New Attack Targets Microsoft’s UI Automation Framework

Windows 11 24H2 Issue Delays Upcoming Security Updates

December 31, 2024December 31, 2024

Microsoft Alerts Users to Windows 11 24H2 Installation Security Issue

Microsoft has recently issued a warning regarding a significant security issue affecting users attempting to install Windows 11 version 24H2 via physical media. This problem arises specifically for installations conducted between early October and early November 2024. Users are strongly advised to be aware of this situation to ensure the security and functionality of their systems.

According to ZDNET, the issue exclusively impacts those using physical media, such as CDs and USB flash drives, for installation. Microsoft clarified that devices that receive the October and November 2024 security updates through Windows Update or the Microsoft Update Catalog website will not encounter this problem.

Key Details About the Windows 11 24H2 Issue

Affected Installations: The issue is limited to installations via physical media.
Recommendation: Users who plan to install Windows 11 24H2 using physical media are encouraged to download the latest version directly from the Download Windows 11 page.
Advice for Existing Users: If you have already installed Windows 11 24H2 and are experiencing issues, it is best to wait for the forthcoming fix from Microsoft.

Ongoing Bugs and Updates in Windows 11 24H2

This warning coincides with reports of multiple bugs persisting within Windows 11 24H2, despite Microsoft’s monthly patches and updates since October. These ongoing issues highlight the importance of staying updated with the latest software versions and security patches.

Moving Forward: What Users Should Do

To avoid complications during installation, users are encouraged to:

Use Windows Update: Opt for installations via Windows Update whenever possible.
Monitor Updates: Keep an eye out for the upcoming fix from Microsoft for those who have already installed Windows 11 24H2.
Stay Informed: Follow reputable tech news sources for the latest updates on Windows 11 and security issues.

For more information on troubleshooting Windows issues, check out our article on common Windows 11 problems and solutions.

Share Your Thoughts

Have you encountered issues while installing Windows 11 24H2? We invite you to share your experiences in the comments below or explore related articles for further insights.

Brazilian Hacker Charged for $3.2M Bitcoin Extortion Scheme

December 26, 2024December 26, 2024

Junior Barros De Oliveira, a Brazilian national, has been charged in the U.S. for attempting to extort a company by threatening to release stolen data from a 2020 breach affecting around 300,000 customers. The U.S. Department of Justice indicted the 29-year-old, detailing four counts of extortionate threats and four counts of threatening communications. De Oliveira allegedly demanded 300 bitcoin (about $3.2 million) from the company’s CEO to prevent data sale and later offered to assist with the breach for 75 bitcoin. Each extortion count could lead to five years in prison, emphasizing the rise of cyber extortion threats.

Atrium Health Breach Affects Over 585,000 Patients

Texas University Data Breach Affects Nearly 18,000

December 27, 2024December 27, 2024

McMurry University in Texas has reported a data breach affecting nearly 18,000 individuals, with sensitive information such as names and Social Security numbers compromised between June 18 and June 20. The university’s investigation, lasting nearly five months, revealed the extent of the breach and prompted the offering of complimentary credit monitoring services to those affected. This incident reflects a troubling trend of cybersecurity threats in academia, as several other universities, including Duke and Stanford, have also experienced breaches this year. McMurry is enhancing its cybersecurity measures and employee training to prevent future incidents.

Datavant Breach Affects Over 11,000 Young People

Telefónica Data Breach Revealed After Hack

January 13, 2025January 13, 2025

Telefónica, Spain’s leading telecommunications company, has confirmed a significant data breach involving unauthorized access to its internal ticketing system. The incident, linked to stolen employee credentials, has resulted in the exfiltration of approximately 2.3 GB of sensitive information, including internal documents. Following the breach, which was publicized after the company’s Jira database appeared on a hacking forum, Telefónica has taken measures such as resetting passwords and investigating the extent of the breach. This incident underscores the growing cybersecurity threats facing the telecommunications sector and highlights the need for enhanced security protocols to protect sensitive data.

Urgent Alert: Cleo File Transfer Vulnerability Under Attack

December 10, 2024December 10, 2024

Cleo Software users are urged to secure their systems against a serious vulnerability, CVE-2024-50623, affecting Cleo’s LexiCom, VLTransfer, and Harmony software. Reported by Huntress on December 3, 2024, the flaw allows unauthenticated remote code execution due to unrestricted file uploads, enabling attackers to execute arbitrary code. At least ten organizations have already been compromised. Users are advised to update their software, review security settings, and monitor for unusual activities. While Cleo has issued patches, experts warn they may not fully address the vulnerabilities, and ransomware groups are reportedly developing zero-day exploits targeting the software.

Massive Browser Extension Attack: Key Insights and Risks

December 30, 2024December 30, 2024

Cybersecurity experts reported a significant attack on browser extensions, compromising over 25 extensions and impacting more than two million users. This attack highlights vulnerabilities in browser extensions, which often require extensive permissions, posing risks such as credential theft. LayerX is offering a free service to help organizations audit their exposure. Key takeaways include recognizing browser extensions as a major attack surface, particularly those related to VPNs and AI, and the need for organizations to conduct comprehensive audits, categorize extensions by risk, analyze permissions, and implement adaptive enforcement policies to protect against these threats.

NCSC Anticipates Ongoing Ties with CISA During Trump Era

December 10, 2024December 10, 2024

Concerns regarding the potential political influence on the Cybersecurity and Infrastructure Security Agency (CISA) under the Trump administration have been alleviated by UK officials from the National Cyber Security Centre (NCSC). NCSC leaders, including CTO Ollie Whitehouse and CEO Richard Horne, expressed confidence in CISA’s future effectiveness and emphasized the strong collaboration between UK and US cybersecurity agencies. This partnership is crucial for addressing evolving cyber threats, ensuring continuity in effective cyber policies. NCSC’s reassurances highlight the resilience of international cybersecurity frameworks amid political changes, underscoring the importance of ongoing cooperation between the two nations.