Page 41 - Patch Tuesday News Today

This week has been quite busy when it comes to Microsoft news. We have a lot to unpack including Windows bugs and their respective fixes, new GPT integrations, and upcoming Windows features.

The vulnerability identified as CVE-2023-28252 is a privilege escalation flaw affecting the Windows Common Log File System driver.

Microsoft has issued an update today about the third phase security hardening changes deployment for Windows Server Kerberos protocol. These changes are meant to patch a major security flaw.

Microsoft has pushed the KB5012170 security update on Windows 11 and Windows 10 once again. The update, supposed to patch a Secure Boot DBX GRUB vulnerability, has known issues in it.

New Patch Tuesday update has created issues with LAPS and now Microsoft is trying to fix them.

Microsoft has addressed 97 existing vulnerabilities this April Patch Tuesday, with a further eight previously released patches updated and re-released. A Windows zero-day requires immediate attention.

The best method to keep your Microsoft software safe and protected is to constantly update the apps, whether you have a Mac or PC. Kurt "The CyberGuy" Knutsson explains.

And one bug under exploitation.

BleepingComputer reports that threat actors have been exploiting a zero-day vulnerability in the Windows Common Log File System, tracked as CVE-2023-28252 which Microsoft has already addressed as part of this month's Patch Tuesday to facilitate new attacks distributing Nokoyawa ransomware payloads.

The vulnerability identified as CVE-2023-28252 is a privilege escalation flaw affecting the Windows Common Log File System driver.