article thumbnail

Microsoft Patch Tuesday, August 2021 Edition

Krebs on Security

Microsoft said attackers have seized upon CVE-2021-36948 , which is a weakness in the Windows Update Medic service. Redmond says while CVE-2021-36948 is being actively exploited, it is not aware of exploit code publicly available. 10, 2021 for all versions of Windows, and is documented as CVE-2021-34481.

Software 321
article thumbnail

Microsoft Patch Tuesday, July 2021 Edition

Krebs on Security

.” Among the critical bugs is of course the official fix for the PrintNightmare print spooler flaw in most versions of Windows ( CVE-2021-34527 ) that prompted Microsoft to rush out a patch for a week ago in response to exploit code for the flaw that got accidentally published online. out of a possible 10.

DNS 301
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Microsoft Patch Tuesday, April 2021 Edition

Krebs on Security

Microsoft released updates to fix four more flaws in Exchange Server versions 2013-2019 ( CVE-2021-28480 , CVE-2021-28481 , CVE-2021-28482 , CVE-2021-28483 ). ” Also patched today was a vulnerability in Windows ( CVE-2021-28310 ) that’s being exploited in active attacks already. .

article thumbnail

Patch Tuesday, October 2021 Edition

Krebs on Security

to fix a zero-day vulnerability (CVE-2021-30883) that is being leveraged in active attacks targeting iPhone and iPad users. CVE-2021-38672 affects Windows 11 and Windows Server 2022; CVE-2021-40461 impacts both Windows 11 and Windows 10 systems, as well as Server versions. Firstly, Apple has released iOS 15.0.2

article thumbnail

Back to the Office: Privacy and Security Solutions to Compliance Issues for 2021 and Beyond

Speaker: Mike Cramer, Director of HIPAA & Data Security at The Word & Brown Companies

In this webinar you will learn: What digital compliance looks like for remote, in-office, and hybrid businesses What factors to look for when evaluating your company's data privacy and security posture The ins and outs of HIPAA/SOC 2 in the context of a transition What tools or security measures your company can easily implement August 4, 2021 at 11:00 (..)

article thumbnail

Microsoft Patch Tuesday, December 2021 Edition

Krebs on Security

“Basically the perfect ending to cybersecurity in 2021 is a 90s style Java vulnerability in an open source module, written by two volunteers with no funding, used by large cybersecurity vendors, undetected until Minecraft chat got pwned, where nobody knows how to respond properly,” researcher Kevin Beaumont quipped on Twitter.

Internet 312
article thumbnail

Microsoft Patch Tuesday, November 2021 Edition

Krebs on Security

The other critical flaw patched today that’s already being exploited in the wild is CVE-2021-42321 , yet another zero-day in Microsoft Exchange Server. As Exchange zero-days go, CVE-2021-42321 appears somewhat mild by comparison. Microsoft has published a blog post/FAQ about the Exchange zero-day here.

Backups 271
article thumbnail

How Preparation and Strategy Can Be Used to Fight and Defeat Any Ransomware Attack

Speaker: Karl Camilleri, Cloud Services Product Manager at phoenixNAP

Did you know that 2021 was a record-breaking year for ransomware? During this session he will cover: Major attacks of 2021. The days of a “once in a while” attack against businesses and organizations are over. Cyberthreats have become a serious issue. Ransomware growth trends and stats. The costs and impact of a ransomware attack.

article thumbnail

How to Avoid the Pain and Cost of PCI Compliance While Optimizing Payments

Speaker: P. Andrew Sjogren, Sr. Product Marketing Manager at Very Good Security, Matt Doka, Co-Founder and CTO of Fivestars, and Steve Andrews, President & CEO of the Western Bankers Association 

August 18, 2021 at 11:00 am PDT, 2:00 pm EDT, 7:00 pm BST Best practices to retain full control over your payments data using payment orchestration. How to make sure that transactions are routed to the fastest, most cost-effective PSP every time. This is an exclusive webinar you won't want to miss!