Software

February security updates from Microsoft

Patch Tuesday looms and Microsoft has provided its customary Security bulletin Advance Notification
Here’s a summary of the coming security updates, scheduled for release on Tuesday 13 February.

  • 5 updates affecting Microsoft Windows [maximum severity rating ‘Critical’].
  • 2 updates affecting Microsoft Office [maximum severity rating ‘Critical’].
  • 1 update affecting Microsoft Windows and Microsoft Visual Studio [maximum severity rating ‘Important’].
  • 1 update affecting Microsoft Windows and Office [maximum severity rating ‘Important’].
  • 1 update affecting Microsoft Step-by-Step Interactive Training [maximum severity rating ‘Important’].
  • 1 update affecting Microsoft Data Access Components [maximum severity rating ‘Critical’]
  • 1 update affecting Microsoft Windows Live OneCare, Microsoft Antigen, Microsoft Windows Defender, Microsoft Forefront Security for Exchange Server and Microsoft Forefront Security for SharePoint [maximum severity rating ‘Critical’]

    As you can see, there are a lot of ‘Critical’ vulnerabilities; and we know from experience how quickly malware writers exploit any opportunities. So schedule next Tuesday’s updates now.

  • February security updates from Microsoft

    Your email address will not be published. Required fields are marked *

     

    Reports

    Focus on DroxiDat/SystemBC

    An unknown actor targeted an electric utility in southern Africa with Cobalt Strike beacons and DroxiDat, a new variant of the SystemBC payload. We speculate that this incident was in the initial stages of a ransomware attack.

    APT trends report Q2 2023

    This is our latest summary of the significant events and findings, focusing on activities that we observed during Q2 2023.

    Meet the GoldenJackal APT group. Don’t expect any howls

    GoldenJackal is an APT group, active since 2019, that usually targets government and diplomatic entities in the Middle East and South Asia. The main feature of this group is a specific toolset of .NET malware, JackalControl, JackalWorm, JackalSteal, JackalPerInfo and JackalScreenWatcher.

    Subscribe to our weekly e-mails

    The hottest research right in your inbox