Author name: fixtherisk2

Windows Secure Kernel Mode Elevation of Privilege Vulnerability Introduction On August 7, 2024, Microsoft disclosed a critical security vulnerability identified as CVE-2024-21302 and CVE-2024-38202. This vulnerability affects Windows systems supporting Virtualization Based Security (VBS), including certain Azure Virtual Machine SKUs. The vulnerability allows an attacker with administrative privileges to replace current Windows system files with […]

How to uninstall Teams classic from all users profile Introduction With the advent of new technologies and software updates, it becomes crucial to keep our systems up-to-date to ensure security and efficiency. One such update involves the transition from Microsoft Teams Classic to the new Microsoft Teams. This blog will guide you through the process

CrowdStrike update bricking Windows machines around the world- How to Fix?​ Introduction In a recent turn of events, an update to a product from infosec vendor CrowdStrike has wreaked havoc on Windows machines worldwide. Users are reporting Blue Screen of Death (BSOD) errors, rendering their PCs unable to reboot. Let’s dive into the details and

Another Blue Screen of Death after installing July 2024 month Patch  Introduction In the ever-evolving landscape of Windows operating systems, occasional hiccups are inevitable. One such hiccup is the dreaded **PAGE_FAULT_IN_NONPAGED_AREA** blue screen of death (BSOD) error. If you’ve encountered this cryptic message, fear not! We’ll delve into its intricacies, explore potential causes, and discuss

Fix VPN issue after installing KB5037771 2024-05 Cumulative Update for Windows 11​ Introduction The KB5037771 Cumulative Update for Windows 11, released in May 2024, has caused several issues for users. Among these, VPN connectivity problems have been particularly frustrating. In this blog post, I’ll guide you through the steps to address these issues and get

Zero Trust Security: Fortifying Your Digital Kingdom in the Modern Age​ In today’s ever-evolving threat landscape, traditional castle-and-moat security approaches are becoming increasingly inadequate. Perimeter walls (firewalls) can be breached, and once inside, attackers have free rein. Zero trust security emerges as a powerful defense strategy, constantly verifying users and devices, regardless of location, before

Microsoft Streaming Service Elevation of Privilege Vulnerability (CVE-2023-29360) In today’s digital world, staying ahead of cyber threats is crucial. This is why understanding vulnerabilities like CVE-2023-29360 is essential for protecting your Windows system. What is CVE-2023-29360? CVE (Common Vulnerabilities and Exposures) is a system for identifying and categorizing security weaknesses in software and hardware. CVE-2023-29360

ConnectWise Sounds the Alarm on Critical RCE Vulnerability in ScreenConnect ConnectWise has issued an urgent battle cry to all ScreenConnect administrators – a clarion call to patch, fortify, and defend against a menacing, maximum severity flaw threatening to plunge servers into the abyss of remote code execution (RCE) chaos. The same vulnerability has been published

Internet Shortcut Files Security Feature Bypass Vulnerability CVE-2024-21412 Introduction CVE-2024-21412, an Internet Shortcut Files Security Feature Bypass Vulnerability, has recently been highlighted as a potential threat to Windows users. The vulnerability allows attackers to bypass certain security features and execute malicious code via specially crafted Internet Shortcut (.url) files. In this blog, we will dive

Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability Roundcube releases a security update to mitigate Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability (CVE-2023-43770) in Roundcube versions before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3. Introduction Email communication plays a crucial role in today’s digital world, connecting individuals and organizations worldwide. However, with the increasing reliance