MSRC Security Researcher Recognition: 2021

Source: https://msrc-blog.microsoft.com/blog/2021/02/msrc-security-researcher-recognition-2021/ Wondering how to get into the 2021 MSRC Most Valuable Security Researcher list and get recognized during the Black Hat USA this August? Read on to learn more about the … Read more

Microsoft Warns of Windows Win32k Privilege Escalation

Source: https://us-cert.cisa.gov/ncas/current-activity/2021/02/09/microsoft-warns-windows-win32k-privilege-escalation Original release date: February 9, 2021 Microsoft has released a security advisory to address an escalation of privileges vulnerability, CVE-2021-1732, in Microsoft Win32k. A local attacker can exploit this vulnerability … Read more

Continuing to Listen: Good News about the Security Update Guide API!

Source: https://msrc-blog.microsoft.com/blog/2021/02/continuing-to-listen-good-news-about-the-security-update-guide-api/ Based on user feedback we have simplified programmatic access to the security update data by removing the authentication and API-Key requirements when using the CVRF API. You will no longer … Read more

Google Releases Security Updates for Chrome

Source: https://us-cert.cisa.gov/ncas/current-activity/2021/02/05/google-releases-security-updates-chrome Original release date: February 5, 2021 Google has released Chrome Version 88.0.4324.150 for Windows, Mac, and Linux. This version addresses a vulnerability that an attacker could exploit to take control … Read more

Cisco Releases Security Updates

Source: https://us-cert.cisa.gov/ncas/current-activity/2021/02/04/cisco-releases-security-updates Original release date: February 4, 2021 Cisco has released security updates to address vulnerabilities in Cisco products. An attacker could exploit some of these vulnerabilities to take control of an … Read more

Google Releases Security Updates for Chrome

Source: https://us-cert.cisa.gov/ncas/current-activity/2021/02/03/google-releases-security-updates-chrome Original release date: February 3, 2021 Google has released Chrome version 88.0.4324.146 for Windows, Mac, and Linux. This version addresses multiple vulnerabilities that that an attacker could exploit to take … Read more

Netlogon Domain Controller Enforcement Mode is enabled by default beginning with the February 9, 2021 Security Update, related to CVE-2020-1472

Source: https://msrc-blog.microsoft.com/blog/2021/01/netlogon-domain-controller-enforcement-mode-is-enabled-by-default-beginning-with-the-february-9-2021-security-update-related-to-cve-2020-1472/ Microsoft addressed a Critical RCE vulnerability affecting the Netlogon protocol (CVE-2020-1472) on August 11, 2020. We are reminding our customers that beginning with the February 9, 2021 Security Update release … Read more