Connect with us

Tech

Microsoft And CISA Issue Critical New Alert, Windows Attacks Confirmed

Published

on


Windows users are no strangers to critical security updates and urgent warnings urging them to act now. Given the security footprint of Windows, in all its various forms, this is hardly a surprise: cybercriminals look for the route of least resistance that can impact the largest audience. The latest Microsoft warning, echoed by America’s Cyber Defense Agency, the Cybersecurity and Infrastructure Security Agency, if you prefer to be formal, must not be ignored. As two zero-day vulnerabilities impacting Windows users have been confirmed as under active exploitation by attackers, you must update. And update now.

ForbesFBI Issues Photo Attack Warning For Facebook, LinkedIn And X Users

Microsoft Windows Zero-Days — What You Need To Know About CVE-2025-6218 And CVE-2025-62221

What’s another Windows vulnerability, or two, in the overall scheme of things? After all, there were a confirmed 1,360 Microsoft security vulnerabilities in 2024 and, sad to say, this year doesn’t look like it’s going to be any better. But these vulnerabilities are of the zero-day variety, and that changes everything. Forget the Windows Update failure warnings, these are security updates you really need to install as soon as possible.

Yes, I’m talking about the December Microsoft ‘Patch Tuesday’ security update rollout, which is of particular importance to Windows users thanks to the actively exploited CVE-2025-62221 zero-day vulnerability.

CVE-2025-62221 is listed as a Windows cloud files mini-filter driver escalation-of-privilege vulnerability. Although it only scores a high severity rating of 7.8 using the Common Vulnerability Scoring System, it is critical that you take it seriously and update now.

ForbesGmail Account Lockout Hack Has No Fix — Google ‘Looking Into’ It

“This isn’t the first time we have seen this component being actively exploited in recent years, with several other CVEs affecting this component,”Kev Breen, the senior director of cyber threat research at Immersive, said, but the fact that Microsoft has not provided detail on how it is being exploited, or any indicators of compromise for that matter, makes it “harder for defenders to start proactive threat hunting.” And that’s a problem, because a hacker who has already gained code execution on the target host can gain SYSTEM access to enable “disabling any security logging and endpoint detection, dumping more credentials using tools like Mimikatz that could then enable the compromise of domain accounts and lateral movement.” For all these reasons, Breen warned, “this is a critical vulnerability to patch to limit an attacker’s capabilities.”

CVE-2025-6218, meanwhile, is a RARLAB WinRAR directory traversal remote code execution vulnerability, originally disclosed by the Trend Micro Zero Day Initiative team way back in July. Only impacting Windows builds of the application, multiple reports that “the vulnerability has been exploited by two different threat actors,” has now led to CISA adding it to the Known Exploited Vulnerabilities catalog and urging users to update now.

“This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR,” Trend Micro ZDI said, adding that users must visit a malicious page or open a malicious file for successful exploitation. The update to patch this zero-day vulnerability was released in June, and the latest version is available here if you have not already installed it.

The takeaway is simple: follow the Microsoft and CISA guidance, don’t delay, update today.

ForbesGoogle And The FBI Warn Of Dangerous Hack Attacks — And Fight Back



Source link

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Tech

Jazz and Ericsson Sign Strategic Microwave Frame Contract to Enhance Network Infrastructure

Published

on



Jazz, Pakistan’s leading digital operator, and Ericsson (NASDAQ: ERIC), have signed a strategic Microwave Frame Contract to strengthen Jazz’s network backbone, aligning with the operator’s ServiceCo vision of providing advanced digital experiences and nationwide connectivity.

Leveraging Ericsson’s cutting-edge MINI-LINK solutions from the Ericsson Transport portfolio, the Microwave Frame Contract aims to support Jazz in expanding its network capacity, boosting its network reliability and improving its users’ experiences, in alignment with the ambitions of Digital Pakistan Policy.

Under the agreement, Ericsson will supply its MINI-LINK solutions and services to Jazz over the next five years, enabling scalability and efficient network modernization. The deployment will also prepare Jazz’s infrastructure for future 4G expansion and seamless transition to 5G technology, ensuring that millions of customers across both urban and underserved rural areas benefit from faster speeds, improved connectivity, and advanced digital solutions.

Khalid Shehzad, Chief Technology Officer at Jazz, says: “This Microwave Frame Contract with Ericsson is an important step in strengthening Jazz’s network backbone and advancing our ServiceCo vision. By integrating Ericsson’s latest microwave solutions, we will enhance capacity, improve reliability, and broaden digital access for communities across Pakistan, enabling better experiences and greater opportunities in education, health, finance, commerce, and beyond.”

Aamir Ahsan Khan, President of Ericsson Pakistan, says: “Our latest partnership with Jazz builds on a decades-long relationship focused on digital transformation and innovation. This Microwave Frame Contract reflects our shared vision of ensuring scalable, resilient, and future-ready networks that contribute to Pakistan’s socio-economic and digital advancement. We are honored to contribute to Jazz’s mission of empowering millions of people and businesses through advanced connectivity solutions.”

