Collecting Cyber-News from over 60 sources

Tag: microsoft

Kubernetes 1.34 Released: What’s New and When to Upgrade

Sep 9, 2025 7:08 PM

Tags: google, kubernetes, microsoft, service
Axios Abuse and Salty 2FA Kits Fuel Advanced Microsoft 365 Phishing Attacks

Sep 9, 2025 5:08 PM

Tags: 2fa, attack, cybersecurity, microsoft, phishing, threat, tool

Threat actors are abusing HTTP client tools like Axios in conjunction with Microsoft’s Direct Send feature to form a “highly efficient attack pipeline” in recent phishing campaigns, according to new findings from ReliaQuest.”Axios user agent activity surged 241% from June to August 2025, dwarfing the 85% growth of all other flagged user agents combined,” the…
Smart GPUGate malware exploits GitHub and Google Ads for evasive targeting

Sep 9, 2025 4:08 PM

Tags: access, attack, awareness, credentials, crypto, data, defense, detection, exploit, github, google, macOS, malware, microsoft, password, powershell, service, software, vpn, windows

GPU-Gated decryption evades detection: The malware itself is delivered as a large Microsoft Software Installer (MSI) file, approximately 128 MB in size. It features a GPU-gated decryption mechanism that keeps the payload encrypted unless it detects the presence of a real GPU on the system. Researchers noted that this design allows GPUGate to remain dormant…
Smart GPUGate malware exploits GitHub and Google Ads for evasive targeting

Sep 9, 2025 4:08 PM

Tags: access, attack, awareness, credentials, crypto, data, defense, detection, exploit, github, google, macOS, malware, microsoft, password, powershell, service, software, vpn, windows

GPU-Gated decryption evades detection: The malware itself is delivered as a large Microsoft Software Installer (MSI) file, approximately 128 MB in size. It features a GPU-gated decryption mechanism that keeps the payload encrypted unless it detects the presence of a real GPU on the system. Researchers noted that this design allows GPUGate to remain dormant…
Anti-spam bug blocks links in Exchange Online, Teams

Sep 9, 2025 4:08 PM

Tags: microsoft, service, spam

Microsoft is working to resolve a known issue that causes an anti-spam service to mistakenly block Exchange Online and Microsoft Teams users from opening URLs and quarantine some of their emails. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-anti-spam-bug-blocks-links-in-exchange-online-teams/
Anti-spam bug blocks links in Exchange Online, Teams

Sep 9, 2025 4:08 PM

Tags: microsoft, service, spam

Microsoft is working to resolve a known issue that causes an anti-spam service to mistakenly block Exchange Online and Microsoft Teams users from opening URLs and quarantine some of their emails. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-anti-spam-bug-blocks-links-in-exchange-online-teams/
Microsoft to Add New AI-Powered Actions in File Explorer

Sep 9, 2025 4:08 PM

Tags: ai, cyber, microsoft

Microsoft is rolling outAI-powered actions in File Explorer, allowing users to interact with files more deeply without leaving the folder view. By right-clicking any supported file, a new “AI actions” menu entry will appear. From there, users can choose various editing and Copilot-powered features, all while staying in their workflow. Seamless AI Actions on Right-Click…
Microsoft to Add New AI-Powered Actions in File Explorer

Sep 9, 2025 4:08 PM

Tags: ai, cyber, microsoft

Microsoft is rolling outAI-powered actions in File Explorer, allowing users to interact with files more deeply without leaving the folder view. By right-clicking any supported file, a new “AI actions” menu entry will appear. From there, users can choose various editing and Copilot-powered features, all while staying in their workflow. Seamless AI Actions on Right-Click…
Vom Assistent zum aktiven KI-Agenten

Sep 9, 2025 2:08 PM

Tags: ai, microsoft

Die Ära der passiven KI-Assistenten neigt sich dem Ende zu. Microsoft präsentiert mit seinen KI-Agenten eine Technologie, die über klassische Chatbot-Funktionen hinausgeht und in komplexe Geschäftsprozesse eingebunden werden kann. Der Unterschied zwischen herkömmlichen Copilot-Funktionen und den neuen KI-Agenten ist fundamental. Während Microsoft-365-Copilot bislang als intelligenter Assistent fungierte, der Texte verfasst oder Daten analysiert, übernehmen Agenten…
When AI nukes your database: The dark side of vibe coding

