Patch Tuesday
It’s that time of the month again: Microsoft has pushed out 98 security patches for January’s Patch Tuesday: 11 are critical, one CVE-2023-21674 is being actively exploited and another gives unauthenticated remote access to your SharePoint Server – and requires not just the patch but a “SharePoint
Critical Citrix, VMware, Microsoft vulnerabilities all need patching
Six MSFT vulns being actively exploited. Get patchin'
A critical vulnerability in an Azure tool that lets users manage Kubernetes clusters can be exploited remotely without authentication to gain administrative control over Kubernetes clusters, as well as Azure edge devices. The vulnerability, allocated a maximum possible CVSS (severity rating) score of 10 has been allocated CVE-2022-37968.
Those 700,000 folks with RPC exposed to the internet should probably...
Over a million Microsoft machines appear potentially exposed to a wormable critical new vulnerability, CVE-2022-26809 in Microsoft's ubiquitous remote procedure call (RPC) runtime library. (RPC is as an inter-process communication mechanism for data exchange and functionality invocation in a different process -- a process which can
Patch Tuesday was otherwise so relaxed...