Plus: Adobe, SAP, Fortinet, VMware, Cisco issue pressing updates
Microsoft fixed 149 security flaws in its own products this week, and while Redmond acknowledged one of those vulnerabilities is being actively exploited, we've been told another hole is under attack, too., described as a proxy driver spoofing vulnerability in Windows. This was reported to Redmond by Christopher Budd of Sophos and is rated 6.7 out of 10 on the CVSS severity scale. Microsoft initially listed it as non-exploited then during the day upgraded that to exploited.
It appears someone was able to take that program, sign it using the publisher cert so that the operating system trusted it, then bundle it with marketing/spam software designed to remote-control phones to make them act like online bots, collectively liking posts, following people on social media, and posting comments. Running the program would introduce the backdoor on the victim's PC.
But, assuming an attacker can fool someone into clicking on a malicious link or opening a malware-laden file, the bug allows them to bypass the SmartScreen security feature in Windows that's supposed to alert users to any untrusted websites or other threats. "The 'Self-Registration' and 'Modify your own profile' features of the UME do not consider existing password requirements and therefore, allow using simple passwords that can be easily cracked,"Hotel check-in terminal bug spews out access codes for guest rooms"The title of the assigned vulnerability seems to be a little bit misleading since the vulnerability is not caused by a configuration issue but by a missing check in the program logic," he continued.
United Kingdom Latest News, United Kingdom Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Canva acquires Affinity, further wounding a regulator-bruised AdobeYet another reason to reconsider that overpriced Creative Cloud subscription
Read more »
4 methods for using fonts in Adobe Creative CloudThere's more than one way to find and activate fonts across Adobe's Creative Cloud applications.
Read more »
Adobe drops 2 game-changing AI tools for 3D artistsJoe is a regular freelance journalist and editor at Creative Bloq. He writes news and features, updates buying guides and keeps track of the best equipment for creatives, from monitors to accessories and office supplies.
Read more »
How to better use Photoshop's AI tools to enhance your artGet more from Adobe AI.
Read more »
Adobe's New AI Feature: Structure ReferenceLearn about Adobe's new AI feature called Structure Reference, which allows users to upload an image and generate new images with the same layout. Marcus Rentsch, Adobe design evangelist, demonstrates the feature by turning FC Barcelona's badge into an embroidery with a non-destructive filter.
Read more »