Time to Patch

IndependentKrebs

Microsoft Fix Targets Attacks on SharePoint Zero-Day

Credit to Author: BrianKrebs| Date: Mon, 21 Jul 2025 14:45:46 +0000

On Sunday, July 20, Microsoft Corp. issued an emergency security update for a vulnerability in SharePoint Server that is actively being exploited to compromise vulnerable organizations. The patch comes amid reports that malicious hackers have used the Sharepoint flaw to breach U.S. federal and state agencies, universities, and energy companies.

Read More
IndependentKrebs

Microsoft Patch Tuesday, July 2025 Edition

Credit to Author: BrianKrebs| Date: Wed, 09 Jul 2025 00:53:33 +0000

Microsoft today released updates to fix at least 137 security vulnerabilities in its Windows operating systems and supported software. None of the weaknesses addressed this month are known to be actively exploited, but 14 of the flaws earned Microsoft’s most-dire “critical” rating, meaning they could be exploited to seize control over vulnerable Windows PCs with little or no help from users.

Read More
IndependentKrebs

Senator Chides FBI for Weak Advice on Mobile Security

Credit to Author: BrianKrebs| Date: Mon, 30 Jun 2025 17:33:59 +0000

Agents with the Federal Bureau of Investigation (FBI) briefed Capitol Hill staff recently on hardening the security of their mobile devices, after a contacts list stolen from the personal phone of the White House Chief of Staff Susie Wiles was reportedly used to fuel a series of text messages and phone calls impersonating her to U.S. lawmakers. But in a letter this week to the FBI, one of the Senate’s most tech-savvy lawmakers says the feds aren’t doing enough to recommend more appropriate security protections that are already built into most consumer mobile devices.

Read More
IndependentKrebs

Patch Tuesday, June 2025 Edition

Credit to Author: BrianKrebs| Date: Wed, 11 Jun 2025 00:10:53 +0000

Microsoft today released security updates to fix at least 67 vulnerabilities in its Windows operating systems and software. Redmond warns that one of the flaws is already under active attack, and that software blueprints showing how to exploit a pervasive Windows bug patched this month are now public. 

Read More
IndependentKrebs

Patch Tuesday, May 2025 Edition

Credit to Author: BrianKrebs| Date: Wed, 14 May 2025 11:57:48 +0000

Microsoft on Tuesday released software updates to fix at least 70 vulnerabilities in Windows and related products, including five zero-day flaws that are already seeing active exploitation. Adding to the sense of urgency with this month’s patch batch from Redmond are fixes for two other weaknesses that now have public proof-of-concept exploits available.

Read More
IndependentKrebs

Patch Tuesday, April 2025 Edition

Credit to Author: BrianKrebs| Date: Wed, 09 Apr 2025 03:09:36 +0000

Microsoft today released updates to plug at least 121 security holes in its Windows operating systems and software, including one vulnerability that is already being exploited in the wild. Eleven of those flaws earned Microsoft’s most-dire “critical” rating, meaning malware or malcontents could exploit them with little to no interaction from Windows users.

Read More