Microsoft has released a substantial set of patches in its February 2024 Patch Tuesday. This update is particularly significant as it addresses a total of 73 vulnerabilities, which includes two zero-day exploits that have been detected in active use by cyber criminals. Among the vulnerabilities patched, five have been classified as critical due to their potential to cause serious harm, such as denial of service, remote code execution, information disclosure and elevation of privileges. Read on for more details.  

What are the zero-days mentioned in Microsoft’s February 2024 Patch Tuesday?  

The two zero-day vulnerabilities that have been actively exploited are particularly concerning: 

• CVE-2024-21351: This is a Windows SmartScreen bypass vulnerability. SmartScreen is designed to warn users about running unrecognized applications that could potentially be harmful. The exploitation of this vulnerability could lead to unauthorized data exposure or render systems unavailable. 

• CVE-2024-21412: This vulnerability is a security feature bypass flaw. It allows attackers to carry out their attacks without triggering the security checks that are in place to prevent such incidents. 

The implications of these vulnerabilities are severe, as they can be used to compromise user data, disrupt business operations and gain unauthorized access to sensitive information. The complete list of resolved vulnerabilities in the February 2024 Patch Tuesday updates can be viewed in the full report. 

What is Nuspire doing? 

In response to these updates, Nuspire has taken immediate action by applying the patches as recommended by the vendor. In addition to patching, Nuspire’s security team is actively threat hunting within client environments to detect any signs of compromise that might indicate the exploitation of these vulnerabilities. 

What should I do? 

It is crucial for organizations to take proactive measures to protect their systems and data from these vulnerabilities. Here are the recommended steps: 

• Prioritize Patching: Given the active exploitation of the two zero-days, organizations should prioritize patching these vulnerabilities. The sooner these patches are applied, the less window of opportunity there is for attackers to exploit them. 
• Review CVE Details: Organizations should review the individual CVEs released by Microsoft to understand the vulnerabilities in detail. This can provide insights into the potential impact and the systems that may be at risk. 
• Consider Workarounds: If immediate patching is not feasible, it is important to review the workarounds or mitigations provided by Microsoft for each vulnerability. These can serve as temporary measures to reduce the risk until patches can be applied. 

This Patch Tuesday serves as a reminder of the importance of regular patch management as part of an organization’s cybersecurity strategy. Vulnerabilities are a fact of life in the digital world, and the speed at which they are addressed can make the difference between a secure system and a compromised one. Organizations should have a structured process for the timely application of patches, regular vulnerability assessments and continuous monitoring for new threats. By staying vigilant and responsive to these updates, organizations can significantly reduce their risk profile and ensure the security and integrity of their systems and data. 

The post Microsoft’s February 2024 Patch Tuesday Addresses 2 Zero-Days and 73 Vulnerabilities appeared first on Nuspire.

*** This is a Security Bloggers Network syndicated blog from Nuspire authored by Team Nuspire. Read the original post at: https://www.nuspire.com/blog/microsofts-february-2024-patch-tuesday-addresses-2-zero-days-and-73-vulnerabilities/