Microsoft stacks up 113 CVEs for January Patch Tuesday
Categories: X-ops
Tags: Patch Tuesday, Microsoft, Windows
Similar Posts
One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor
Bys sMalware already running on a Mac can quietly take over Meta’s Muse assistant and use the broad access its owner granted the app, security researcher Patrick Wardle has shown in a proof-of-concept released on September 21. It works by changing a hidden setting so that when the user taps the microphone and dictates a prompt, the words…
Unpatched Windows Search URI Vulnerability Lets Attackers Steal NTLMv2 Hashes
Bys sCybersecurity researchers have disclosed details of an unpatched issue that could be exploited to disclose a user’s NTLMv2 hash to the attacker. Like in the case of CVE-2026-33829, which impacted the Windows Snipping Tool’s ms-screensketch: URI handler, the newly flagged issue resides in the search: URI handler, per Huntress. CVE-2026-33829 refers to a spoofing vulnerability…
U.K. ICO Investigates TikTok, Reddit, and Imgur Over Children’s Data Protection Practices
Bys sThe U.K.’s Information Commissioner’s Office (ICO) has opened an investigation into online platforms TikTok, Reddit, and Imgur to assess the steps they are taking to protect children between the ages of 13 and 17 in the country. To that end, the watchdog said it’s probing how the ByteDance-owned video-sharing service uses the personal data of…
Brussels Parliament hit by cyber-attack
Bys sThe Brussels Times with Belga reports: The services of the Brussels Parliament have been the target of a cyber attack since Monday. This was announced on Thursday. According to Parliament President Bertin Mampaka, every effort is being made to deal with the situation with external partners. Currently, there are no consequences for the functioning of…
Go Issues Emergency Update Blocking Eight CA Keys Over Undisclosed Security Concerns
Bys sGo 1.27.3 and Go 1.26.10, released on October 20, make Go’s certificate verifier reject any certificate chain that passes through one of eight intermediate certificate authority keys. Programs built on the new release will refuse connections to sites and services whose certificates were issued under those keys. The Go team says the keys belong to one…
Cyberattack closes Evanston Township High School
Bys sAlice Cooper’s “School’s Out” became the traditional end-of-year song for millions of students since it was first recorded in 1972. But it really is out for summer for Evanston Township High School — at least so far — because of a ransomware attack. ABC News reports that summer school, sports camps, and on-campus activities are……