Author: Cybernoz

Patch Tuesday
10
Dec
2024

Microsoft December 2024 Patch Tuesday fixes 1 exploited zero-day, 71 flaws

Tag CVE ID CVE Title Severity GitHub CVE-2024-49063 Microsoft/Muzic Remote Code Execution Vulnerability Important Microsoft Defender for Endpoint CVE-2024-49057 Microsoft…

Windows Common Log File System Zero-day
10
Dec
2024

Windows Common Log File System Zero-day (CVE-2024-49138) Exploited in the Wild

A new high-severity security vulnerability, CVE-2024-49138, has been identified as a zero-day in the Windows Common Log File System (CLFS)…

Black Basta Ransomware Uses MS Teams, Email Bombing to Spread Malware
10
Dec
2024

Black Basta Gang Uses MS Teams, Email Bombing to Spread Malware

SUMMARY Black Basta Campaign Resurgence: Rapid7 researchers report a sophisticated social engineering campaign by the Black Basta ransomware group, refining…

Windows 10
10
Dec
2024

Windows 10 KB5048652 update fixes new motherboard activation bug

Microsoft has released the KB5048652 cumulative update for Windows 10 22H2, which contains six fixes, including a fix that prevented…

Microsoft Patch Tuesday December 2024
10
Dec
2024

Microsoft December 2024 Patch Tuesday

Microsoft released a security as part of the December Patch Tuesday that addressed 72 vulnerabilities, including 30 classified as critical…

Microsoft Patch Tuesday, December 2024, Patch for 16 Critical Security Flaws
10
Dec
2024

Microsoft Patch Tuesday, December 2024, Patch for 16 Critical Security Flaws

In its final Patch Tuesday of 2024, Microsoft has released a significant security update addressing a total of 71 vulnerabilities,…

Cleo Zero-Day RCE Vulnerability Actively Exploited in the Wild
10
Dec
2024

Cleo Zero-Day RCE Vulnerability Actively Exploited in the Wild

A critical zero-day vulnerability (CVE-2024-50623) in Cleo’s file transfer products Harmony, VLTrader, and LexiComis being actively exploited by threat actors,…

iOS vuln leaves user data dangerously exposed
10
Dec
2024

iOS vuln leaves user data dangerously exposed

A bypass flaw in the FileProvider Transparency, Consent and Control (TCC) subsystem within Apple’s iOS operating system could leave users’…

Fortnite
10
Dec
2024

FTC distributes $72 million in Fortnite refunds from Epic Games

The Federal Trade Commission (FTC) is distributing over $72 million in Epic Game Fortnite refunds for the company’s use of dark…

Microsoft 365 Down
10
Dec
2024

Web Apps and Admin Center Goes Offline

Microsoft is investigating a widespread outage that disrupted access to Microsoft 365 web applications and the Microsoft 365 admin center…

Dell Urges Immediate Update to Fix Critical Power Manager Vulnerability
10
Dec
2024

Dell Urges Immediate Update to Fix Critical Power Manager Vulnerability

SUMMARY: Critical Vulnerability Alert: Dell Power Manager versions before 3.17 have a high-severity access control flaw (CVE-2024-49600) allowing attackers to…

Red panda
10
Dec
2024

US sanctions Chinese firm for hacking firewalls in ransomware attacks

The U.S. Treasury Department has sanctioned Chinese cybersecurity company Sichuan Silence and one of its employees for their involvement in…