Solved Today's (11/24/2021) Security Update?

jvickers · Nov 24, 2021

Hi, everyone.
Microsoft released a new security intelligence update today:
The latest security intelligence update is:

Version: 1.353.1525.0
Engine Version: 1.1.18700.4
Platform Version: 4.18.2110.6
Released: 11/24/2021 3:42:23 PM

Does anyone know if this is in response to the newest zero-day exploit:

All Versions of Windows Are Vulnerable to a New Zero-Day Exploit

Malware writers are already trying to take advantage of this privilege escalation vulnerability.

www.pcmag.com

If not, any clue on how to defend against the update?

TIA!

BunnyJ · Nov 24, 2021

jvickers said:
Hi, everyone.
Microsoft released a new security intelligence update today:
The latest security intelligence update is:

Version: 1.353.1525.0

Engine Version: 1.1.18700.4

Platform Version: 4.18.2110.6

Released: 11/24/2021 3:42:23 PM

Does anyone know if this is in response to the newest zero-day exploit:

All Versions of Windows Are Vulnerable to a New Zero-Day Exploit

Malware writers are already trying to take advantage of this privilege escalation vulnerability.

www.pcmag.com

If not, any clue on how to defend against the update?

TIA!

Could be. I haven't received any updates, yet. But I'm in the dev channel.

jerrypc1 · Nov 24, 2021

jvickers said:
Hi, everyone.
Microsoft released a new security intelligence update today:
The latest security intelligence update is:

Version: 1.353.1525.0

Engine Version: 1.1.18700.4

Platform Version: 4.18.2110.6

Released: 11/24/2021 3:42:23 PM

Does anyone know if this is in response to the newest zero-day exploit:

All Versions of Windows Are Vulnerable to a New Zero-Day Exploit

Malware writers are already trying to take advantage of this privilege escalation vulnerability.

www.pcmag.com

If not, any clue on how to defend against the update?

TIA!

I got the update but I haven't heard of a zero day exploit?

jvickers · Nov 24, 2021

jerrypc1 said:
I got the update but I haven't heard of a zero day exploit?

I just read about it in the PCMag article link I posted. They indicated that all Windows OSs were vulnerable, including 11.

RFS · Nov 24, 2021

I'm sure the fix will be a code change to Windows, whereas what came out today was just a Defender definition update.

jvickers · Nov 24, 2021

RFS said:
I'm sure the fix will be a code change to Windows, whereas what came out today was just a Defender definition update.

Thanks. I was curious because I received a security intelligence when I updated this morning and another just before posting this thread.

Wisewiz · Nov 24, 2021

Just got it: 1700 hours here, EST.

Wait, I never saw the 1525.0. I went from 1520.0 to 1532.0. Ha!

jvickers · Nov 24, 2021

Wisewiz said:
Just got it: 1700 hours here, EST.

View attachment 14460

Wait, I never saw the 1525.0. I went from 1520.0 to 1532.0. Ha!

I only got to savor 1525.00 for something like half a day... Not even sure what that one did.

stormy13 · Nov 24, 2021

jvickers said:
Hi, everyone.
Microsoft released a new security intelligence update today:
The latest security intelligence update is:

Version: 1.353.1525.0

Engine Version: 1.1.18700.4

Platform Version: 4.18.2110.6

Released: 11/24/2021 3:42:23 PM

Does anyone know if this is in response to the newest zero-day exploit:

All Versions of Windows Are Vulnerable to a New Zero-Day Exploit

Malware writers are already trying to take advantage of this privilege escalation vulnerability.

www.pcmag.com

If not, any clue on how to defend against the update?

TIA!

Did you even read the article you linked to?

Right now, there is no patch to fix this vulnerability and malware samples have been discovered in the wild. So it's a known vulnerability and if it's not being used already it will be pretty soon. Abdelhamid believes the only action users can take is to wait for Microsoft to release another security patch because of the complexity of the vulnerability, and "any attempt to patch the binary directly will break windows installer."

So how could todays update be in response to it?

jvickers · Nov 24, 2021

stormy13 said:
Did you even read the article you linked to?

So how could todays update be in response to it?

I did read the article. The newest patch came out after the article was out. Today's update came out after an update I received this morning, which I assume was released at 9:13PM EST last night because that's the last time I check for an update this morning when I logged onto my system. Then, this article. Then, the new update. Thus, the question. I didn't know if Microsoft was really on the ball with things.

