Windows 10 April 2018 Update Support Ending in November 2019

In a support document, Microsoft states that Windows 10 April 2018 Update will reach the end of servicing on November 12, 2019. This applies to Windows 10 Home, Pro, Pro for Workstations and Core users. It's worth noting that enterprise, Education and IoT Enterprise editions will reach the end of support in November of 2020. [...]

https://www.bleepingcomputer.com/news/microsoft/windows-10-april-2018-update-support-ending-in-november-2019/

The Official ISOs for Windows 10 20H1 Now Available

Microsoft has finally released the first official ISO files of Windows 10 20H1, allowing users in the Windows Insider program or non-Insiders to clean-install the next big Windows 10 update. [...]

https://www.bleepingcomputer.com/news/microsoft/the-official-isos-for-windows-10-20h1-now-available/

Apple’s New Windows 10 iCloud App Now Available in MS Store

Apple has brought their new iCloud app to the Microsoft Store for Windows 10 devices. This app is deeply integrated into Windows 10 and offers features such as accessing iCloud files within your normal Windows 10 applications. [...]

https://www.bleepingcomputer.com/news/microsoft/apple-s-new-windows-10-icloud-app-now-available-in-ms-store/

MyBB Forum Patches Vulnerabilities That Allow Site Takeover

MyBB has released updates today that fix vulnerabilities version 1.8.20 and older that could allow an attacker to take complete control over a site and potentially the server. [...]

https://www.bleepingcomputer.com/news/security/mybb-forum-patches-vulnerabilities-that-allow-site-takeover/

Bad Cert Vulnerability Can Bring Down Any Windows Server

A Google security expert today revealed that an unpatched issue in the main cryptographic library in Microsoft's operating system can cause a denial-of-service (DoS) condition on Windows 8 servers and above. [...]

https://www.bleepingcomputer.com/news/security/bad-cert-vulnerability-can-bring-down-any-windows-server/

Sysmon 10 is Released With a DNS Query Logging Feature

Microsoft has released Sysmon 10 today and with it comes the eagerly anticipated DNS Query Logging feature. This feature will allow Sysmon users to log DNS queries performed on a monitored computer, which will also include the executable that performed the query. [...]

https://www.bleepingcomputer.com/news/microsoft/sysmon-10-is-released-with-a-dns-query-logging-feature/

Intel Updates NUC BIOS, Raid Soft To Patch High Severity Bugs

Intel today released fixes for high-severity issues that allow privilege escalation, denial of service (DoS), and information disclosure on multiple models of its NUC Kits and the RAID Web Console utility for Windows. [...]

https://www.bleepingcomputer.com/news/security/intel-updates-nuc-bios-raid-soft-to-patch-high-severity-bugs/

Windows 10 v1903 Upgrade Blocked by USB Drives Partially Fixed

Microsoft says that it partially resolved an issue which would cause Windows 10 version 1903 upgrades being blocked by improper drive reassignment during installation when external USB device or memory cards are attached. [...]

https://www.bleepingcomputer.com/news/microsoft/windows-10-v1903-upgrade-blocked-by-usb-drives-partially-fixed/

Critical Flaw in Evernote Add-On Exposed Sensitive Data of Millions

A critical flaw in the Evernote Web Clipper Chrome extension could allow potential attackers to access users' sensitive information from third party online services. [...]

https://www.bleepingcomputer.com/news/security/critical-flaw-in-evernote-add-on-exposed-sensitive-data-of-millions/

Android’s Security Key Now Verifies Sign-Ins on iOS Devices

Google now allows iPad and iPhone users to verify sign-ins into Google and Google Cloud services using the security keys built into Android phones running Android 7.0 or later. [...]

https://www.bleepingcomputer.com/news/security/android-s-security-key-now-verifies-sign-ins-on-ios-devices/

Critical Bug in Infusion System Allows Changing Drug Dose in Medical Pumps

Researchers discovered two vulnerabilities in Alaris Gateway Workstations that are used to deliver fluid medication. One of them is critical and an attacker could leverage it to take full control of the medical devices connecting to it. [...]

