#windowsvulnerability — Public Fediverse posts

Unpatched Windows Search Flaw Exposes User Hashes

A newly discovered vulnerability in Windows' search feature can be exploited to steal user passwords, allowing hackers to gain access to sensitive information. By simply clicking on a malicious link, a user's login credentials can be exposed to attackers.

https://osintsights.com/unpatched-windows-search-flaw-exposes-user-hashes?utm_source=mastodon&utm_medium=social

#WindowsSearchFlaw #Ntlmv2 #Netntlmv2 #Huntress #WindowsVulnerability

https://winbuzzer.com/2026/06/02/microsoft-backs-off-threats-against-security-researchers-xcxwbn/

Microsoft has ruled out action against security researchers after a backlash, narrowing legal risk around its wider disclosure dispute.

#SecurityResearch #Microsoft #Security #Cybersecurity #ZeroDay #MicrosoftWindows #WindowsSecurity #WindowsVulnerability #Windows11

https://winbuzzer.com/2026/06/02/microsoft-backs-off-threats-against-security-researchers-xcxwbn/

Microsoft has ruled out action against security researchers after a backlash, narrowing legal risk around its wider disclosure dispute.

#SecurityResearch #Microsoft #Security #Cybersecurity #ZeroDay #MicrosoftWindows #WindowsSecurity #WindowsVulnerability #Windows11

Microsoft Patch Fails to Quell Russian Spy Exploitation of Windows Flaw

Microsoft's latest patch isn't enough to stop Russian spies from exploiting a Windows flaw, leaving sensitive information vulnerable to exposure. The incomplete fix is linked to a previously patched vulnerability from February, highlighting the urgent need for a more robust solution.

https://osintsights.com/microsoft-patch-fails-to-quell-russian-spy-exploitation-of-windows-flaw?utm_source=mastodon&utm_medium=social

#Cve202632202 #WindowsVulnerability #RussianSpy #ExploitationDetected #EmergingThreats

CISA Orders Federal Agencies to Patch Exploited Windows Flaw

Federal agencies are on high alert: a critical Windows vulnerability, CVE-2026-32202, must be patched by May 12 to prevent zero-click credential theft via malicious LNK files. CISA has ordered all Federal Civilian Executive Branch agencies to secure their Windows endpoints and servers within two weeks.

https://osintsights.com/cisa-orders-federal-agencies-to-patch-exploited-windows-flaw?utm_source=mastodon&utm_medium=social

#Cve202632202 #WindowsVulnerability #ZeroDay #Cisa #Fceb

https://winbuzzer.com/2026/02/11/microsoft-patches-notepad-rce-vulnerability-cve-2026-20841-xcxwbn/

Microsoft Patches High-Severity Notepad Remote Code Execution Flaw

#Cybersecurity #MicrosoftNotepad #Microsoft #Windows #MicrosoftWindows #Windows11 #PatchTuesday #SecurityPatches #WindowsVulnerability #Vulnerability

https://winbuzzer.com/2026/02/11/microsoft-patches-notepad-rce-vulnerability-cve-2026-20841-xcxwbn/

Microsoft Patches High-Severity Notepad Remote Code Execution Flaw

#Cybersecurity #MicrosoftNotepad #Microsoft #Windows #MicrosoftWindows #Windows11 #PatchTuesday #SecurityPatches #WindowsVulnerability #Vulnerability

🚨 Microsoft’s January 2026 Patch Tuesday dropped 114 fixes—including a CISA KEV-listed Windows zero-day.

Full Weekly Cybersecurity Brief available here.

#PatchTuesday #Cybersecurity #WindowsVulnerability #CISAKEV #CVE

A new Windows SMB flaw may be the weak link in your network’s armor—attackers are already exploiting it for full control. Are you ready to close this dangerous gap before it’s too late?

https://thedefendopsdiaries.com/understanding-and-mitigating-the-cve-2025-33073-windows-smb-vulnerability/

#cve202533073
#windowsvulnerability
#smbflaw
#cybersecurity
#patchmanagement

A new Windows SMB flaw may be the weak link in your network’s armor—attackers are already exploiting it for full control. Are you ready to close this dangerous gap before it’s too late?

https://thedefendopsdiaries.com/understanding-and-mitigating-the-cve-2025-33073-windows-smb-vulnerability/

#cve202533073
#windowsvulnerability
#smbflaw
#cybersecurity
#patchmanagement

Microsoft Patch Tuesday September 2025 Fixes Risky Kernel Flaws https://thecyberexpress.com/microsoft-patch-tuesday-september-2025/ #Windowsvulnerability #TheCyberExpressNews #TheCyberExpress #Vulnerabilities #FirewallDaily #PatchTuesday #CyberNews #Microsoft

Microsoft Patch Tuesday September 2025 Fixes Risky Kernel Flaws https://thecyberexpress.com/microsoft-patch-tuesday-september-2025/ #Windowsvulnerability #TheCyberExpressNews #TheCyberExpress #Vulnerabilities #FirewallDaily #PatchTuesday #CyberNews #Microsoft

Microsoft Patch Tuesday July 2025: 130 Vulnerabilities Fixed, 17 High-Risk https://thecyberexpress.com/microsoft-patch-tuesday-july-2025/ #MicrosoftPatchTuesday #Windowsvulnerability #TheCyberExpressNews #TheCyberExpress #Vulnerabilities #FirewallDaily #CyberNews #Microsoft