Sep 9, 2025 2:08 PM

Tags: ai, application-security, attack, authentication, automation, ciso, computer, control, corporate, data, data-breach, defense, dos, email, flaw, governance, incident response, injection, jobs, LLM, microsoft, open-source, password, risk, saas, skills, supply-chain, threat, tool, training, zero-trust

private paths, on another instance.Worthington warns this is one of the most frequent red flags in threat intel. When vibe-coded applications reach incident response, she says, “You’ll often see absence of logging, lack of source control, or weak authentication alongside hardcoded secrets. Rather than a single fingerprint, it’s a collection of sloppy behaviors that point…
Vom Assistent zum aktiven KI-Agenten

Sep 9, 2025 2:08 PM

Tags: ai, microsoft

Die Ära der passiven KI-Assistenten neigt sich dem Ende zu. Microsoft präsentiert mit seinen KI-Agenten eine Technologie, die über klassische Chatbot-Funktionen hinausgeht und in komplexe Geschäftsprozesse eingebunden werden kann. Der Unterschied zwischen herkömmlichen Copilot-Funktionen und den neuen KI-Agenten ist fundamental. Während Microsoft-365-Copilot bislang als intelligenter Assistent fungierte, der Texte verfasst oder Daten analysiert, übernehmen Agenten…
When AI nukes your database: The dark side of vibe coding

Sep 9, 2025 2:08 PM

Tags: ai, application-security, attack, authentication, automation, ciso, computer, control, corporate, data, data-breach, defense, dos, email, flaw, governance, incident response, injection, jobs, LLM, microsoft, open-source, password, risk, saas, skills, supply-chain, threat, tool, training, zero-trust

private paths, on another instance.Worthington warns this is one of the most frequent red flags in threat intel. When vibe-coded applications reach incident response, she says, “You’ll often see absence of logging, lack of source control, or weak authentication alongside hardcoded secrets. Rather than a single fingerprint, it’s a collection of sloppy behaviors that point…
Microsoft testing new AI features in Windows 11 File Explorer

Sep 9, 2025 2:08 PM

Tags: ai, microsoft, windows

Microsoft is testing new File Explorer AI-powered features that will enable Windows 11 users to work with images and documents without needing to open the files. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-testing-new-ai-features-in-windows-11-file-explorer/
Microsoft testing new AI features in Windows 11 File Explorer

Sep 9, 2025 2:08 PM

Tags: ai, microsoft, windows

Microsoft is testing new File Explorer AI-powered features that will enable Windows 11 users to work with images and documents without needing to open the files. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-testing-new-ai-features-in-windows-11-file-explorer/
When AI nukes your database: The dark side of vibe coding

Sep 9, 2025 2:08 PM

Tags: ai, application-security, attack, authentication, automation, ciso, computer, control, corporate, data, data-breach, defense, dos, email, flaw, governance, incident response, injection, jobs, LLM, microsoft, open-source, password, risk, saas, skills, supply-chain, threat, tool, training, zero-trust

private paths, on another instance.Worthington warns this is one of the most frequent red flags in threat intel. When vibe-coded applications reach incident response, she says, “You’ll often see absence of logging, lack of source control, or weak authentication alongside hardcoded secrets. Rather than a single fingerprint, it’s a collection of sloppy behaviors that point…
5 ways CISOs are experimenting with AI

Sep 9, 2025 10:08 AM

Tags: ai, attack, awareness, breach, business, ceo, cio, ciso, control, cyber, cybersecurity, data, data-breach, detection, email, finance, framework, incident response, intelligence, login, metric, microsoft, monitoring, phishing, qr, risk, risk-assessment, risk-management, service, siem, soc, technology, threat, tool, update, vpn, vulnerability, vulnerability-management

Translating security metrics into business language: CISOs are now tasked with being the security storyteller, and it doesn’t always come easily. Turning to AI, CISOs are finding a helping hand to translate technical detail into business-oriented narratives, drawing on a range of data sources, risk trends, control gaps and threat modeling.AI tools are helping tailor…
5 ways CISOs are experimenting with AI