Ericsson’s latest microwave solutions, like the MINI-LINK 6355, provide high-capacity, multi-band capabilities and a compact design that can support frequency combinations and configurations. Delivering flexibility, performance enhancements, and scalability for modern networks, the solutions cater to high-performance backhaul demands while ensuring efficient deployment in diverse environments.

The deployment will also enable digital inclusion by expanding connectivity to remote and rural areas where fiber is difficult to deploy, ensuring reliable access to connectivity and Jazz’s suite of essential digital services. Moreover, it can also contribute to Pakistan’s economic growth by empowering small and medium enterprises (SMEs), startups and digital trade by providing a reliable telecom infrastructure.

Ericsson and Jazz have cultivated a strong partnership over two decades, marked by landmark collaborations underscoring a shared commitment to innovation and excellence in Pakistan’s telecom sector. Together, the partners have enhanced the telecom infrastructure in the country and fostered digital advancement, paving the way for stronger connectivity, improved customer experiences, and long-term digital resilience for millions of Pakistanis.





Source link

Continue Reading

Tech

Ignite Wants to Train 2,000 IT Graduates in Coding And Other High-Demand Skills

Published

on



Ignite, the training and capacity development wing of the Ministry of IT and Telecommunication, has announced a plan to upskill 2,000 IT graduates through its new “Code4AI-North Region Program.” The initiative aims to provide short-term, intensive, hands-on training in highly demanded coding languages to help participants develop practical and job-ready skills.

The Code4AI-North Region Program is designed to expand Pakistan’s pool of skilled programmers by focusing on leading programming languages that support current and future industry needs. For this purpose, Ignite has identified three in-demand technologies: Python, JavaScript Fullstack, and Java with Angular or React. These languages are considered well-suited to meet market demand, especially in areas related to artificial intelligence, quantum computing, and blockchain.

Training will be conducted in major northern cities, and selected companies will execute the program under the requirements outlined in the RFP. Ignite has mandated that the intensive, hands-on approach must equip young Pakistanis with a clear career path in programming. The organization aims to hire qualified local firms, preferably in consortium with reputable local or international partners, to deliver the training.

The program is open to graduates or final-year students enrolled in undergraduate programs in computer science, software engineering, information technology, ICT engineering, technology management, mathematics, statistics, or other relevant fields. Ignite will select training companies to provide the courses in Islamabad, Peshawar, Abbottabad, and Rawalpindi.

Pakistan’s population has crossed 240 million, with nearly two-thirds under the age of 29. Around 90 million people in the country have active internet access. Each year, Pakistan produces more than 40,000 IT professionals from over 230 universities and degree-awarding institutions. However, out of approximately 30,000 graduates entering the job market annually, only an estimated 10 percent secure employment in the IT sector. The industry contributes about seven percent to Pakistan’s GDP and supports hundreds of thousands of professionals across banking, telecommunications, healthcare, and education.

According to data from the State Bank of Pakistan, IT exports increased by 47.4 percent in fiscal year 2020–21, reaching $2.1 billion for the first time in the country’s history, compared to $1.44 billion in 2019–20. In fiscal year 2022, Pakistan’s IT sector posted record remittances of $2.616 billion. The government has set a target of $5 billion for fiscal year 2023 and plans further expansion of the industry in the coming years.





Source link

Continue Reading

Tech

ACME Telecom Secures LDI License in Pakistan to Boost Telecommunication Infrastructure

Published

on



Acme Telecom (Pvt.) Ltd., has achieved a significant milestone by obtaining a Long Distance International (LDI) License from the Pakistan Telecommunication Authority (PTA). The license was officially awarded at a ceremony held at PTA headquarters, marking a major expansion of the company’s footprint in global services landscape.

With the acquisition of the LDI license, Acme Telecom is aiming to invest in International digital ecosystem to position Pakistan as a regional connectivity hub and to enhance national connectivity infrastructure, deliver faster and more reliable communication solutions to the nation.

Representing Acme Telecom at the licensing ceremony, Syed Zeeshan Hussain, CEO of Acme Telecom, shared his sentiments over the company’s new chapter. Speaking about the achievement, he stated that: “This license represents a transformative moment for Acme Telecom as we expand our infrastructure capabilities and strengthen Pakistan’s position in the regional telecommunications landscape. Beyond technology, Acme Telecom aims to play an imperative role in Pakistan’s socio-economic progress. The LDI license directs us towards more ventures which will result in creation of new jobs, foster IT and telecom-driven opportunities, and contribute to stronger economic stability by encouraging investment and innovation within the sector.

“This milestone is not just about Acme Telecom, – It is about Pakistan’s digital future. By strengthening our infrastructure and expanding our capabilities, we are helping build a more resilient, technologically empowered, and globally competitive nation,” he added.





Source link

Continue Reading

Trending