Vulnerability
The latest Vulnerability coverage — news, analysis, and updates from the WindowsNews.AI desk.
AuthQuake: Critical Microsoft MFA Vulnerability Exposes Millions to Security Risks
Introduction In December 2024, cybersecurity firm Oasis Security unveiled a critical vulnerability in Microsoft's Multi-Factor Authentication (MFA) system, dubbed "AuthQuake." This flaw allowed...
Oasis Security Exposes AuthQuake Flaw Enabling Azure MFA Bypass
A newly discovered vulnerability in Microsoft's Azure Multi-Factor Authentication (MFA) service has sent shockwaves through the cybersecurity community. Researchers at Oasis Security have uncovered a...
AuthQuake: Critical MFA Vulnerability Exposed in Microsoft Azure & Office 365
AuthQuake: Serious MFA Vulnerability Discovered in Microsoft Services A newly discovered authentication bypass vulnerability dubbed "AuthQuake" is sending shockwaves through the Microsoft ecosystem,...
Critical Vulnerability in Microsoft MFA Puts User Security at Risk: What You Need to Know
A newly discovered critical vulnerability in Microsoft's Multi-Factor Authentication (MFA) system has raised significant security concerns for organizations relying on Azure MFA for protection. This...
December 2024 Windows Security Update: Microsoft Fixes 72 Critical Vulnerabilities
Microsoft's December 2024 Patch Tuesday has addressed 72 security vulnerabilities across Windows operating systems and related software, including several critical remote code execution flaws that...
December 2024 Patch Tuesday: Critical Fixes & Cybersecurity Insights for Windows Users
Microsoft's December 2024 Patch Tuesday brings crucial security updates addressing 72 vulnerabilities across Windows and related products, including 6 critical remote code execution flaws. This...
December 2024 Patch Tuesday: Microsoft Fixes 72 Vulnerabilities Including Critical RCE Flaws
Microsoft's December 2024 Patch Tuesday has arrived, delivering critical security updates to address 72 vulnerabilities across Windows and other Microsoft products. This month's update includes fixes...
CVE-2024-49105: Critical Remote Desktop Client Vulnerability and How to Protect Your Systems
Microsoft has disclosed a critical vulnerability (CVE-2024-49105) in the Windows Remote Desktop Client that could allow attackers to execute arbitrary code on affected systems. This security flaw...
December 2024 Security Update: Microsoft Releases 72 Critical Patches for Windows 10, 11, and Server
Microsoft has rolled out its December 2024 Patch Tuesday update, addressing a staggering 72 critical vulnerabilities across Windows 10, Windows 11, and Windows Server platforms. This massive security...
Attackers exploit unpatched Windows RDP bug CVE-2024-49128 for full system takeover.
A newly discovered critical vulnerability in Windows Remote Desktop Services (RDS) has put enterprise networks at risk of remote code execution (RCE) attacks. Designated as CVE-2024-49128, this...
Critical CVE-2024-49118 Vulnerability in Microsoft Message Queuing (MSMQ) Exposes Systems to Remote Code Execution
Critical CVE-2024-49118 Vulnerability in Microsoft Message Queuing (MSMQ) Microsoft has disclosed a severe security vulnerability (CVE-2024-49118) affecting its Message Queuing (MSMQ) service, which...
Microsoft patches critical CVE-2024-49114 cloud driver flaw allowing SYSTEM-level escalation
Microsoft has recently disclosed CVE-2024-49114, a critical vulnerability in the Windows Cloud Files Mini Filter Driver that could allow attackers to escalate privileges on affected systems. This...