Tag Search: MSRC alerts
Posted on Tuesday November 12, 2019 | MSRC alerts
We have released the November security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to turn on automatic updates. More information about this month's security updates can be found in the Security Update Guide. As a reminder, Windows 7 and Windows Server 2008 R2 will be out of...
Posted on Thursday November 07, 2019 | MSRC alerts
This Saturday 9th of November, there will be a keynote from Microsoft engineers Ryan Levick and Sebastian Fernandez at RustFest Barcelona. They will be talking about why Microsoft is exploring Rust adoption, some of the challenges we've faced in this process, and the future of Rust adoption in Microsoft. If you want to talk with...
Posted on Wednesday November 06, 2019 | MSRC alerts
In two previous blog posts ( part 1 and part 2), we talked about using Semmle QL in C and C++ codebases to find vulnerabilities such as integer overflow, path traversal, and those leading to memory corruption. In this post, we will explore applying Semmle QL to web security by hunting for one of the...
Posted on Friday October 25, 2019 | MSRC alerts
We hope you enjoyed the first day of our BlueHat briefings and the Bytes of BlueHat reception in our glamping tent (complete with toasted marshmallows). Yesterday, we learned a lot about how XboxOne hardware security has advanced the state of hardware security elsewhere, we heard some surprising correlations between vuln severity, age, and time to...
Posted on Thursday October 24, 2019 | MSRC alerts
We've finished two incredible days of security trainings at the Living Computer Museum in Seattle. Now it's time for the second part of BlueHat: the briefings at ShowBox SoDo. We've got a big day planned, so head on down. Please join us for breakfast (we have doughnuts! and bacon! and cereal!) when the doors open...
Posted on Wednesday October 23, 2019 | MSRC alerts
Sharing the latest updates to the Microsoft Identity Bounty Program. The post Microsoft Identity Bounty Improvements appeared first on Microsoft Security Response Center.