Download UpdateStar News | Microsoft April 2024 Patch Day

Microsoft has issued important security updates for Bitlocker, Office and Windows Defender, among others, as attackers have begun exploiting two vulnerabilities.

Users of Microsoft software should verify that Windows Update is active and that all new security updates are installed. Without these updates, systems can be at risk and attackers can potentially gain full control of PCs through malicious code.

Current attacks on Windows

A significant vulnerability (CVE-2024-29988 “high”) has been targeted in the Windows SmartScreen filter, a security feature that checks the credibility of downloaded files using the Mark-of-the-Web (MoTW) tag. Despite this security measure, attackers have managed to bypass the filter in active attacks. Users, believing that their downloads are verified by SmartScreen, unwittingly run these compromised files and install Trojans inadvertently. Although this type of attack requires users to open the infected file, its feasibility should not be underestimated. Currently, both Windows and Windows Server editions are vulnerable.

Another exploited vulnerability (CVE-2024-26234 “medium”) affects current editions of Windows Desktop and Windows Server. It involves a proxy driver spoofing attack. Specific details about the attack methods and potential consequences have not been provided by Microsoft.

Additional threats

Microsoft has identified three vulnerabilities in Defender for IoT as critical (CVE-2024-21322 “high”, CVE-2024-21323 “high”, CVE-2024-29053 “high”) where attackers could perform undisclosed methods to launch malicious code attack.

In Azure, a high-risk vulnerability (CVE-202429063 High) in an AI search function allows attackers unauthorized access to information. Furthermore, a bug in Azure CycleCloud (CVE-2024-29993 High) may enable attackers to gain elevated user rights.

For a comprehensive list of vulnerabilities and updates, users are encouraged to see Microsoft’s Security Update Guide.