article thumbnail

Microsoft Patches Six Zero-Day Security Holes

Krebs on Security

“This can be hugely damaging in the event of ransomware attacks, where high privileges can enable the attackers to stop or destroy backups and other security tools,” Breen said. CVE-2021-31959 affects everything from Windows 7 through Windows 10 and Server versions 2008 , 2012 , 2016 and 2019.

Backups 340
article thumbnail

Microsoft Patch Tuesday, November 2021 Edition

Krebs on Security

Both involve weaknesses in Microsoft’s Remote Desktop Protocol (RDP, Windows’ built-in remote administration tool) running on Windows 7 through Windows 11 systems, and on Windows Server 2008-2019 systems. But please do not neglect to backup your important files — before patching if possible.

Backups 304
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Microsoft Patch Tuesday, February 2020 Edition

Krebs on Security

lnk) files ( CVE-2020-0729 ) that affects Windows 8 and 10 systems, as well as Windows Server 2008-2012. A reliable backup means you’re not losing your mind when the odd buggy patch causes problems booting the system. So do yourself a favor and backup your files before installing any patches.

Backups 64
article thumbnail

Microsoft Patch Tuesday, March 2021 Edition

Krebs on Security

For the second month in a row, Microsoft has patched scary flaws in the DNS servers on Windows Server 2008 through 2019 versions that could be used to remotely install software of the attacker’s choice. So do yourself a favor and backup before installing any patches.

DNS 352
article thumbnail

Microsoft Patch Tuesday, February 2021 Edition

Krebs on Security

A key concern for enterprises is another critical bug in the DNS server on Windows Server 2008 through 2019 versions that could be used to remotely install software of the attacker’s choice. A reliable backup means you’re less likely to pull your hair out when the odd buggy patch causes problems booting the system.

DNS 339
article thumbnail

Patch Tuesday, Good Riddance 2020 Edition

Krebs on Security

Additionally, Microsoft released an advisory on how to minimize the risk from a DNS spoofing weakness in Windows Server 2008 through 2019. So do yourself a favor and backup before installing any patches. The critical bits reside in updates for Microsoft Exchange Server , Sharepoint Server , and Windows 10 and Server 2016 systems.

DNS 334
article thumbnail

Microsoft Patch Tuesday, January 2021 Edition

Krebs on Security

Case in point: CVE-2021-1709 , which is an “elevation of privilege” flaw in Windows 8 through 10 and Windows Server 2008 through 2019. For those seeking more flexible and full-featured backup options (including incremental backups), Acronis and Macrium are two that I’ve used previously and are worth a look.

Backups 314