“BitUnlocker” full-volume encryption bypass found by Microsoft researchers
Four flaws fixed in July’s Patch Wednesday.
Microsoft fixes “BadSuccessor” zero-day authentication bug
Patch Wednesday lands with 13 fixes for vulnerabilities rated critical.
Researchers poke further holes in TETRA encrypted wireless comms
Four critical vulnerabilities found.
“Shade BIOS” stealth malware hides below operating system
Creates parallel “attacker-exclusive OS”.
Serious path traversal bug found in Microsoft’s NLWeb “Agentic Web” tool
Vulnerability allowed reading of system files and theft of AI LLM API keys.
University of Western Australia resets all staff and student passwords
After ‘data breach’.
Microsoft raises Zero Day Quest bug bounties to US$5 million
Vulnerability finding program targets company’s enterprise offerings.
Confusion reigns as phishers abuse Exchange Online Direct Send
Legitimate feature needs to be secured, but admins aren’t sure how to do it.
“ReVault” firmware flaws allow persistent access in Dell laptops
Over 100 currently supported models at risk.
NSW greenlights central database for compromised IDs
Identity Protection and Recovery Bill passes NSW Parliament