Sep 9, 2025 10:08 AM

Tags: ai, attack, awareness, breach, business, ceo, cio, ciso, control, cyber, cybersecurity, data, data-breach, detection, email, finance, framework, incident response, intelligence, login, metric, microsoft, monitoring, phishing, qr, risk, risk-assessment, risk-management, service, siem, soc, technology, threat, tool, update, vpn, vulnerability, vulnerability-management

Translating security metrics into business language: CISOs are now tasked with being the security storyteller, and it doesn’t always come easily. Turning to AI, CISOs are finding a helping hand to translate technical detail into business-oriented narratives, drawing on a range of data sources, risk trends, control gaps and threat modeling.AI tools are helping tailor…
APT37 Targets Windows with Rust Backdoor and Python Loader

Sep 8, 2025 5:08 PM

Tags: api, attack, backdoor, cctv, cloud, computer, control, data, detection, exploit, government, group, infection, injection, jobs, korea, malicious, malware, microsoft, monitoring, north-korea, organized, password, phishing, powershell, programming, rust, service, social-engineering, spear-phishing, startup, tactics, theft, threat, tool, update, vulnerability, windows

IntroductionAPT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima) is a North Korean-aligned threat actor active since at least 2012. APT37 primarily targets South Korean individuals connected to the North Korean regime or involved in human rights activism, leveraging custom malware and adopting emerging technologies.In recent campaigns, APT37 utilizes a single command-and-control (C2) server…
APT37 Targets Windows with Rust Backdoor and Python Loader

Sep 8, 2025 5:08 PM

Tags: api, attack, backdoor, cctv, cloud, computer, control, data, detection, exploit, government, group, infection, injection, jobs, korea, malicious, malware, microsoft, monitoring, north-korea, organized, password, phishing, powershell, programming, rust, service, social-engineering, spear-phishing, startup, tactics, theft, threat, tool, update, vulnerability, windows

IntroductionAPT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima) is a North Korean-aligned threat actor active since at least 2012. APT37 primarily targets South Korean individuals connected to the North Korean regime or involved in human rights activism, leveraging custom malware and adopting emerging technologies.In recent campaigns, APT37 utilizes a single command-and-control (C2) server…
APT37 Targets Windows with Rust Backdoor and Python Loader

Sep 8, 2025 5:08 PM

Tags: api, attack, backdoor, cctv, cloud, computer, control, data, detection, exploit, government, group, infection, injection, jobs, korea, malicious, malware, microsoft, monitoring, north-korea, organized, password, phishing, powershell, programming, rust, service, social-engineering, spear-phishing, startup, tactics, theft, threat, tool, update, vulnerability, windows

IntroductionAPT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima) is a North Korean-aligned threat actor active since at least 2012. APT37 primarily targets South Korean individuals connected to the North Korean regime or involved in human rights activism, leveraging custom malware and adopting emerging technologies.In recent campaigns, APT37 utilizes a single command-and-control (C2) server…
Action1 vs. Microsoft WSUS: A Better Approach to Modern Patch Management

Sep 8, 2025 5:08 PM

Tags: cloud, compliance, microsoft, update

With WSUS deprecated, it’s time to move from an outdated legacy patching system to a modern one. Learn from Action1 how its modern patching platform offers cloud-native speed, 3rd-party coverage, real-time compliance, and zero infrastructure. Try it free now! First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/action1-vs-microsoft-wsus-a-better-approach-to-modern-patch-management/
Action1 vs. Microsoft WSUS: A Better Approach to Modern Patch Management

Sep 8, 2025 5:08 PM

Tags: cloud, compliance, microsoft, update

With WSUS deprecated, it’s time to move from an outdated legacy patching system to a modern one. Learn from Action1 how its modern patching platform offers cloud-native speed, 3rd-party coverage, real-time compliance, and zero infrastructure. Try it free now! First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/action1-vs-microsoft-wsus-a-better-approach-to-modern-patch-management/
How Microsoft Azure Storage Logs Help Investigate Security Breaches

