Microsoft breaks Patch Tuesday record with 974-CVE deluge
Microsoft experienced a massive Patch Tuesday, releasing 974 CVEs – a record number. This surge in vulnerabilities highlights ongoing challenges in securing on-premise systems, particularly SharePoint, which is now being actively exploited by attackers. The sheer volume underscores the need for robust security practices and proactive vulnerability management.
Microsoft experienced a record-breaking Patch Tuesday, releasing 974 CVEs. This substantial increase in vulnerabilities is particularly concerning for on-premise systems, with reports indicating that Microsoft SharePoint is currently under zero-day attack. The Register reports that attackers are leveraging these unpatched vulnerabilities to gain unauthorized access.
Beyond Microsoft, concerns are rising regarding Chinese smartphone surveillance tools, with the country upgrading its capabilities. Additionally, Ring is easing its stance on anti-snooping measures, raising privacy concerns.
Security firms are also tracking a significant investment by EQT in Swiss cybersecurity firm Acronis, valuing the company at over $3.5 billion. Meanwhile, the threat of ransomware continues to evolve, with Mikko Hyppönen noting that the first corporate ransomware was ten years ago and that there's no end in sight.
Other news includes a shift in focus for Canonical, shutting down legacy chat channels like Pastebin and IRC. The audio-editing app Audacity received a visual refresh with new features. Finally, Debian voted to allow contributors to code with AI, with disclosure optional but quality mandatory.