Patch Now: Critical Windows Kerberos Bug Bypasses Microsoft Security
ID: cad63cee-4aa3-5521-88b1-5d761b2ad4b6
STIX ID: report--cad63cee-4aa3-5521-88b1-5d761b2ad4b6
Feed Name: Dark Reading
Threat Score
Microsoft's January 2024 Patch Tuesday addresses 48 CVEs, including two critical flaws — a Kerberos authentication bypass (CVE-2024-20674) and a Hyper‑V remote code execution issue (CVE-2024-20700) — plus multiple remote code execution and privilege escalation vulnerabilities that Microsoft and security researchers flag as likely to be exploited; no zero‑day exploits in the wild were reported, but administrators are urged to prioritize patches for Kerberos, Hyper‑V, RDP, SharePoint, and Cloud Files-related issues.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.