https://www.bleepingcomputer.com/news/security/critical-bug-in-infusion-system-allows-changing-drug-dose-in-medical-pumps/

Windows 10 v1903, v1809 Updates Break Event Viewer Custom Views

With the release of Microsoft June 2019 Patch Tuesday updates yesterday, users have noticed that trying to access the Custom Views section of the Windows 10 Event Viewer will cause the program to stop working correctly.  [...]

https://www.bleepingcomputer.com/news/microsoft/windows-10-v1903-v1809-updates-break-event-viewer-custom-views/

Microsoft 365 Business Adds Granular Controls to Company Assets

Microsoft announced the addition of Azure Active Directory's Conditional Access capability to Microsoft 365 Business, making it simpler for small and medium-sized businesses to control access to company resources conditionally based on user, location, device, data, or app. [...]

https://www.bleepingcomputer.com/news/security/microsoft-365-business-adds-granular-controls-to-company-assets/

DDoS Attack on Telegram Messenger Leaves Users Hanging

Users of Telegram Messengers in certain parts of the world had trouble exchanging messages through the service today. The problems were caused by a distributed denial-of-service attack aiming at Telegram servers. [...]

https://www.bleepingcomputer.com/news/security/ddos-attack-on-telegram-messenger-leaves-users-hanging/

Windows 10 Insider Build 18917 Tests New Download Throttling Settings

Microsoft has released Windows 10 Insider Preview Build 18917 to Insiders in the Fast ring. This build includes numerous improvements such as new Windows Update download throttling settings, WSL2, Narrator improvements, and Windows Ink improvements. [...]

https://www.bleepingcomputer.com/news/microsoft/windows-10-insider-build-18917-tests-new-download-throttling-settings/

Windows Subsystem for Linux 2 (WSL 2) Released to Insiders

With the release of the Windows 10 Insider Build 18917, Microsoft has made the Windows Subsystem for Linux version 2 (WSL 2) available for testing. Now insiders can convert their existing WSL 1 distributions to the new version in order to gain access to the increased performance and compatibility. [...]

https://www.bleepingcomputer.com/news/microsoft/windows-subsystem-for-linux-2-wsl-2-released-to-insiders/

Cisco IOS XE Software Receives Fix Against High-Severity Flaw

Cisco today released an updated version for its IOS XE software to patch a high severity cross-site request forgery (CSRF) vulnerability. Demo exploit code is available. [...]

https://www.bleepingcomputer.com/news/security/cisco-ios-xe-software-receives-fix-against-high-severity-flaw/

Some YubiKey FIPS Keys Allow Attackers to Reconstruct Private Keys

Yubico issued a security advisory saying that an issue impacting YubiKey FIPS Series devices (versions 4.4.2 and 4.4.4) reduces the strength of generated RSA keys and ECDSA signatures after power-up. [...]

https://www.bleepingcomputer.com/news/security/some-yubikey-fips-keys-allow-attackers-to-reconstruct-private-keys/

Millions of Exim Mail Servers Are Currently Being Attacked

Millions of mail servers running vulnerable Exim mail transfer agent (MTA) versions are currently under siege, with attackers gaining permanent root access via SSH to the exploited machines according to security researchers. [...]

https://www.bleepingcomputer.com/news/security/millions-of-exim-mail-servers-are-currently-being-attacked/

Critical Bug in Infusion System Allows Changing Drug Dose in Medical Pumps

Researchers discovered two vulnerabilities in Alaris Gateway Workstations that are used to deliver fluid medication. One of them is critical and an attacker could leverage it to take full control of the medical devices connecting to it. [...]

https://www.bleepingcomputer.com/news/security/critical-bug-in-infusion-system-allows-changing-drug-dose-in-medical-pumps/

pyLocky Decryptor Released by French Authorities

A decryptor for pyLocky Ransomware versions 1 and 2 has been released by French authorities that allows victim to decrypt their files for free. [...]

https://www.bleepingcomputer.com/news/security/pylocky-decryptor-released-by-french-authorities/