Скачать или смотреть System Update

𝐌𝐢𝐜𝐫𝐨𝐬𝐨𝐟𝐭 𝐉𝐚𝐧𝐮𝐚𝐫𝐲 𝟐𝟎𝟐𝟒 𝐏𝐚𝐭𝐜𝐡 𝐓𝐮𝐞𝐬𝐝𝐚𝐲 𝐔𝐩𝐝𝐚𝐭𝐞𝐬

A new string of software updates is available for Microsoft’s Windows operating system and applications. In this video, we’ll review some of the most important Microsoft January 2024 Patch Tuesday updates and explain the key cybersecurity vulnerabilities that Microsoft has uncovered.

All Microsoft software programs, ranging from Microsoft Office to the Windows Cloud Files Mini Filter Driver, undergo monitoring to check for ways that cybercriminals might exploit the technology. The company quickly addresses these vulnerabilities every month on Patch Tuesday. The first Patch Tuesday of 2024 brings security solutions to 48 different flaws across the software. In particular, two security flaws have a Critical rating from the Common Vulnerability Scoring System, with scores of 7.5 and 9.0 out of 10.

Windows Kerberos Security Feature Bypass Vulnerability:
Some of the most severe cyberattacks today involve hackers impersonating legitimate users by gaining unauthorized access to accounts. A Windows Kerberos authentication protocol bug would allow attackers to bypass key security features and then send malicious messages to the victim’s machine. Should a hacker exploit this vulnerability, they could spoof the local network and pretend to be the Kerberos authentication server.

Windows Hyper-V Remote Code Execution Vulnerability:
The second-biggest concern for Microsoft is a vulnerability involving the Windows Hyper-V server. Threat actors can perform remote code execution without authentication or user interaction. This bug has a slightly lower CVSS rating because it is more difficult to exploit. Hackers would need to infiltrate the private network first.

If you use any Microsoft programs for your business, keep up with the latest patch updates. Installing monthly software updates as soon as they become available can protect your network and employees from falling victim to a dangerous cyberattack.
 
Thankfully, none of the issues in January’s patch are under active attack, making this the second consecutive Patch Tuesday without zero-day exploitations.

I've put together three takeaways and next steps:

1. Manage Your Patching:

Many patches released by Microsoft and other vendors may cause new problems while fixing other things. You should have a process to review, apply, and remediate failed patch installations regularly.

2. Third Party Patching:

Microsoft is only one of many software vendors known for the most common and serious security flaws. If you’re relying solely on Microsoft Update, then you’re only patching a small subset of the vulnerabilities.

3. Know How to Roll Back:

What do you do when a patch goes out to your whole company and causes work-stopping issues? Maybe employees can’t print or maybe they can’t boot their computers. Have a procedure in place to be able to remove bad patches from all systems quickly.

Link to original story:
https://www.cyberstreams.com/microsof...