Microsoft – Page 7 – TheCyberThrone

CISA adds half a dozen Microsoft Patch Tuesday Vulnerabilities to KEV

The Cybersecurity and Infrastructure Security Agency (CISA) has recently expanded its Known Exploited Vulnerabilities (KEV) Catalog to include six newly identified vulnerabilities in Microsoft products. This action underscores the urgency…

PravinKarthik March 12, 2025

CISA KEV Catalog Update Part I – March 2025

On March 3, 2025, the Cybersecurity and Infrastructure Security Agency (CISA) updated its Known Exploited Vulnerabilities (KEV) catalog by adding several new vulnerabilities, including those affecting Hitachi Vantara and other…

PravinKarthik March 4, 2025

CISA adds Zimbra and Microsoft vulnerabilities to its KEV Catalog

The Cybersecurity and Infrastructure Security Agency (CISA) has recently added two critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog. These vulnerabilities, affecting Microsoft Partner Center and Synacor Zimbra Collaboration…

PravinKarthik February 26, 2025

CISA Adds Microsoft and Zyxel Vulnerabilities to KEV Catalog

On February 11, 2025, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. These vulnerabilities, associated with Microsoft and Zyxel products,…

PravinKarthik February 12, 2025

CVE-2025-21293 PoC Exploit Code Released

Vulnerability Overview CVE-2025-21293 is an elevation of privilege vulnerability in Active Directory Domain Services. The vulnerability arises from excessive permissions granted to the Network Configuration Operators group, which can be…

PravinKarthik February 6, 2025

CVE-2025-21298 Exploit Code Released

CVE-2025-21298 is a critical use-after-free vulnerability in Microsoft Outlook. This vulnerability can be exploited to achieve remote code execution by leveraging the OLE feature, which allows embedding and linking to…

PravinKarthik January 24, 2025

Active Directory Bypass: Uncovering the Danger of NTLMv1

Silverfort has revealed a critical vulnerability within the NTLMv1 (New Technology LAN Manager version 1) authentication protocol, exposing organizations to significant security risks despite their efforts to disable NTLMv1 via…

PravinKarthik January 18, 2025

Microsoft Patch Tuesday- January 2025

Microsoft released the January 2025 Patch Tuesday updates on January 14, 2025, focusing on addressing critical security vulnerabilities across various Microsoft products. This update cycle includes security patches, improvements, and…

PravinKarthik January 15, 2025