Cisco releases a batch of patches for security vulnerabilities in numerous products including Cisco Small Business routers
While for many people September 7 meant finding out about the latest iPhone and Apple Watch, for Cisco it was the day on which it pushed out security patches for various medium- and high-severity vulnerabilities.
The company posted a series of advisory notices in its security center and released four patches for a variety of flaws. The patches address the high-severity CVE-2022-20696, a vulnerability in the binding configuration of Cisco SD-WAN vManage Software, as well as CVE-2022-28199, a flaw in the NVIDIA Data Plane Development Kit. There are also patches for two medium-severity flaws -- CVE-2022-20863, a vulnerability in the messaging interface of Cisco Webex App, and CVE-2022-2092, a vulnerability in the IPSec VPN Server authentication functionality of several Cisco Small Business routers.
Microsoft releases PowerToys v0.62.0 with THREE amazing new utilities to play with
Recent updates to PowerToys have focused on fixing bugs and improving stability, but now it is finally time for some new features. With the release of PowerToys v0.62.0, Microsoft has added not one, not two, but three new utilities.
If you have been following PowerToys news, you will probably be aware of the Text Extractor tool which can be used to grab text from images, and has been in development for a little while. Likewise, the self-explanatory Screen Ruler utility is one you may have heard of. Completely new, however, is Quick Accent which makes it quick and easy to type accented characters.
Microsoft is planning to release 'Moment' updates to add new features to Windows 11 after 22H2
It is mere days until the rollout of Windows 11 22H2 begins -- or the Windows 11 2022 Update as it seems likely to be called. There is a lot to look forward to in this significant update, but Microsoft already has smaller updates planned for shortly afterwards.
Having already said that Windows 11 will only be getting one major update per year, Microsoft appears to be also planning to release minor updates, currently referred to as "Moments". References to Moment 1 and Moment 2 updates have been spotted, and despite being smaller updates, they will bring new features to Windows 11.
If Microsoft Edge 105 won't launch, here's what you need to do
Microsoft released a new version of its Edge browser a few days ago, bringing with it various improvements and changes. But many people who have updated to Microsoft Edge 105 have run into a fairly serious issue -- the browser will not start.
It is an issue that has been very widely reported, and while Microsoft is not publicly saying much about the problem, a member of the Edge development team has stepped up with a solution. So, if the latest version of Edge won't launch for you, you will be pleased to learn that the issue stems from a deprecated group policy and can be easily fixed with a registry edit.
Valve bans developer from Steam for using game update notes to share transphobic rant
The developer of the game Domina, Nicholas Gorissen, has received a permanent ban from Valve's Steam platform after publishing an anti trans diatribe in the notes accompanying a game update.
Gorissen, also known as Bignic, used the release notes for an update to his Roman gladiator sim Domina to attack the transgender community. In addition to a general anti-trans rant, he also personally attacked a prominent transgender game streamer. In response, Valve has removed all titles published by his company, Dolphin Barn Incorporated.
Samsung warns of a security breach that gave hackers access to US customer data
Samsung has revealed limited details of a security incident that took place earlier in the year, exposing the personal data of customers in the US.
The technology giant says that the data breach took place back in July when "an unauthorized third party acquired information from some of Samsung's US systems". No details about who may have been responsible have been released, and Samsung has issued a warning for customers to exercise caution.
Update Chrome immediately -- Google releases emergency patch for serious security issue
Whether you are running Windows, macOS or a Linux distro, if you're a Chrome user there is an extremely important update to install right now.
Google has released Chrome 105.0.5195.102 for all three platforms to address the vulnerability which is tracked as CVE-2022-3075. The security flaw, which relates to data validation in the Mojo runtime libraries, is known to have been exploited in the wild, so users are advised to actively seek out the update rather than waiting for Google to roll it out to everyone.
Microsoft leaps to its own defense as anti-competition concerns mount about Activision Blizzard takeover
The Competition and Markets Authority (CMA) -- the competition regulator in the UK -- has voiced concern about Microsoft's proposed takeover of game publisher Activision Blizzard.
