Ivanti releases critical security patches for multiple enterprise products, addressing four critical vulnerabilities (CVSS 9.8) in Endpoint Manager that could allow unauthorized access to sensitive data. Additional high-severity fixes target Avalanche and Application Control Engine. Update...
Microsoft releases KB5049981 update for Windows 10, featuring critical security improvements through an enhanced Kernel driver blocklist and protection against BYOVD attacks. The mandatory January 2025 update addresses vulnerabilities in versions 22H2 and 21H2, with known issues affecting ...
A widespread cyber attack campaign targeting Microsoft 365 accounts has been detected, utilizing FastHTTP Go library for automated password brute-force attempts against Azure Active Directory. With 65% of attacks originating from Brazil, the campaign achieves a 9.7% success rate in account...
A critical zero-day vulnerability (CVE-2024-55591) affecting Fortinet firewalls allows attackers to bypass authentication and gain super-admin privileges through malicious websocket requests. The flaw impacts FortiOS and FortiProxy systems, enabling attackers to modify configurations and a...
Microsoft confirms Office apps crashing on Windows Server 2016/2019 due to React Native framework update. A fix is available for Server 2016 users by reverting to Version 2411, while Server 2019 solution is in development. Temporary workaround includes manual version rollback and disabling...
