Why it matters: "Patch Tuesday" is the unofficial term used by Microsoft for the company's monthly release of bugfixes for its software products. Like every other month since October 2003, Microsoft fixed a lot of flaws in January 2023 that could bring chaos and malware to Windows. After a lighter release in December 2022 , Patch Tuesday for January 2023 is going back to fixing a huge amount of security flaws in Microsoft software. The new updates are the last ones designed to support Windows 7 and Windows 8 next to Windows 10 and Windows 11, and they provide fixes for 98 total vulnerabilities – including a potentially dangerous zero-day flaw. Besides Windows, the January 2023 Patch Tuesday list of affected software , features and roles include the .NET Core platform, Azure, Microsoft Office, Exchange, Visual Studio Code, and more. Windows components in need of fixes include BitLocker, the OS boot manager, Cryptographic Services, the kernel, Print Spooler Components and … [Read more...] about First Patch Tuesday of 2023 includes fixes for 98 security flaws and one zero-day bug
Syma x5sc wind bug fix
An annoying iPhone 14 Pro bug will soon be fixed
Audio player loading… The iPhone 14 Pro and iPhone 14 Pro Max are excellent phones, but no phone is totally immune to the occasional bug, and one that’s recently struck these handsets is causing horizontal lines to flash across the screen when they're being powered on or unlocked. This falls under the category of annoying rather than anything more serious, but it’s still not something you want to see on an expensive new phone, and – as spotted by MacRumors (opens in new tab) – it’s something a lot of people are reportedly experiencing. But it’s also something that should soon be fixed. In a memo from Apple and seen by MacRumors (opens in new tab) , the company acknowledges the bug and says that "Apple is aware of the issue and a software update is coming soon that will resolve the issue." So it’s hopefully not something you should have to put up with for long if you are a victim, and as it’s a software issue, rather than a hardware fault; a simple … [Read more...] about An annoying iPhone 14 Pro bug will soon be fixed
Android Screen Won’t Rotate? Here’s How to Fix It
If your Android phone's screen doesn't rotate, make sure the auto-rotate option is enabled for apps and your home screen, and that you and your case aren't touching the screen when you try to rotate. Restarting your phone, calibrating your screen, and removing recently installed apps may also fix the issue. Does your phone’s screen not rotate when you turn it sideways? If so, Android’s automatic screen rotation option might be disabled, or your phone may have another bug. We’ll show you a few ways to fix this problem. Table of Contents Enable the Auto Rotate Option Make Your Phone's Home Screen Rotatable Make Sure You Aren't Touching Your Phone's Screen Remove Your Phone's Case Restart Your Phone Calibrate Your Phone's Touchscreen Remove Recently Installed Apps RELATED: 5 Common Android Problems and How to Fix Them Enable the Auto Rotate Option The most common reason your Android phone’s screen doesn’t automatically rotate is that the … [Read more...] about Android Screen Won’t Rotate? Here’s How to Fix It
Ryzen CPU firmware bug is fixed, but AMD has bigger problems
Audio player loading… AMD has issued a new update to resolve a firmware bug that caused performance issues for the new Ryzen 5 7600X CPU. The dodgy firmware - which we recently reported on - was causing some 7600X chips to underperform or simply not boot at all, with the new update being pushed out in record time by AMD to fix the issue. To keep things succinct, the previous AGESA ComboAM5PI 1.0.0.4 firmware was only affecting 7600X CPUs with two CCDs (also called chiplets). The 7600X doesn’t actually rely on AMD’s new dual chiplet design employed by more powerful CPUs in the Ryzen 7000 range such as the Ryzen 9 7950X , but we can reasonably assume that some 7600X units are in fact rejected dual-chiplet silicon that could be shipped with one CCD disabled. The iffy firmware was reportedly trying to boot the CPU off this disabled chiplet, resulting in some 7600X processors refusing to post at all. We commend AMD’s speedy work in sorting out this issue, as it will … [Read more...] about Ryzen CPU firmware bug is fixed, but AMD has bigger problems
AMD EPYC CPUs are suffering from a bunch of nasty security bugs
Audio player loading… AMD (opens in new tab) has issued three security bulletins announcing fixes for a whopping 50 vulnerabilities, with 22 of them affecting all three generations of its flagship EPYC server processors (opens in new tab) . Furthermore, of the 50 addressed vulnerabilities, almost half (23) are marked as High Severity on the Common Vulnerability Scoring System (CVSS). Of the 22 EPYC flaws, all of which exist on the latest third generation processor (opens in new tab) , 17 on the second generation, and 12 on the oldest first generation chip, four are rated as High severity. “During security reviews in collaboration with Google, Microsoft, and Oracle, potential vulnerabilities in the AMD Platform Security Processor (PSP), AMD System Management Unit (SMU), AMD Secure Encrypted Virtualization (SEV) and other platform components were discovered and have been mitigated in AMD EPYC AGESA PI packages,” notes AMD (opens in new tab) in … [Read more...] about AMD EPYC CPUs are suffering from a bunch of nasty security bugs