The CMA is worried that the merger of two such huge companies in a $68.7 billion deal "could substantially lessen competition in gaming consoles, multi-game subscription services, and cloud gaming services". Windows 11 maker Microsoft, it almost goes without saying, entirely disagrees, and Phil Spencer, CEO of gaming at the company, has penned a blog post explaining just why this it.
Microsoft undercovers high severity vulnerability which could allow one-click hijacking of TikTok accounts
Microsoft has revealed details of a high severity vulnerability in the TikTok app for Android. The Microsoft 365 Defender Research Team shares news of the now-fixed security flaw which the company says could have allowed an attacker to take over a victim’s account by simply getting them to click a malicious link.
With hundreds of millions of users around the world, TikTok is one of the most popular social platforms at the moment; the potential damage from the successful exploitation of such a vulnerability is huge.
Microsoft launches new resource site for Java developers
Whether you're currently a Java developer, someone looking to get started, or if you sit somewhere in the middle and you're looking to up your coding game, Microsoft has a new resource site for you to check out.
Described as a one-stop shop for Java developers, the site includes beginner guides to getting started in Java coding. The site also features information about deploying and scaling Java apps, and has tips and more to help developers code productively.
Ex director of UX at Microsoft is 'shocked' at the confusing Start menu experience in Windows 11
There is a lot to like, even love, about Windows 11, but there are also plenty of things which are very divisive. Wading into the debate about the direction in which Microsoft has taken its operating system is Jensen Harris, former Director of User Experience at the company, who takes aim at the Start menu and what he describes as a "confusing" experience.
In a series of tweets, Harris lambasts Microsoft for including banner ads in the Start menu, for placing obstacles in the way of completing simple tasks, and makes various complaints about design choices. It makes for extremely interesting reading.
Google launches new Open Source Software Vulnerability Rewards Program (OSS VRP)
Google is not alone in offering so-called bug bounty programs which give financial incentives to contributors to track down vulnerabilities and security issues in its software. Now the company has launched a new initiative called the Open Source Software Vulnerability Rewards Program (OSS VRP).
As the name suggests, this new program focuses on Google's open source projects. The company is offering rewards of between $100 and $31,337, depending on the severity of the vulnerability.
Twilio hack led to compromise of 2FA app Authy
Earlier this month, messaging service Twilio suffered a serious data breach following a "sophisticated social engineering attack". After using phishing attacks on company employees, hackers were able to access user data, but it seems that the impact of the hack was more widespread.
Twilio has now revealed that the attackers also compromised the accounts of some users of Authy, its two-factor authentication (2FA) app. Although the number of users affected by the breach is relatively small, the implications are very serious and will dent confidence in the company.
Microsoft explains the SMB compression changes introduced by Windows Server 2022 KB5016693 and Windows 11 KB5016691 updates
Last week, Microsoft released previews of updates for various versions of Windows before it unleashes the final versions next Patch Tuesday. Included among these was the KB5016691 update for Windows 11 which --although billed primarily as a bug-fixing update -- added new Server Message Block (SMB) compression options.
The same changes were introduced to Windows Server 2022 with the KB5016693 update, and Microsoft has published details of just what the changes mean, as well as explaining how to take advantage of the new options and settings.
Microsoft releases KB5016688 update to fix a slew of Windows 10 problems
Microsoft's focus may well be Windows 11 and the upcoming Windows 12, but that does not mean that people who have opted to stick with Windows 10 have been forgotten. Having released a preview of the KB5016691 update for Windows 11, the company has also released KB5016688 update for Windows 10.
Available for Windows 10 versions 20H2, 21H1 and 21H2, the KB5016688 update is a preview of the cumulative update that will be released next Patch Tuesday. Although this is a non-security update, it fixes a large number of issues with Windows 10
Sofia Elizabella's Bio
Sofia Wyciślik-Wilson is a queer, transgender journalist based in Poland. She has been writing about technology for more than two decades, and after years working for magazines, her writing moved online. She is fueled by literature, music, nature, and vegetables. You can find her on Bluesky and Mastodon. If you like what you read, you can Buy her a Coffee!
© 1998-2024 BetaNews, Inc. All Rights Reserved. Privacy Policy - Cookie Policy.