Windows - Security Master

15Oct 2023 by webmaster No Comments

How Do I Get Microsoft Copilot on Windows 11?

Windows

Microsoft recently announced the general availability of Microsoft Copilot, its AI-powered digital assistant. Copilot aims to boost productivity by helping users complete tasks, generate content, and get insights across applications and devices. Copilot is currently available in different forms across Microsoft 365, Bing, Windows 11, and Edge. While it was initially limited to select testers, Microsoft has now started rolling out Copilot more broadly. So how do you get Copilot on your Windows 11 device? Let’s take a look at what Copilot is, its availability, pricing, and how to enable it on Windows 11. Microsoft first previewed Copilot at its Build developer conference earlier this year. It showed how Copilot can work alongside Office apps like Word, Outlook, and Excel to help users write emails, generate summaries, and analyze data.…

14Sep 2023 by webmaster No Comments

How to Secure Your Outlook from CVE-2023-23397- A Critical Elevation of Privilege Vulnerability in Outlook?

Mobile, Windows

It’s been a quarter now, but this critical Outlook vulnerability is still one of the hot topics in the security world. Upon public this flaw, there were many security firms, researchers, and threat hunters working on this Outlook vulnerability. Your guess is correct. We are talking about the Critical Microsoft Outlook vulnerability which is being tracked under the CVE ID- CVE-2023-23397. A vulnerability that could be easily exploitable by sending an Outlook message or calendar. Although it has been several weeks now, we still urge all Outlook users to secure your Outlook from CVE-2023-23397; successful exploitation of this vulnerability can result in unauthorized access to an organization’s environment by triggering a Net-NTLMv2 hash leak. Let’s understand some technical details about the CVE-2023-23397 vulnerability like, what is CVE-2023-23397, how it works,…

13Sep 2023 by webmaster No Comments

How to Fix CVE-2023-20238- An Authentication Bypass Vulnerability in Cisco BroadWorks?

Windows

On September 6th, 2023, Cisco disclosed an authentication bypass vulnerability in its Cisco BroadWorks products. This vulnerability tracked as CVE-2023-20238, has a CVSS score of 10.0 (Critical). It allows an unauthenticated, remote attacker to forge credentials and gain unauthorized access to affected Cisco BroadWorks systems. This could enable the attacker to commit serious issues like toll fraud, view confidential data, modify customer settings, and more. Users of affected Cisco BroadWorks Platforms should urgently fix this vulnerability by upgrading to a patched release. We published this blog post to let our readers know about this vulnerability. In this blog post, we will cover the details of CVE-2023-20238, affected products, and finally, how to fix CVE-2023-20238, an Authentication Bypass Vulnerability in Cisco BroadWorks. A Short Introduction to Cisco BroadWorks Application Delivery Platform and Xtended Services Platform…

13Sep 2023 by webmaster No Comments

How to Analyze Windows Executable Files Using PEStudio?

Windows

Windows has been the most widely used operating system for several decades. However, it’s more prone to malware infection too. Undeniably, most malware authors target Windows platforms more than any other platforms. It’s the prime responsible for Windows machine owners to keep their Windows machines safe from nasty malware programs. Well, we have been keep discussing the safety of Windows and other platforms on thesecmaster.com several times. We keep doing this as much as we can. In this post, we will be covering another unique topic, how to analyze Windows executable files using PEStudio. PEStudio is a popular tool used by malware analysts and reverse engineers to analyze and detect anomalies in Windows portable executable (PE) files like EXEs and DLLs. This comprehensive guide will explain what PEStudio is, how…

13Sep 2023 by webmaster No Comments

Step-by-Step Guide to Setup LocalGPT on Your Windows PC

Windows

The field of artificial intelligence (AI) has seen monumental advances in recent years, largely driven by the emergence of large language models (LLMs). LLMs trained on vast datasets, are capable of working like humans, at some point in time, a way better than humans like generate remarkably human-like text, images, calculations, and many more. In essence, these LLMs are the actual brains of AI applications today. However, the broad deployment of public LLMs has also raised valid concerns about data privacy, security, reliability, and cost. As AI permeates critical domains like healthcare, finance and more, transmitting sensitive data to public cloud APIs can expose users to unprecedented risks. Dependency on external services also increases vulnerabilities to outages, while usage-based pricing limits widespread adoption. This underscores the need for AI solutions that run…

