Page 4 - Will Dormann News Today

No permanent fix for the Exchange Server vulnerabilities is yet available, but other steps can mitigate the risk.

Late last week, Microsoft confirmed the existence of two actively exploited zero-day vulnerabilities in Exchange Server. Tracked as CVE-2022-41082 and CVE-2022-41040, both security flaws are worrying as they are known to be actively exploited.

Attackers are chaining two vulnerabilities in active attacks to achieve remote code execution on Microsoft Exchange Server

Researchers had discovered that Microsoft's original mitigation steps for the so-called "ProxyNotShell" flaws was easily bypassed.

No permanent fix for the Exchange Server vulnerabilities is yet available, but other steps can mitigate the risk.

Intel has removed support for SGX (software guard extension) in 12th Generation Intel Core 11000 and 12000 processors, rendering modern PCs unable to playback Blu-ray disks in 4K resolution.

Windows 11 is rolling out the Smart App Control, which will protect users from running malicious programs on their systems.

The Smart App Control security feature on Windows 11 has gained new improvements. In addition to Office macros, the utility can now also block many more potentially malicious file types.

Office vulnerability abused to drop malware.

Microsoft has shared mitigation measures to block attacks exploiting a newly discovered Microsoft Office zero-day flaw abused in the wild to execute malicious code remotely.