silversurfer
Level 85
Thread author
Verified
Honorary Member
Top Poster
Content Creator
Malware Hunter
Well-known
- Aug 17, 2014
- 10,148
Microsoft Warns of Hackers Abusing Windows Adobe Library Zero-Days
- Thread starter silversurfer
- Start date
- Mar 16, 2019
- 3,633
- Jan 21, 2018
- 814
An alternative summary is here if you are not logged in on a Microsoft account and can't read the linked articles as I found
www.windowscentral.com
Need to quickly screen-record an app? Use this hidden feature in Windows 10
In this guide, we'll show you the steps to screen-record an app on Windows 10 without the need to use third-party software, via the built-in Xbox Game Bar app.
www.windowscentral.com
- Mar 8, 2020
- 182
Microsoft says attackers are exploiting a previously undisclosed security vulnerability found in all supported versions of Windows, including Windows 10.
But the software giant said there is currently no patch for the vulnerability.
The security flaw, which Microsoft deems “critical” — its highest severity rating — is found in how Windows handles and renders fonts, according to the advisory posted Monday. The bug can be exploited by tricking a victim into opening a malicious document. Once the document is opened — or viewed in Windows Preview — an attacker can remotely run malware, such as ransomware, on a vulnerable device.
The advisory said that Microsoft was aware of hackers launching “limited, targeted attacks,” but did not say who was launching the attacks or at what scale.
Microsoft said it was working on a fix but that the advisory should serve as a warning until a patch is released. Although Windows 7 is also affected, only enterprise users with extended security support will receive patches. In the meantime, the advisory offered a temporary workaround for affected Windows users to mitigate the flaw until a fix is available.
The software giant typically releases its security fixes on the second Tuesday of each month, but occasionally issues out-of-band patches in severe cases.
When reached, a spokesperson for Microsoft reiterated the contents of the post and suggested the patch would land on the next Patch Tuesday, slated for April 14.
techcrunch.com
But the software giant said there is currently no patch for the vulnerability.
The security flaw, which Microsoft deems “critical” — its highest severity rating — is found in how Windows handles and renders fonts, according to the advisory posted Monday. The bug can be exploited by tricking a victim into opening a malicious document. Once the document is opened — or viewed in Windows Preview — an attacker can remotely run malware, such as ransomware, on a vulnerable device.
The advisory said that Microsoft was aware of hackers launching “limited, targeted attacks,” but did not say who was launching the attacks or at what scale.
Microsoft said it was working on a fix but that the advisory should serve as a warning until a patch is released. Although Windows 7 is also affected, only enterprise users with extended security support will receive patches. In the meantime, the advisory offered a temporary workaround for affected Windows users to mitigate the flaw until a fix is available.
The software giant typically releases its security fixes on the second Tuesday of each month, but occasionally issues out-of-band patches in severe cases.
When reached, a spokesperson for Microsoft reiterated the contents of the post and suggested the patch would land on the next Patch Tuesday, slated for April 14.
Microsoft says a new Windows zero-day flaw is under attack
A patch could be weeks away.
techcrunch.com
silversurfer
Level 85
Thread author
Verified
Honorary Member
Top Poster
Content Creator
Malware Hunter
Well-known
- Aug 17, 2014
- 10,148
Unofficial Patches Released for Exploited Windows Font Processing Flaws
0patch has created free patches for actively exploited Windows remote code execution vulnerabilities for which Microsoft has yet to release official fixes
Similar threads
