vulnerabilities

Winsage
June 18, 2025
A newly discovered vulnerability in Asus Armoury Crate, identified as CVE-2025-3464, has a severity rating of 8.4 out of 10 and allows hackers to gain low-level privileges on Windows systems. The affected versions of Armoury Crate range from V5.9.9.0 to V6.1.18.0. Researcher Marcin "Icewall" Noga from Cisco Talos highlighted this issue, prompting Asus to issue a product security advisory. Users are advised to verify their version of Armoury Crate and update to the latest version if necessary. No incidents of this exploit being actively used have been reported thus far. This is the second vulnerability found in an Asus utility within two months, following a separate issue with DriverHub reported in May.
Winsage
June 18, 2025
Microsoft will cease support for Windows 10 on October 14, 2025, affecting an estimated 200 to 400 million devices that will no longer receive updates or patches, exposing them to security vulnerabilities. Transitioning to Windows 11 requires modern hardware specifications, which many older devices lack. Users must decide between investing in new hardware, opting for extended security updates, or switching to alternative operating systems like Linux. The Document Foundation advocates for Linux and LibreOffice as viable alternatives, emphasizing their ability to run on older hardware and providing robust security updates. Linux offers users greater control and transparency, addressing privacy concerns associated with proprietary systems. LibreOffice supports open document formats, ensuring long-term accessibility without vendor constraints. The end of Windows 10 support may prompt significant shifts in the tech industry, encouraging a move towards systems that prioritize sustainability and user rights.
Winsage
June 17, 2025
Microsoft will cease support for Windows 10 on October 14, 2025, leaving an estimated 200 to 400 million devices vulnerable to security risks due to a lack of updates. Users must choose between upgrading to Windows 11, which has strict hardware requirements, paying for extended security updates, or switching to alternative operating systems like Linux. The Document Foundation advocates for Linux and LibreOffice as viable options, emphasizing their ability to run on older hardware and provide robust security updates without vendor lock-in. Privacy concerns regarding data collection by major tech companies are highlighted, with Linux offering users greater control and transparency. The transition away from Windows 10 is seen as an opportunity to promote user empowerment and sustainability in technology choices.
Winsage
June 17, 2025
As of June 17, Windows 10's global market share has fallen below 50% for the first time, now at 48.9%, while Windows 11 is at 47.7%. This suggests that nearly 60 million users have switched from Windows 10 to Windows 11. In the United States, Windows 11 holds 55.2% of the market compared to Windows 10's 42.0%. In Asia, Windows 10's share has decreased from 59% to 49%, while Windows 11 has increased to over 46%. Approximately 700 million users remain on Windows 10, with over 240 million devices not meeting the upgrade requirements. Microsoft is encouraging users to upgrade and will introduce a migration tool to facilitate the transition. The upgrade from Windows 10 to Windows 11 is free for compatible PCs, but unsupported systems may face security risks post-October 14.
Winsage
June 17, 2025
Windows 11's latest update has caused installation issues and bugs for many users. An initial update was paused due to conflicts with an anti-cheat tool, leading to game crashes. A revised patch, KB5063060, has also presented problems, including installation failures, boot loops, taskbar freezes, and issues with external monitors and Bluetooth devices. Gamers continue to experience difficulties with titles like Star Citizen, Fortnite, and efootball25, despite attempts to resolve compatibility issues. Users are advised to manually download the update from Microsoft's website or wait for further fixes, as uninstalling the patch is not recommended due to security vulnerabilities.
Winsage
June 17, 2025
Microsoft released an emergency update (KB5063159) to address startup failures in certain Surface Hub v1 devices running Windows 10, specifically those encountering Secure Boot Violation errors after installing the June 2025 Windows security update (KB5060533). The issue was limited to Surface Hub v1 systems on Windows 10, version 22H2, and did not affect Surface Hub 2S and 3 devices. Microsoft paused the rollout of the KB5060533 update on June 11, 2025, to prevent further complications. Additionally, the June 2025 Patch Tuesday updates included security patches for 66 vulnerabilities, including critical ones that allowed remote code execution and privilege escalation.
Winsage
June 16, 2025
The end of support for Windows 10 is set for October 14, 2025, after which users will not receive security updates, bug fixes, or technical support, exposing them to cyber threats. Many legacy PCs do not meet the system requirements for Windows 11, leading to potential compatibility issues and performance problems if upgraded. Investing in a new Windows 11-compatible PC ensures better performance, energy efficiency, and long-term support, with built-in security features like TPM 2.0 and Secure Boot. Transitioning to Windows 11 offers advantages such as an improved user interface, integrated AI tools, enhanced default apps, personalizable workspaces, and better visuals. Continuing to use an unsupported Windows platform after 2025 can result in compliance issues, data loss, and increased maintenance costs. Replacing hardware rather than upgrading can mitigate these risks and ensure access to ongoing security features.
Winsage
June 16, 2025
CVE-2025-33073 is a Windows authentication relay attack vulnerability with a CVSS score of 8.8, indicating high severity. It allows attackers to gain SYSTEM privileges on affected systems. Currently, there is no evidence of active exploitation, but the public disclosure raises concerns. Exploitation involves executing a malicious script that makes the victim's machine connect to the attacker's system using SMB. Security researchers have described it as an authenticated remote command execution on machines that do not enforce SMB signing. Microsoft has released a fix as part of the June Patch Tuesday security updates to address this vulnerability.
Search