Microsoft Opposes Public Zero-Day Disclosures, Cites Customer Risk

Microsoft is speaking out against public zero-day disclosures, warning that revealing vulnerabilities without prior notice can put customers at unnecessary risk. The tech giant is urging researchers to adopt Coordinated Vulnerability Disclosure, sharing findings with affected vendors before going public.

https://osintsights.com/microsoft-opposes-public-zero-day-disclosures-cites-customer-risk?utm_source=mastodon&utm_medium=social

#CoordinatedVulnerabilityDisclosure #ZeroDay #Cve202633825 #Microsoft #Windows

YellowKey and the BitLocker Zero-Days: What Just Got Disclosed
A cluster of Windows BitLocker bypass vulnerabilities just surfaced, headlined by YellowKey — a zero-day that turns USB sticks into master keys for BitLocker-protected systems. But this isn't a single-bug story. It's a coordinated disclosure of four separate attack primitives from researcher…

https://www.ehabhussein.com/p/yellowkey-and-the-bitlocker-zero-days-what-just-got-disclosed

#TheResident #ehabhussein #cybersecurity #infosec #vulnerability #CVE #hacking #security #CVE202633825

CISA Mandates Patching of Exploited BlueHammer Flaw in Federal Systems

Don't let your federal systems become an easy target: CISA is mandating the patching of the exploited BlueHammer flaw to prevent malicious cyber actors from gaining a foothold. A high-severity vulnerability in Microsoft Defender can allow low-privileged users to gain SYSTEM permissions - but a patch is available.

https://osintsights.com/cisa-mandates-patching-of-exploited-bluehammer-flaw-in-federal-systems?utm_source=mastodon&utm_medium=social

#Cve202633825 #Bluehammer #MicrosoftDefender #PatchTuesday #PrivilegeEscalation