Sep 8, 2025 12:08 PM

Tags: access, breach, cyber, microsoft, unauthorized

When a security breach occurs, vital evidence often appears in unexpected places. One such source isMicrosoft Azure Storage logs, which play a critical role in digital forensics. While storage accounts are often overlooked, enabling and analyzing their logs can help investigators detect unauthorized access, trace attacker activity, and protect sensitive data. Azure Storage Accounts are…
Veeam verstärkt Microsoft-Allianz mit Doriane Groene als Senior Director, Microsoft Alliance, EMEA

Sep 8, 2025 12:08 PM

Tags: microsoft, veeam

Doriane hat einen MSc-Abschluss der CNAM sowie Executive Leadership-Zertifikate der HEC Paris und des Imperial College London. Neben ihrer fachlichen Expertise ist sie leidenschaftlich darin, starke Beziehungen aufzubauen, Teams weiterzuentwickeln und komplexe Herausforderungen mit datenbasierten Ansätzen zu lösen. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/veeam-verstaerkt-microsoft-allianz-mit-doriane-groene-als-senior-director-microsoft-alliance-emea/a41925/
Hackers Exploit Fake Microsoft Teams Site to Spread Odyssey macOS Stealer

Sep 8, 2025 9:08 AM

Tags: attack, cyber, cybercrime, exploit, hacker, macOS, malicious, microsoft

Cybercriminals have escalated their attacks against macOS users by deploying a sophisticated new campaign that leverages a fraudulent Microsoft Teams download site to distribute the dangerous Odyssey stealer malware. This development represents a significant evolution from earlier attacks that primarily targeted users through fake trading platforms. The malicious campaign first came to light in early…
Microsoft Entra: Conditional Access Policies for Azure DevOps Sign-ins aktualisieren

Sep 8, 2025 1:08 AM

Tags: access, microsoft

Administratoren in Unternehmen, die Conditional Access-Richtlinien für Azure DevOps Sign-ins in Microsoft Entra verwenden, müssen reagieren. Microsoft Entra wird ab dem 2. September 2025 die Anwendung von Richtlinien für bedingten Zugriff über Azure Resource Manager für Azure DevOps-Anmeldungen einstellen. Die … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/09/08/microsoft-entra-conditional-access-policies-for-azure-devops-sign-ins-aktualisieren/
ISMG Editors: The Pentagon, Microsoft and Chinese Workers

Sep 6, 2025 12:20 PM

Tags: ai, china, cloud, microsoft, military, network, risk, software, supply-chain, update

Also: Software Supply Chain Risks, Cato’s AI Security Buy. In this week’s update, four ISMG editors discussed the Pentagon’s review of Microsoft’s use of Chinese nationals on U.S. military cloud systems, renewed concerns over software supply chain risks and Cato Networks’ first-ever acquisition to boost AI security. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/ismg-editors-pentagon-microsoft-chinese-workers-a-29380
Microsoft now enforces MFA on Azure Portal sign-ins for all tenants

Sep 5, 2025 10:20 PM

Tags: authentication, mfa, microsoft

Microsoft says it has been enforcing multifactor authentication (MFA) for Azure Portal sign-ins across all tenants since March 2025. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-now-enforces-mfa-on-azure-portal-sign-ins-for-all-tenants/
Microsoft Tapped China Engineers for SharePoint Support

Sep 5, 2025 7:20 PM

Tags: china, cyber, cyberattack, exploit, government, hacker, microsoft, software

A new investigation has revealed that Microsoft relied on China-based engineers to provide technical support and bug fixes for SharePoint, the same collaboration software that was recently exploited by Chinese state-sponsored hackers in a massive cyberattack affecting hundreds of organizations, including sensitive U.S. government agencies. Last month, Microsoft announced that Chinese hackers had successfully exploited…
Microsoft gives US students a free year of Microsoft 365 Personal

Sep 5, 2025 5:20 PM

Tags: microsoft

Microsoft announced that starting this Thursday, all college students in the United States can get a free year of Microsoft 365 Personal. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-gives-us-students-a-free-year-of-microsoft-365-personal/