Author: Rafael Silva

Written by Rafael Silva

Desktop Window Manager vulnerability CVE-2021-28310 exploited ITW

Desktop Window Manager vulnerability CVE-2021-28310 exploited ITW https://ift.tt/3dfofqU Kaspersky researchers have found a zero-day vulnerability (CVE-2021-28310) in a Microsoft Windows component called Desktop Window Manager (DWM). We believe several threat actors have already exploited the vulnerability. Microsoft just released the patch, and we suggest applying it immediately. Here’s why. What is Desktop Window Manager? Pretty […]

Written by Rafael Silva

Microsoft’s April 2021 Patch Tuesday Addresses 108 CVEs (CVE-2021-28310)

Microsoft’s April 2021 Patch Tuesday Addresses 108 CVEs (CVE-2021-28310) https://ift.tt/3wPxBkS Microsoft addresses 108 CVEs, including CVE-2021-28310—which has reportedly been exploited in the wild—as well as four new remote code execution vulnerabilities in Microsoft Exchange. 19Critical 88Important 1Moderate 0Low Microsoft patched 108 CVEs in the April 2021 Patch Tuesday release, including 19 CVEs rated as critical, […]

Written by Rafael Silva

Azure AD Web Sign-in Security Feature Bypass Vulnerability (CVE-2021-27092, Important)

Azure AD Web Sign-in Security Feature Bypass Vulnerability (CVE-2021-27092, Important) https://ift.tt/2RyC63a Today, for its April 2021 Patch Tuesday, Microsoft released an important security update for the Azure AD web sign-in feature in Windows and Windows Server. This vulnerability is known as CVE-2021-27092 and rated with CVSSv3.0 scores of 6.8/5.9. About Azure AD Web Sign-in Web […]

Written by Rafael Silva

Exploring the tools for DevSecOps in a CI/CD Pipeline on Azure | Azure Enablement

Exploring the tools for DevSecOps in a CI/CD Pipeline on Azure | Azure Enablement https://ift.tt/3tboJ73 Victoria Almazova joins David Blank-Edelman to explore the tools for DevSecOps in a CI/CD Pipeline on Azure. ✅ Resources: WAF Security pillar Azure Well-Architected Review Secure DevOps DevSecOps in Azure Secure DevOps Kit for Azure Secure Azure pipelines [00:00] Overview[01:09] […]

Written by Rafael Silva

Exchange 2016:- Symantec IPS issues

Exchange 2016:- Symantec IPS issues https://ift.tt/2PRpLXt Symantec on a Windows Server just like ESET works great. When you throw Exchange 2016 or Exchange 2019 into the mix, things get more complicated with both products. If you are not aware, when you are running an anti-virus product, you need to add the exclusions for processes and […]