Attackers exploited the flaw to bypass Windows SmartScreen and Mark of the Web security warnings.
that let malicious actors bypass Windows SmartScreen to deliver Qbot malware and Magniber ransomware payloads.
“An attacker can craft a malicious file that would evade MOTW defenses, resulting in a limited loss of integrity and availability of security features such as Protected View in Microsoft Office, which rely on MOTW tagging,” Microsoft said.In a web-based attack scenario, an attacker could host a malicious website that exploits the security feature bypass.
United Kingdom Latest News, United Kingdom Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
RIP Windows 7 — for real this timeMicrosoft is terminating all support for Windows 7 and Windows 8/8.1.
Read more »
Windows hardware developers duped Microsoft into signing malicious driversDrivers certified through Microsoft’s Windows Hardware Developer Program were used in cyberattacks, including ransomware incidents.
Read more »
OT security must mature as critical infrastructure comes under attackOT increasingly integrates into IT systems, and cyber attackers target OT and critical infrastructure.
Read more »
Microsoft offered US regulator binding multi-console Call of Duty dealThe FTC has said it’s concerned the Activision deal will “enable Microsoft to suppress competitors to its Xbox gaming consoles and its rapidly growing subscription content and cloud-gaming business.”
Read more »
Microsoft targets Internet expansion in AfricaMicrosoft aims to secure Internet access for 100 million more people in Africa by 2025, teaming up with a satellite provider to help achieve the objective.
Read more »
Attacks on Nigeria's Election Facilities a Threat to 2023 PollsPolice officials in Southeast Nigeria have said that operatives killed three armed men when a gang attacked the office of the Independent National Electoral Commission (INEC) - one of several attacks on the commission's offices ahead of Nigeria's polls in February 2023. INEC officials have said attacks on facilities will not deter it from conducting the elections, but political observers say the attacks are already having an impact on the process. INEC said it will be relying on technology to electronically transmit results and assured Nigerians that the attacks will not affect the polls, writes Timothy Obiezu for VOA. "Between 2019 and now there have been over 53 attacks and the attackers are becoming more daring. We're concerned about how this would impact on citizens' confidence, even on the part of INEC. We have seen the devastating impact on this in the elections in 2019 that INEC even had to delay elections in some quarters," said Paul James, election program coordinator at the Youth Initiative for Advocacy, Growth and Advancement, a non-profit group that monitors elections in Nigeria. No group has claimed responsibility for the attacks but authorities have in recent past blamed an outlawed separatist group, the Indigenous People of Biafra or IPOB, for increased restiveness in the southeast. IPOB has denied involvement. Nigerians go to the polls on February 25 to elect a leader that will succeed Muhammadu Buhari, who's exiting after two terms of office. One of the topics most debated is the state and fate of the impending democratic transition amid the deteriorating national security situation.
Read more »