CryptoAPI bug makes 99% of Windows servers vulnerable
WTF?! Akamai has unveiled a new security threat to Windows-based servers and data center machines based on a dangerous bug Microsoft fixed months ago. However, it seems almost no one bothered to install the much-needed patch. When it comes to dangerous cryptographic bugs on Windows, CryptoAPI is the gift that keeps on giving . The interface can be used by Win32 programs to manage security and cryptographic practices, like validating certificates or verifying identities. But CryptoAPI can also bring potentially critical security flaws to the aforementioned Windows platform, making identity and certificate spoofing easier. According to Akamai Security analysts, that's exactly what happened with the vulnerability known as CVE-2022-34689 . Disclosed by the US NSA and the UK National Cyber Security Center (NCSC), the "Windows CryptoAPI Spoofing Vulnerability" was patched by Microsoft in August 2022 but was publicly announced only in October 2022. According to Redmond's security … [Read more...] about CryptoAPI bug makes 99% of Windows servers vulnerable
YouTube is fixing a bug that allowed someone to change upload date of new video
YouTube ’s oldest video, which was uploaded on April 23, 2005, is “Me at the zoo”. But someone tried to distort that piece of history and Google-owned streaming platform has buckled up to make things right. Oldest video on YouTube “Me at the zoo,” which features YouTube co-founder Jawed Karim standing in front of elephants at the San Diego Zoo, is the oldest video uploaded on YouTube. But someone with an account name “enn” uploaded a video dated April 5th, 2005. Read Also How to enable and use YouTube video 'Queue' feature As per a report by The Verge, the video (which has now been unlisted) was titled “Welcome to YouTube!!!” and it had just one image: a low-res graphic with a YouTube logo with the text “Welcome to YouTube!!!!”. The text message is attributed to Chad, Steve, and Jawed, purportedly referencing co-founders Chad Hurley , Steve Chen , and Jawed Karim. The video has Van Halen’s song “Jump.” What YouTube has to say … [Read more...] about YouTube is fixing a bug that allowed someone to change upload date of new video
Advanced Data Protection for iCloud: Apple offers fix for this HomePod issue
Apple has recently expanded its smart speaker lineup with the second-generation HomePod . The new HomePod comes with a similar-looking design to its predecessor, a new processor, smart home capabilities and much more. With the release of iOS 16.3 and macOS 13.2 (expected to release to the public soon), Apple introduced the Advanced Data Protection feature for iCloud . This feature uses end-to-end encryption to provide Apple's highest level of cloud data security. According to a report by Bloomberg’s Mark Gurman, a bug may cause some issues with HomePod smart speakers when Advanced Data Protection for iCloud is enabled. The company has now published a new support document explaining what to do if users face this HomePod issue. Advanced Data Protection for iCloud: Minimum requirements To use this iCloud feature, all the devices logged into a particular Apple ID need to be updated with the latest software version. It is also applicable to HomePod speakers that … [Read more...] about Advanced Data Protection for iCloud: Apple offers fix for this HomePod issue
VMware fixes four serious vRealize vulnerabilities
Audio player loading… Virtualization giant VMware has released patches for four vulnerabilities in its vRealize Log Insight product, two of which have a “critical” severity rating. The critical pair are CVE-2022-31703 and CVE-2022-31704. The former is a directory traversal vulnerability, while the latter is a broken access control vulnerability. Both were given a 9.8 severity score, and both allow threat actors to access resources that should otherwise be inaccessible. "An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution," VMware explained. TechRadar Pro needs you! (opens in new tab) We want to build a better website for our readers, and we need your help! You can do your bit by filling out our survey (opens in new tab) and telling us your opinions and views about the tech industry in 2023. It will only take a few minutes and all your answers will be anonymous … [Read more...] about VMware fixes four serious vRealize vulnerabilities
Lexmark security bug leaves thousands of its printers open to attack
Audio player loading… Lexmark has urged its customers to update their printer ’s firmware, following the publication of a proof-of-concept (PoC) exploit allowing remote code execution (RCE). The exploit in question, designated CVE-2023-23560, can give attackers access to print job queues, reveal Wi-Fi network credentials, and allow access to other devices on a network. Lexmark wrote in a security advisory (opens in new tab) that while it doesn’t believe the exploit is being widely used, more than 100 printer models are at risk of compromise while running pre- patch firmware. TechRadar Pro needs you! (opens in new tab) We want to build a better website for our readers, and we need your help! You can do your bit by filling out our survey (opens in new tab) and telling us your opinions and views about the tech industry in 2023. It will only take a few minutes and all your answers will be anonymous and confidential. Thank you again for … [Read more...] about Lexmark security bug leaves thousands of its printers open to attack