Microsoft Patch Blocks Critical UEFI Vulnerability Exploited by Bootkits Despite Secure Boot Protections

Microsoft Patch Blocks Critical UEFI Vulnerability Exploited by Bootkits Despite Secure Boot Protections

A newly discovered vulnerability, identified as CVE-2024-7344, affects Microsoft-signed UEFI applications, posing a serious security risk even when Secure Boot is enabled. The issue could allow attackers to deploy bootkits, malicious software that runs before the operating system loads. Bootkits are particularly dangerous because they are hard to detect and can survive even an OS … Read more

Microsoft Confirms Three New Zero-Day Exploits Targeting Hyper-V, Urging Immediate Action from Users

Microsoft Confirms Three New Zero-Day Exploits Targeting Hyper-V, Urging Immediate Action from Users

Microsoft has confirmed that three new zero-day exploits are actively being used in cyberattacks, adding further challenges to Windows users’ security. These vulnerabilities are part of a larger security update released during the latest Patch Tuesday, which addresses 159 total vulnerabilities. Among these, 12 are critical, and eight are zero-day vulnerabilities, with three already known … Read more

Google and Microsoft Clash Over User Privacy While Expanding Invasive Data Practices

Google and Microsoft Clash Over User Privacy While Expanding Invasive Data Practices

This week, an ironic situation unfolded in the tech world when Google accused Microsoft of using “tricks to confuse users and limit choice.” This came only a few weeks after Google itself was criticized for reducing users’ control over their personal data. The issue centers around Google’s plan to implement digital fingerprinting on devices, set … Read more