13Sep 2023 by webmaster No Comments

Step-by-Step Guide to Setup Pytorch for Your GPU on Windows 10/11

Windows

In this competitive world of technology, Machine Learning and Artificial Intelligence technologies have emerged as a breakthrough for developing advanced AI applications like image recognition, natural language processing, speech translation, and more. However, developing such AI-powered applications would require massive amounts of computational power far beyond the capabilities of CPUs (Central Processing Units). That’s because CPUs come with very few hand-countable cores and threads. So, CPUs can only process a few threads at a time, which becomes a bottleneck for the highly parallelizable computations required for deep learning algorithms. This gave rise to the use of GPUs (Graphics Processing Units), which shipped with thousands of cores and can handle thousands of threads simultaneously and are designed for mathematically-intensive tasks like real-time 3D graphics rendering, crypto mining, deep learning where a large number of mathematical…

23Aug 2023 by webmaster No Comments

What is There in The Mandiant’s Defender’s Advantage Cyber Snapshot Report- Issue 3

Network Security, Pen Testing, Windows

Mandiant recently published the latest edition of The Defender’s Advantage Cyber Snapshot report. This recurring report aims to arm cybersecurity teams with practical insights from Mandiant’s frontline experience responding to breaches worldwide. The goal is to help defenders maintain their advantage against constantly evolving threats. This new report provides guidance across five key topics organizations are focusing on: moving beyond traditional passwords to more secure authentication methods, navigating the cyber insurance process, detecting attacks by understanding adversary techniques, testing defenses proactively, planning effective incident response, and implementing new security guidelines for critical infrastructure. By sharing challenges and recommendations learned from real-world attacks, the report enables security leaders to make more informed decisions. Organizations can leverage The Defender’s Advantage findings to continuously strengthen cyber defenses. The report is one way Mandiant supports…

17Jul 2023 by webmaster No Comments

Breaking Down the Latest July 2023 Patch Tuesday Report

Windows

The July 2023 Patch Tuesday report has been released, providing critical information for organizations and individuals to address security vulnerabilities and software updates. This monthly event plays a crucial role in maintaining the security and stability of the Windows operating system and various other software products people rely on. In this article, we’ll break down the key highlights of the July 2023 Patch Tuesday report, focusing on the most pressing concerns for users and administrators. Notably, Microsoft has released fixes for 132 vulnerabilities in July 2023 Patch Tuesday report, out of which 9 were rated Critical. Microsoft also warned about the active exploitation of 6 vulnerabilities. Again, as with other Patch Tuesday reports, Remote Code Execution (RCE) vulnerability has topped the list with 37 occurrences in the list of vulnerabilities.…

27Jun 2023 by Ernest Haberli Jr. No Comments

Breaking Down the Latest April 2023 Patch Tuesday Report

Application Security, Application/Appliance, Cloud & OS Platforms, Cyber Attacks, Cyber Security, Threats & Vulnerabilities, Windows

Microsoft releases security updates every month to address vulnerabilities in its software products. These updates are critical to ensuring the security of computer systems and networks. The April 2023 Patch Tuesday Report is important as it fixes various security vulnerabilities discovered in Microsoft’s software products. This blog will provide an overview of the latest April 2023 Patch Tuesday report, highlighting the significant vulnerabilities and their severity levels. Microsoft Patch Tuesday April 2023 Report Summary Microsoft released the April 2023 Patch Tuesday. Let’s see the summary of the report: The update addresses 114 vulnerabilities, 7 are classified as critical, and 90 are classified as important. The April 2023 update includes fixes for one zero-day vulnerabilities, which are exploited in the wild. All 9 Critical vulnerabilities are Remote Code Execution vulnerabilities. The products covered…

27Jun 2023 by Ernest Haberli Jr. No Comments

What are Micropatches? Why Do We Need Micropatching?

Application Security, Application/Appliance, Cloud & OS Platforms, Cyber Security, Network Security, Windows

Various known but unpatched vulnerabilities pose significant risks to organizations. However, these organizations use defensive tools and technologies to mitigate those risks but continue to use software containing potential vulnerabilities. It leaves those systems at a continuous risk because once a vulnerability is made public, a malicious link or code to exploit it generally appears within 48 hours. The National Vulnerability Database presented 22,000 new vulnerabilities recently in 2021. The primary issue is the time the organization needs (almost 60.3 days) to resolve a single vulnerability. This means the attackers get 60 days to exploit the vulnerability before it gets fixed. Therefore, it is essential to micropatch the vulnerability as soon as it is detected. Micropatching is the practical solution so far! But what are micropatches? This post will help you understand a micropatch, why it…