Microsoft Patch Tuesday July 2025: 130 Vulnerabilities Fixed, 17 High-Risk https://thecyberexpress.com/microsoft-patch-tuesday-july-2025/ #MicrosoftPatchTuesday #Windowsvulnerability #TheCyberExpressNews #TheCyberExpress #Vulnerabilities #FirewallDaily #CyberNews #Microsoft

Microsoft Patch Tuesday May 2025: 5 Zero Days, 8 High-Risk Vulnerabilities https://thecyberexpress.com/microsoft-patch-tuesday-may-2025/ #MicrosoftPatchTuesday #Windowsvulnerability #TheCyberExpressNews #MicrosoftWindows #TheCyberExpress #Vulnerabilities #FirewallDaily #PatchTuesday #CyberNews #Microsoft #Azure

Microsoft Patch Tuesday May 2025: 5 Zero Days, 8 High-Risk Vulnerabilities https://thecyberexpress.com/microsoft-patch-tuesday-may-2025/ #MicrosoftPatchTuesday #Windowsvulnerability #TheCyberExpressNews #MicrosoftWindows #TheCyberExpress #Vulnerabilities #FirewallDaily #PatchTuesday #CyberNews #Microsoft #Azure

CISA has raised alarms about a new Windows vulnerability (CVE-2024-35250) actively exploited by hackers! 🚨 This flaw allows privilege escalation to SYSTEM level, posing serious risks to organizations. Microsoft has issued a patch, but timely action is crucial! 🛡️🔒 Check out the details here: https://cyberinsider.com/cisa-warns-of-new-windows-vulnerability-used-in-hacker-attacks/ #CyberSecurity #WindowsVulnerability #CISA #InfoSec #newz

CISA has raised alarms about a new Windows vulnerability (CVE-2024-35250) actively exploited by hackers! 🚨 This flaw allows privilege escalation to SYSTEM level, posing serious risks to organizations. Microsoft has issued a patch, but timely action is crucial! 🛡️🔒 Check out the details here: https://cyberinsider.com/cisa-warns-of-new-windows-vulnerability-used-in-hacker-attacks/ #CyberSecurity #WindowsVulnerability #CISA #InfoSec #newz

Microsoft Warns Of Windows Kernel Vulnerability Exploitation https://cybersecuritynews.com/ms-windows-kernel-vulnerability/ #WindowsVulnerability #CyberSecurityNews #Vulnerability #SecurityPatch #CVE202437985 #Microsoft

Microsoft Warns Of Windows Kernel Vulnerability Exploitation https://cybersecuritynews.com/ms-windows-kernel-vulnerability/ #WindowsVulnerability #CyberSecurityNews #Vulnerability #SecurityPatch #CVE202437985 #Microsoft

Just a month after a CrowdStrike update caused widespread Blue Screen of Death (BSOD) issues, a new threat has emerged. Fortra's latest report, dated August 12, uncovers a Windows vulnerability that could lead to another BSOD nightmare. Stay alert! #CyberSecurity #BSOD #WindowsVulnerability #TechNews

https://www.forbes.com/sites/daveywinder/2024/08/12/new-microsoft-windows-10-11-server-blue-screen-of-death-warning/

Just a month after a CrowdStrike update caused widespread Blue Screen of Death (BSOD) issues, a new threat has emerged. Fortra's latest report, dated August 12, uncovers a Windows vulnerability that could lead to another BSOD nightmare. Stay alert! #CyberSecurity #BSOD #WindowsVulnerability #TechNews

https://www.forbes.com/sites/daveywinder/2024/08/12/new-microsoft-windows-10-11-server-blue-screen-of-death-warning/

✨ CVE-2022-37958:
Critical Windows code-execution vulnerability went undetected until now

▶️ Potential to rival EternalBlue

▶️ Wormable

▶️ Unlike EternalBlue, Vulnerability present in a much broader range of network protocols

▶️ Good news: patch was released in September. hopefully all of us applied it

https://arstechnica.com/information-technology/2022/12/critical-windows-code-execution-vulnerability-went-undetected-until-now/

#infosec #eternalblue #patching #securityadvisory #sysadmin #blueteam #windowsvulnerability

✨ CVE-2022-37958:
Critical Windows code-execution vulnerability went undetected until now

▶️ Potential to rival EternalBlue

▶️ Wormable

▶️ Unlike EternalBlue, Vulnerability present in a much broader range of network protocols

▶️ Good news: patch was released in September. hopefully all of us applied it

https://arstechnica.com/information-technology/2022/12/critical-windows-code-execution-vulnerability-went-undetected-until-now/

#infosec #eternalblue #patching #securityadvisory #sysadmin #blueteam #windowsvulnerability

#ActuLibre Warning — Two New Unpatched Critical RCE Flaws Affect All Windows Versions -> http://feedproxy.google.com/~r/TheHackersNews/~3/d9OPQJ-_SF8/windows-adobe-font-vulnerability.html #Zero-DayVulnerability #windowsVulnerability #zerodayvulnerability #remotecodeexecution #windowsupdates #hackwindows10 #windowsfont