RAMBleed Attack Can Steal Sensitive Data From Computer Memory

Researchers found a new method to impact the confidentiality of the data stored in the computer memory, successfully extracting a signing key from an OpenSSH server with nothing by normal user permissions. [...]

https://www.bleepingcomputer.com/news/security/rambleed-attack-can-steal-sensitive-data-from-computer-memory/

Microsoft NTLM Flaws Expose All Windows Machines to RCE Attacks

Two critical vulnerabilities in Microsoft's NTLM authentication protocol consisting of three logical flaws make it possible for attackers to run remote code and authenticate on machines running any Windows version. [...]

https://www.bleepingcomputer.com/news/security/microsoft-ntlm-flaws-expose-all-windows-machines-to-rce-attacks/

Microsoft Blocks Some Bluetooth Devices Due to Security Risks

Microsoft says that certain Bluetooth devices might start experiencing pairing and connectivity issues after Windows users apply cumulative, security, or monthly rollup updates released today. [...]

https://www.bleepingcomputer.com/news/security/microsoft-blocks-some-bluetooth-devices-due-to-security-risks/

Microsoft's June 2019 Patch Tuesday Fixes 88 Vulnerabilities

Today is Microsoft's June 2019 Patch Tuesday, which means that Windows admins are pulling their hair out as they get ready to test or install the latest patches and security updates released by Microsoft. Included in this month's updates are fixes for four publicly disclosed vulnerabilities. [...]

https://www.bleepingcomputer.com/news/microsoft/microsofts-june-2019-patch-tuesday-fixes-88-vulnerabilities/

VIP WordPress Sites Currently Experiencing Availability Issues

Websites hosted on WordPress.com's VIP GO platform are currently experiencing various issues from 503 "Service Unavailable" errors and displaying content with a default theme to showing their visitors a blank page. [...]

https://www.bleepingcomputer.com/news/technology/vip-wordpress-sites-currently-experiencing-availability-issues/

Windows 10 June 2019 Cumulative Updates Released With Fixes

Microsoft has released the first June 2019 cumulative updates for compatible Windows 10 versions, including May 2019 Update. Windows 10 May 2019 Update, Windows 10 October 2018 Update and April 2018 Update are also receiving new cumulative updates today. [...]

https://www.bleepingcomputer.com/news/microsoft/windows-10-june-2019-cumulative-updates-released-with-fixes/

Microsoft Releases Windows 7 & 8.1 Cumulative Updates KB4503292 & KB4503276

The June 2019 updates are also available for Windows 7 and 8.1 devices. Microsoft is pushing the latest cumulative updates to Windows 7 and 8.1 devices through Windows Update and Microsoft Update Catalog. [...]

https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-windows-7-and-81-cumulative-updates-kb4503292-and-kb4503276/

Microsoft Releases June 2019 Office Updates With Security Fixes

Microsoft released the June 2019 Office Update today, which consists of 13 security updates and 13 non-security updates. Given that some of the Microsoft Office security updates issued today also resolve critical vulnerabilities, it is strongly advised to install them as soon as possible. [...]

https://www.bleepingcomputer.com/news/security/microsoft-releases-june-2019-office-updates-with-security-fixes/

Windows 10 April 2018 Update Support Ending in November 2019

In a support document, Microsoft states that Windows 10 April 2018 Update will reach the end of servicing on November 12, 2019. This applies to Windows 10 Home, Pro, Pro for Workstations and Core users. It's worth noting that enterprise, Education and IoT Enterprise editions will reach the end of support in November of 2020. [...]

https://www.bleepingcomputer.com/news/microsoft/windows-10-april-2018-update-support-ending-in-november-2019/

The Official ISOs for Windows 10 20H1 Now Available

Microsoft has finally released the first official ISO files of Windows 10 20H1, allowing users in the Windows Insider program or non-Insiders to clean-install the next big Windows 10 update. [...]

https://www.bleepingcomputer.com/news/microsoft/the-official-isos-for-windows-10-20h1-now-available/

