞争条件问题漏洞
Microsoft Windows Update is a program update service from Microsoft Corporation USA. A vulnerability exists in the Microsoft Windows Update Stack due to a competitive condition issue. Windows 11 for ARM64-based Systems,Windows 10 Version 21H2 for 32-bit Systems,Windows 10 Version 21H2 for...
PT-2022-1973 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to the use of a shared resource with incorrect synchronization in the Windows Update Stack component of the Microsoft Windows operating system. This can allow...
KLA12478 Multiple vulnerabilities in Microsoft Exchange Server
Multiple vulnerabilities were found in Microsoft Exchange Server. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Microsoft Exchange Server can be exploited remotely to...
March 8, 2022 Security update (KB5011490)
None None...
March 1, 2022, update for Office 2016 (KB5002160)
None None...
How to update your drivers and when you need to
Many software vendors have a driver updater in their arsenal. But is it really that important to have the latest computer drivers? Where do you get them? And how do you go about updating? Driver updates fix security and compatibility problems, errors, broken code, and sometimes even add features ...
February 15, 2022—KB5010421 (OS Build 20348.558) Preview
None None...
February 8, 2022—KB5010386 (OS Build 22000.493)
None None...
February 8, 2022—Hotpatch KB5010456 (OS Build 20348.525)
None None...
February 8, 2022—KB5010354 (OS Build 20348.524)
None None...
February 8, 2022—KB5010342 (OS Builds 19042.1526, 19043.1526, and 19044.1526)
None None...
February 8, 2022 Servicing stack update (KB5011353)
None None...
February 8, 2022 Security update (KB5010343)
None None...
Lazarus APT Uses Windows Update to Spew Malware
Lazarus Group is using Windows Update to spray malware in a campaign powered by a GitHub command-and-control C2 server, researchers have found. On Thursday, the Malwarebytes Threat Intelligence team reported that they discovered the North Korean state advanced persistent threat APT group’s latest...
North Korean Hackers Using Windows Update Service to Infect PCs with Malware
The notorious Lazarus Group actor has been observed mounting a new campaign that makes use of the Windows Update service to execute its malicious payload, expanding the arsenal of living-off-the-land LotL techniques leveraged by the APT group to further its objectives. The Lazarus Group, also kno...
North Korea’s Lazarus APT leverages Windows Update client, GitHub in latest campaign
This blog was authored by Ankur Saini and Hossein Jazi Lazarus Group is one of the most sophisticated North Korean APTs that has been active since 2009. The group is responsible for many high profile attacks in the past and has gained worldwide attention. The Malwarebytes Threat Intelligence team...