03/01/2024

The Google and Microsoft Security Updates You Need Right Now

Here are critical updates you may need

It’s the shortest month of the year, but February updates have been hitting the ground at lightning speed, with Microsoft, Ivanti and Fortinet all patching zero-day flaws in their products. Zoom and Cisco also just squashed serious bugs, so it’s a good idea to check your software versions and update as soon as possible.

Here’s what you need to know about the patches released in February.

Microsoft

Microsoft’s February Patch Tuesday saw the software giant issue 73 patches, including two fixes for flaws already being used in attacks. The first is CVE-2024-21412, an Internet Shortcut Files vulnerability with a CVSS score of 8.1. To exploit the vulnerability, an unauthenticated attacker would send the targeted user a file designed to bypass security checks. However, an adversary would need to convince someone to click on the file link, Microsoft said.

Please select this link to read the complete article from WIRED.