Microsoft Releases 16 Updates to Resolve Bugs in Windows, Office

15 May, 2019, 11:22 | Author: Sammy Rose
  • The 2019 Patch Tuesday rollout has started

An estimated 3 million Remote Desktop Protocol endpoints are now exposed to the internet, according to security researcher Kevin Beaumont, citing data from device search engine Shodan.

Patch Tuesday It's that time of the month again, and Microsoft has released a bumper bundle of security fixes for Patch Tuesday, including one for out-of-support operating systems Windows XP and Server 2003. This vulnerability, the company said in a blog post, propagates in a way that's similar to the WannaCry ransomware from two years ago. (Old hardware can run very nice versions of Linux, which cost nothing.) And if you're one of those stick-in-the-muds still running Windows 7, you have eight months to update those machines to Windows 10.

Windows 7, Windows 2008 and 2008 R2, are vulnerable, along with the even older and out of support Windows Server 2003 and XP variants. "The security update addresses the vulnerability by correcting how Skype for Android answers incoming calls", Microsoft says, adding that exploitation is less likely.

"Microsoft invests heavily in strengthening the security of its products, often through major architectural improvements that are not possible to backport to earlier versions of Windows". This measure would stop worms as long as attackers don't have valid credentials for authentication on vulnerable systems.

Separately, Microsoft's regular monthly round of security patches for Windows addresses 22 critical vulnerabilities.

Netflix wants to talk about video games at E3
That's all entirely speculation on my part, but we're extremely curious to see what Netflix actually has in the works. This year's E3 festivities kick off on June 11th and conclude on June 13th at the Los Angeles Convention Center.


HTC’s New Exodus 1s Phone Is A Bitcoin Full Node
HTC have announced the launch of the second generation, blockchain-focussed Exodus 1s which will be available by the end of 2019. The same full node functionality is coming to the Exodus 1 as well, apparently, but that phone will need an SD card.


Ocasio-Cortez and Sanders Rally Support for Green New Deal
Biden said he would be making a "major speech" to detail his environmental policy by the end of the month. Ocasio-Cortez and Massachusetts Democratic Sen.


The company urged users to download the latest Windows update for the affected systems, which fixes a critical remote code execution vulnerability in the Remote Desktop Services process. Not so for CVE-2019-0863, an elevation of privilege flaw in Windows Error Reporting (WER) deals with files, which Microsoft says is being used by crooks to fully compromise infected machines.

"An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights", Microsoft said in the vulnerability advisory.

RIDL and Fallout can be exploited via unprivileged code such as shared cloud computing resources and Javascript on malicious websites or in ads.

As always, users are recommended to install these security updates as soon as possible, and to prioritize the patches targeting flaws already being exploited out in the wild. They can be found in the source link below, near the end of the page.

Fixing the MDS side-channel vulnerabilities will require micro-code updates from Intel for processors, along with updates to operating systems and hypervisors.

Recommended:



Popular

Ohtani goes 2-for-5 with 1 RBI, Angels win 3rd straight
Save for the handful of mistakes that contributed to his first loss, Canning is as good as advertised so far with the Angels. The last three innings were played in the rain before only a small portion of the announced crowd of 21,106.

Pompeo to Lavrov: Trump Administration doesn't recognize Russia's attempted annexation of Crimea
A Kremlin aide said the talks had not yielded any breakthrough but had been held in a business-like atmosphere. It is Pompeo's first visit to Russian Federation as secretary of state.

Weiner Leaves Halfway House Where Held For Underage Sexting
In 2013, after hiding out for two years, Weiner tried to re-enter politics, this time running for mayor of New York City. Former congressman Anthony Weiner leaves federal court following his sentencing in NY in 2017.

Xiaomi Mi Express Kiosks Announced, Vending Machines That Sell Smartphones and Accessories
Customers cannot only purchase mobile phones, but also phone accessories from the Mi Express vending machines, the company said. India's leading smartphone and TV brand, Xiaomi has announced the launch of the Mi Express Kiosk initiative across India.

Jet Airways shares slump after reports of Etihad's non-binding offer
Shares of the carrier, which have tumbled nearly 70 per cent over the past year, were down 5 per cent at Rs 144.3, as of 0445 GMT. Struggling with a debt of more than $1.2 billion, Jet Airways owes money to lessors, suppliers, pilots and oil companies.

Madonna Defends Decision to Perform at Eurovision in Israel
On Monday, 58 Palestinian women artists shared an open letter asking Madonna not to proceed with the Eurovision performance. But there have been calls for performers and broadcasters to boycott the competition over Israel's human rights record.

Will 'American Idol' Return For Season 3?
Perry made headlines back in 2017 when she signed onto the show for a reported $25 million a year. Emmy Award-winning host and producer Ryan Seacrest hosts the iconic series.

Here’s Why Kate Middleton and Prince William Haven’t Met Baby Archie Yet
It is believed the royal couple named their child after an officer who saved Prince Harry's military career. Archie Harrison Mountbatten-Windsor, seventh in line to the throne , was born weighing 7lb 3oz on 6 May.

Four Louisiana officers in President Trump's motorcade crash on interstate
At least two officers could be seen laying on the ground, injured, according to reporters traveling in the press vehicle . Donald Trump motorcade was involved in a road accident while the president was traveling in Louisiana on Tuesday.

SPOILERS ** WWE SmackDown Tapings For Tonight (5/14)
eWrestling.com will be providing play-by-play spoiler results coverage from the taping as it happens live. This was said to be an extremely good match early in the show that really set the tone for the evening.