Patch Tuesday

Security | Oct 12, 2022

This Azure bug is a perfect CVSS 10, gives you control over K8s clusters

A critical vulnerability in an Azure tool that lets users manage Kubernetes clusters can be exploited remotely without authentication to gain administrative control over Kubernetes clusters, as well as Azure edge devices. The vulnerability, allocated a maximum possible CVSS (severity rating) score of 10 has been allocated CVE-2022-37968. It is

Security | Sep 14, 2022

Patch Tuesday: Critical Windows TCP/IP vuln allows bad packets to gain pre-auth RCE, plus 0day

More than half the release involves RCE - time to get patching.

Security | Aug 09, 2022

Windows zero day under attack was first reported in 2019

More Microsoft Windows Support Diagnostic Tool goodness...

Security | Jul 13, 2022

Patch Tuesday: Exploited Windows 0day, zero-click pre-auth RCE vuln in RPC

Those 700,000 folks with RPC exposed to the internet should probably...

Security | Apr 14, 2022

A million Microsoft machines exposed to a zero click, CVSS 9.8 bug

Over a million Microsoft machines appear potentially exposed to a wormable critical new vulnerability, CVE-2022-26809 in Microsoft's ubiquitous remote procedure call (RPC) runtime library. (RPC is as an inter-process communication mechanism for data exchange and functionality invocation in a different process -- a process which can be on

Security | Feb 08, 2022

Fix this humdinger of an SAP bug now! It's CVSS 10 and trivial to exploit