Basically, can I assume your answer is a hard, "No"? :)

jvickers · Nov 24, 2021

And I just installed another security intelligence update. Perhaps it always updates several times a day and I just never noticed....

Wisewiz · Nov 24, 2021

Usually once a day; sometimes twice; rarely three times.

bobkn · Nov 24, 2021

I suppose that the OP is thinking of a zero day exploit. Microsoft Failed to Fix a Zero-Day and Now Every Version of Windows Is at Risk

However, I quote: "This isn’t a remote exploit though, so bad actors would need physical access to your device to carry out the attack."

Short version: the article in the link is more clickbait than not. Hackers will probably not be physically breaking into your house to take control of your PCs with this exploit.

jaree1961 · Nov 24, 2021

The security intelligence updates are typically released several times a day on no set schedule, and most PC's will update at least once a day depending on individual machine update check timing defaults ( the more the individual system checks in a day, the more often these updates will be received)

@Wisewiz is correct in saying "Usually once a day; sometimes twice; rarely three times." but it does happen if more threats are identified. :)

ThrashZone · Nov 24, 2021

Hi,
Better watch out the bugger man coming to get you lol

Mystere · Nov 24, 2021

Defender updates happen all the time, usually more than once per day.. This is nothing different, and there will be more tomorrow and the day after that, it's just anti-virus signature updates.

jvickers · Nov 24, 2021

I'm just going to chalk the four updates today up to MS being active. Thanks, everyone.

@ThrashZone - The bugger man? No worries. I have ADT.

jerrypc1 · Nov 25, 2021

jaree1961 said:
The security intelligence updates are typically released several times a day on no set schedule, and most PC's will update at least once a day depending on individual machine update check timing defaults ( the more the individual system checks in a day, the more often these updates will be received)

@Wisewiz is correct in saying "Usually once a day; sometimes twice; rarely three times." but it does happen if more threats are identified. :)

I always get at least 2 security updates a day.I guess it's because I check for updates so often

jimbo45 · Nov 25, 2021

jvickers said:
I just read about it in the PCMag article link I posted. They indicated that all Windows OSs were vulnerable, including 11.

Hi there
given the right circumstances ALL OS'es are vulnerable -- the degree of vulnerability varies from trivial to serious depending on so many factors.

These days though on typical HOME computers you are infinitely more likely to get scammed - especially if you are one of those who gives out loads of info on social media sites than to suffer any sort of computer hack or malware intrusion. Current WD is more than adequate to protect pretty well all HOME type machines for probably around 99.9% of typical Windows users. So keep security up to date but PLEASE don't get paranoid about it, and just use the Internet sensibly.

Cheers
jimbo

RJARRRPCGP · Nov 26, 2021

bobkn said:
I suppose that the OP is thinking of a zero day exploit. Microsoft Failed to Fix a Zero-Day and Now Every Version of Windows Is at Risk

However, I quote: "This isn’t a remote exploit though, so bad actors would need physical access to your device to carry out the attack."

Short version: the article in the link is more clickbait than not. Hackers will probably not be physically breaking into your house to take control of your PCs with this exploit.

This doesn't look critical like the CSME exploit that affects 9th-gen Core i and earlier Intel processors. I actually got rid of a 9th-gen Core i laptop, last year, because there wasn't a CSME update available! That one is a stark contrast to this one. That CSME exploit, OTOH, is remote-code-execution!

This one isn't one of those "everybody needs to panic" bugs. Honestly much more worried about that pre-10th-gen CSME bug.

Solved Today's (11/24/2021) Security Update?

The lunatics have taken over the asylum

My Computers

Python Programmer

My Computer

Well-known member

My Computers

The lunatics have taken over the asylum

My Computers

Well-known member

My Computers

The lunatics have taken over the asylum

My Computers

𝐒𝐩𝐞𝐚𝐤𝐬 𝐀𝐧𝐜𝐢𝐞𝐧𝐭 𝐆𝐞𝐞𝐤

My Computers

The lunatics have taken over the asylum

My Computers

Well-known member

My Computer

The lunatics have taken over the asylum

My Computers

The lunatics have taken over the asylum

My Computers

𝐒𝐩𝐞𝐚𝐤𝐬 𝐀𝐧𝐜𝐢𝐞𝐧𝐭 𝐆𝐞𝐞𝐤

My Computers

Well-known member

My Computers

Well-known member

My Computers

Minor Threat

My Computer

Well-known member

My Computer

The lunatics have taken over the asylum

My Computers

Well-known member

My Computers

Well-known member

My Computer

Well-known member

My Computers

Similar threads