Apple’s New Windows 10 iCloud App Now Available in MS Store

Apple has brought their new iCloud app to the Microsoft Store for Windows 10 devices. This app is deeply integrated into Windows 10 and offers features such as accessing iCloud files within your normal Windows 10 applications. [...]

https://www.bleepingcomputer.com/news/microsoft/apple-s-new-windows-10-icloud-app-now-available-in-ms-store/

MyBB Forum Patches Vulnerabilities That Allow Site Takeover

MyBB has released updates today that fix vulnerabilities version 1.8.20 and older that could allow an attacker to take complete control over a site and potentially the server. [...]

https://www.bleepingcomputer.com/news/security/mybb-forum-patches-vulnerabilities-that-allow-site-takeover/

Bad Cert Vulnerability Can Bring Down Any Windows Server

A Google security expert today revealed that an unpatched issue in the main cryptographic library in Microsoft's operating system can cause a denial-of-service (DoS) condition on Windows 8 servers and above. [...]

https://www.bleepingcomputer.com/news/security/bad-cert-vulnerability-can-bring-down-any-windows-server/

Sysmon 10 is Released With a DNS Query Logging Feature

Microsoft has released Sysmon 10 today and with it comes the eagerly anticipated DNS Query Logging feature. This feature will allow Sysmon users to log DNS queries performed on a monitored computer, which will also include the executable that performed the query. [...]

https://www.bleepingcomputer.com/news/microsoft/sysmon-10-is-released-with-a-dns-query-logging-feature/

Intel Updates NUC BIOS, Raid Soft To Patch High Severity Bugs

Intel today released fixes for high-severity issues that allow privilege escalation, denial of service (DoS), and information disclosure on multiple models of its NUC Kits and the RAID Web Console utility for Windows. [...]

https://www.bleepingcomputer.com/news/security/intel-updates-nuc-bios-raid-soft-to-patch-high-severity-bugs/

Windows 10 v1903 Upgrade Blocked by USB Drives Partially Fixed

Microsoft says that it partially resolved an issue which would cause Windows 10 version 1903 upgrades being blocked by improper drive reassignment during installation when external USB device or memory cards are attached. [...]

https://www.bleepingcomputer.com/news/microsoft/windows-10-v1903-upgrade-blocked-by-usb-drives-partially-fixed/

Critical Flaw in Evernote Add-On Exposed Sensitive Data of Millions

A critical flaw in the Evernote Web Clipper Chrome extension could allow potential attackers to access users' sensitive information from third party online services. [...]

https://www.bleepingcomputer.com/news/security/critical-flaw-in-evernote-add-on-exposed-sensitive-data-of-millions/

Android’s Security Key Now Verifies Sign-Ins on iOS Devices

Google now allows iPad and iPhone users to verify sign-ins into Google and Google Cloud services using the security keys built into Android phones running Android 7.0 or later. [...]

https://www.bleepingcomputer.com/news/security/android-s-security-key-now-verifies-sign-ins-on-ios-devices/

Critical Bug in Infusion System Allows Changing Drug Dose in Medical Pumps

Researchers discovered two vulnerabilities in Alaris Gateway Workstations that are used to deliver fluid medication. One of them is critical and an attacker could leverage it to take full control of the medical devices connecting to it. [...]

https://www.bleepingcomputer.com/news/security/critical-bug-in-infusion-system-allows-changing-drug-dose-in-medical-pumps/

Windows 10 v1903, v1809 Updates Break Event Viewer Custom Views

With the release of Microsoft June 2019 Patch Tuesday updates yesterday, users have noticed that trying to access the Custom Views section of the Windows 10 Event Viewer will cause the program to stop working correctly.  [...]

https://www.bleepingcomputer.com/news/microsoft/windows-10-v1903-v1809-updates-break-event-viewer-custom-views/

Microsoft 365 Business Adds Granular Controls to Company Assets

Microsoft announced the addition of Azure Active Directory's Conditional Access capability to Microsoft 365 Business, making it simpler for small and medium-sized businesses to control access to company resources conditionally based on user, location, device, data, or app. [...]

https://www.bleepingcomputer.com/news/security/microsoft-365-business-adds-granular-controls-to-company-assets/