Microsoft<\/strong> at present launched updates to repair greater than 100 safety flaws in its Home windows<\/strong> working techniques and different software program. At the very least 13 of the bugs obtained Microsoft\u2019s most-dire \u201cimportant\u201d score, which means they may very well be abused by malware or malcontents to achieve distant entry to a Home windows system with little or no assist from customers.<\/p>\n

$\"\"$ <\/p>\n

August\u2019s patch batch from Redmond contains an replace for CVE-2025-53786<\/a>, a vulnerability that permits an attacker to pivot from a compromised Microsoft Trade Server<\/strong> immediately into a company\u2019s cloud setting, doubtlessly gaining management over Trade On-line<\/strong> and different linked Microsoft Workplace 365<\/strong> providers. Microsoft first warned about this bug on Aug. 6, saying it impacts Trade Server 2016<\/strong> and Trade Server 2019<\/strong>, in addition to its flagship Trade Server Subscription Version<\/strong>.<\/p>\n

Ben McCarthy<\/strong>, lead cyber safety engineer at Immersive<\/strong>, mentioned a tough search reveals roughly 29,000 Trade servers publicly going through on the web which are susceptible to this difficulty, with lots of them prone to have even older vulnerabilities.<\/p>\n

McCarthy mentioned the repair for CVE-2025-53786 requires extra than simply putting in a patch, equivalent to following Microsoft\u2019s guide directions for making a devoted service to supervise and lock down the hybrid connection.<\/p>\n

\u201cIn impact, this vulnerability turns a big on-premise Trade breach right into a full-blown, difficult-to-detect cloud compromise with successfully residing off the land strategies that are at all times tougher to detect for defensive groups,\u201d McCarthy mentioned.<\/p>\n

CVE-2025-53779<\/a> is a weak point within the Home windows Kerberos<\/strong> authentication system that permits an unauthenticated attacker to achieve area administrator privileges. Microsoft credit the invention of the flaw to Akamai researcher Yuval Gordon<\/strong>, who dubbed it \u201cBadSuccessor<\/strong>\u201d in a Could 2025 weblog publish<\/a>. The assault exploits a weak point in \u201cdelegated Managed Service Account\u201d or dMSA \u2014 a function that was launched in Home windows Server 2025<\/strong>.<\/p>\n

A number of the important flaws addressed this month with the best severity (between 9.0 and 9.9 CVSS scores) embrace a distant code execution bug within the Home windows GDI+<\/strong> part that handles graphics rendering (CVE-2025-53766<\/a>) and CVE-2025-50165<\/a>, one other graphics rendering weak point. One other important patch entails CVE-2025-53733<\/a>, a vulnerability in Microsoft Phrase<\/strong> that may be exploited with out consumer interplay and triggered by way of the Preview Pane.<\/p>\n

One last important bug tackled this month deserves consideration: CVE-2025-53778<\/a>, a bug in Home windows NTLM<\/strong>, a core perform of how Home windows techniques deal with community authentication. In line with Microsoft, the flaw may enable an attacker with low-level community entry and fundamental consumer privileges to use NTLM and elevate to SYSTEM-level entry \u2014 the best stage of privilege in Home windows. Microsoft charges the exploitation of this bug as \u201cextra probably,\u201d though there isn’t any proof the vulnerability is being exploited for the time being.<\/p>\n

Be happy to holler within the feedback in case you expertise issues putting in any of those updates. As ever, the SANS Web Storm Middle<\/strong> has its helpful breakdown<\/a> of the Microsoft patches listed by severity and CVSS rating, and AskWoody.com<\/a> is protecting a watch out for Home windows patches which will trigger issues for enterprises and finish customers.<\/p>\n

GOOD MIGRATIONS<\/h2>\n
Home windows 10 customers on the market probably have seen by now that Microsoft actually desires you to improve to Home windows 11. The reason being that after the Patch Tuesday on October 14, 2025, Microsoft will cease transport free safety updates for Home windows 10<\/strong> computer systems. The difficulty is, many PCs working Home windows 10 don’t meet the {hardware} specs required to put in Home windows 11\u00a0<\/strong>(or they do, however simply barely).<\/p>\n
If the expertise with Home windows XP is any indicator, many of those older computer systems will wind up in landfills or else might be left working in an unpatched state. But when your Home windows 10 PC doesn\u2019t have the {hardware} chops to run Home windows 11 and also you\u2019d nonetheless wish to get some use out of it safely, contemplate putting in a newbie-friendly model of Linux, like Linux Mint<\/strong>.<\/p>\n
Like most trendy Linux variations, Mint will run on something with a 64-bit CPU that has at the least 2GB of reminiscence, though 4GB is really helpful. In different phrases, it is going to run on virtually any laptop produced within the final decade.<\/p>\n
There are a lot of variations of Linux out there, however Linux Mint is prone to be essentially the most intuitive interface for normal Home windows customers, and it’s largely configurable with none fuss on the text-only command-line immediate. Mint and different flavors of Linux include LibreOffice<\/strong>, which is an open supply suite of instruments that features functions much like Microsoft Workplace, and it might open, edit and save paperwork as Microsoft Workplace recordsdata.<\/p>\n
In case you\u2019d desire to present Linux a check drive earlier than putting in it on a Home windows PC, you possibly can at all times simply obtain it to a detachable USB drive. From there, reboot the pc (with the detachable drive plugged in) and choose the choice at startup to run the working system from the exterior USB drive. In case you don\u2019t see an choice for that after restarting, strive restarting once more and hitting the F8 button, which ought to open an inventory of bootable drives. Right here\u2019s a reasonably thorough tutorial<\/a> that walks by way of precisely easy methods to do all this.<\/p>\n
And if that is your first time attempting out Linux, loosen up and have enjoyable: The great factor a couple of \u201cstay\u201d model of Linux (because it\u2019s referred to as when the working system is run from a detachable drive equivalent to a CD or a USB stick) is that none of your modifications persist after a reboot. Even in case you one way or the other handle to interrupt one thing, a restart will return the system again to its unique state.<\/p>\n<\/p><\/div>\n\n","protected":false},"excerpt":{"rendered":"
Microsoft at present launched updates to repair greater than 100 safety flaws in its Home windows working techniques and different software program. At the very least 13 of the bugs obtained Microsoft\u2019s most-dire \u201cimportant\u201d score, which means they may very well be abused by malware or malcontents to achieve distant entry to a Home windows […]<\/p>\n","protected":false},"author":2,"featured_media":5553,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[58],"tags":[4205,406,262,618,1077,211,1078],"class_list":["post-5551","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-august","tag-edition","tag-krebs","tag-microsoft","tag-patch","tag-security","tag-tuesday"],"_links":{"self":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/5551","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5551"}],"version-history":[{"count":1,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/5551\/revisions"}],"predecessor-version":[{"id":5552,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/5551\/revisions\/5552"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/media\/5553"}],"wp:attachment":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5551"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5551"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5551"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}