Patch Tuesday
Attackers are going after high-profile targets in the government and defense sectors, with phishing campaigns that use WebDAV and LOLBins to deploy malware
Five zero days also known-exploited. Patch up!
"It’s notable that the exploit first uses the NtQuerySystemInformation API to leak kernel addresses to user mode."
Windows Server 16 is affected. Get patching…
Lighter than last month, mercifully, but still some urgent fixes.
"Exploitation leads to SYSTEM privileges, and if this all sounds familiar, it should..."
Redmond pushes fixes for 117 vulnerabilities, three rated critical, five as publicly known , and eight marked as “exploitation more likely.” Beyond Microsoft, there are...