Microsoft issues official PrintNightmare fix in latest Patch Tuesday blast
Many of the patched vulnerabilities are being exploited in the wild
When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.
Microsoft’s July Patch Tuesday release plugs over 100 vulnerabilities, with several marked as critical, including a fix for thePrintNightmare print spooler flawthat existed in virtually all versions of Windows.
This Patch Tuesday comes just days after Microsoft put out theout-of-band updatesto address PrintNightmare, which surfaced not after the release oflast month’s Patch Tuesday.
“Systems with misconfigurations will continue to be at risk of exploitation, even after the latest patch has been applied. PrintNightmare was a highly serious issue that further underscores the importance of marrying detection and remediation,” warns Bharat Jogi, Senior Manager, Vulnerability and Threat Research, Qualys in an email toTechRadar Pro.
We’re looking at how our readers use VPNs with streaming sites like Netflix so we can improve our content and offer better advice. This survey won’t take more than 60 seconds of your time, and you can also choose to enter the prize draw to win a $100 Amazon voucher or one of five 1-year ExpressVPN subscriptions.
Click here to start the survey in a new window«
Elsewhere in Patch Tuesday
With patches to address ten critical vulnerabilities, four of which are being exploited in the wild, the July Patch Tuesday that fixes a total of 117 vulnerabilities is a pretty significant one,cybersecurityexperts tellTechRadar Pro.
Scrolling through the list of addressed vulnerabilities, Kevin Breen, Director of Cyber Threat Research, Immersive Labs tells us that he thinks the scripting engine memory corruption attack, tracked as CVE-2021-34448, is perhaps the most serious.
“It [the vulnerability] is elegant in its simplicity, letting an attacker gain remote code execution just by getting the target to visit a domain. With malicious, yet professional looking, domains carrying validTLS certificatesa regular feature nowadays, seamless compromise would be a trivial matter. Victims could even be attacked by sending .js or .hta files in targeted phishing emails,” says Breen.
Chris Goettl, Ivanti’s Senior Director of Product Management, has his eyes on the fixes forMicrosoft Exchange, including the two publicly disclosed vulnerabilities and CVE-2021-31206 which he tells us was disclosed as part of the Pwn2Own contest a few months back.
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
“So while Exchange has had a short reprieve after some hard back-to-back months of updates, this one should be investigated and resolved as soon as practical,” suggests Goettl.
With almost two decades of writing and reporting on Linux, Mayank Sharma would like everyone to think he’sTechRadar Pro’sexpert on the topic. Of course, he’s just as interested in other computing topics, particularly cybersecurity, cloud, containers, and coding.
This new phishing strategy utilizes GitHub comments to distribute malware
Should your VPN always be on?
5 must-have Android apps
