Microsoft Patches Windows Zero
Microsoft recently patched a zero-day Windows vulnerability that was being actively exploited by the infamous North Korean hacking group Lazarus. The security vulnerability, tracked as CVE-2024-38193 (CVSS score: 7.8), was patched as part of the company’s August 2024 Patch Tuesday updates. This flaw has been described as a privilege escalation bug within the Windows Ancillary Function Driver (AFD.sys) for WinSock, which could allow attackers to gain SYSTEM-level privileges to targeted machines and make significant changes to them....