This week’s news includes a Microsoft zero-day flaw and Yahoo’s recent email privacy snafu.

A Windows task scheduler API function does not check permissions – so any potential local bad actor can alter them to gain elevated privileges.

The DNC thwarts a phishing effort aimed at its voter database, days after Microsoft’s Fancy Bear disruption and Facebook’s efforts against Iranian propaganda.

The recently-patched flaw could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user.

The tricky Cortana flaw, CVE-2018-8253, was addressed by Microsoft during Patch Tuesday.

Microsoft rolled out 60 patches for its Patch Tuesday release, impacting 19 critical flaws and 39 important flaws.

‘Foreshadow” and other vulnerabilities in Intel processors can be exploited to steal sensitive information stored inside personal computers or personal clouds.

This is similar to taking a room key for a building and turning it into a skeleton key that works on every door in the building.

Researchers create PoC of a post-exploitation kernel-mode fileless attack technique.

A flaw in Cortana allowed researchers to take over a locked Windows machine and execute arbitrary code.