Microsoft crushes bugs taking advantage of security vulnerabilities

February 14, 2024
1 min read

Microsoft released its February Patch Tuesday updates, fixing 73 security vulnerabilities, including two that are actively being exploited. One of the vulnerabilities is a bypass bug that allows an attacker to trick users into downloading malware. Cybersecurity researchers have already identified a financially motivated gang, called Water Hydra or DarkCasino, that has been using this vulnerability to target financial traders. The second vulnerability affects the Windows SmartScreen feature and could allow an attacker to inject malicious code and potentially gain control over a user’s system. In addition to Microsoft, Adobe, Intel, AMD, and Google also released security updates to fix vulnerabilities in their respective products. SAP released 16 security notes, while Intel addressed 79 vulnerabilities with 35 advisories.

Latest from Blog

Apache’s OFBiz gets new fix for RCE exploits

TLDR: Apache released a security update for OFBiz to patch vulnerabilities, including a bypass of patches for two exploited flaws. The bypass, tracked as CVE-2024-45195, allows unauthenticated remote attackers to execute code