security restrictions Archives

Winsage

February 12, 2025

Microsoft Patch Tuesday February 2025 – 61 Vulnerabilities Fixed, 3 Actively Exploited in the Wild

Microsoft's February Patch Tuesday update addresses 61 vulnerabilities, including 25 critical Remote Code Execution (RCE) vulnerabilities. Three of these are zero-days, actively exploited before the update: 1. CVE-2023-24932: Secure Boot security feature bypass requiring physical access or administrative rights. 2. CVE-2025-21391: Windows Storage elevation of privilege vulnerability that could lead to data deletion. 3. CVE-2025-21418: Vulnerability in Windows Ancillary Function Driver for WinSock allowing privilege escalation. Critical vulnerabilities include: - CVE-2025-21376: Windows LDAP RCE vulnerability. - CVE-2025-21379: RCE vulnerability in DHCP Client Service. - CVE-2025-21381: RCE vulnerability in Microsoft Excel. The update also addresses additional vulnerabilities related to remote code execution, elevation of privilege, denial of service, security feature bypass, spoofing, and information disclosure across various Microsoft products. Microsoft advises immediate application of the updates to mitigate risks.

Winsage

August 19, 2024

Microsoft Patches Zero-Day Flaw Exploited by North Korea’s Lazarus Group

A security vulnerability in Microsoft Windows, identified as CVE-2024-38193, has been exploited by the Lazarus Group, a state-sponsored entity linked to North Korea. This privilege escalation bug, categorized within the Windows Ancillary Function Driver (AFD.sys) for WinSock, has a CVSS score of 7.8. Microsoft stated that successful exploitation could grant SYSTEM privileges. The flaw was discovered by researchers Luigino Camastra and Milánek from Gen Digital, who reported that it allowed unauthorized access to sensitive system areas. The attacks utilized a rootkit named FudModule, which evades detection, and were delivered through a remote access trojan known as Kaolin RAT. This incident follows a similar vulnerability, CVE-2024-21338, also exploited by the Lazarus Group, which involved the AppLocker driver (appid.sys) and allowed arbitrary code execution.

Winsage

July 3, 2024

Windows 11 Regains Market Share, Approaching 30% Of All Windows PCs – Pokde.Net

Windows 11 has increased its market share to 29.71% as of June 2024, while Windows 10's market share has dropped to 66.04%. Windows 10's support will end in 15 months, leading to unsupported PCs unless users pay for ESU packages. PCs without a TPM 2.0 chip will not qualify for the free upgrade to Windows 11. The notoriety of Windows 11's features, including system-wide ads and the Recall feature, may slow adoption. Some users may be waiting for Windows 12 to launch.