The other two zero days being patched are CVE-2024-49040, a flaw in Exchange rated “important” that could allow an attacker to spoof the email address of a sender, and CVE-2024-49019, an elevation of privileges flaw in Active Directory (AD) which an attacker could use to gain the powers of a domain admin.

The November security update addresses 51 vulnerabilities across Android versions 12 to 15, including one critical Qualcomm component flaw.

Suspected Russian hackers were caught exploiting a recently patched Windows vulnerability as a zero-day in ongoing attacks targeting Ukrainian entities.

On Patch Tuesday, Windows systems will be updated with a flood of security fixes. In November, Windows patched four zero-day vulnerabilities, two of which have been exploited. Patch Tuesdays are a good time for admin teams to remind employees of the importance of keeping operating systems and applications up to date.

These updates will be rolled out to all supported Windows 10 and Windows 11 PCs over the coming days. Apple is the last one to show up to the AI party, but how does its Clean Up tool compare to Samsung's Object Eraser?