Tag: microsoft
-
Microsoft to Make All Products Quantum Safe by 2033
Microsoft has set out a roadmap to complete transition to PQC in all its products and services by 2033, with roll out beginning by 2029 First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/microsoft-products-quantum-safe/
-
Certificate Spoofing-Schwachstelle CVE-2025-55229 (21.8.2025)
In allen im Support befindlichen Windows-Versionen (Clients und Server) gibt es eine Certificate Spoofing-Schwachstelle (CVE-2025-55229). Eigentlich sollte es zum 21. August 2025 auch Updates für die betroffenen Produkte geben. Zumindest ich stoße momentan auf den Microsoft-Seite aber nur auf gebrochene … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/08/22/windows-certificate-spoofing-schwachstelle-cve-2025-55229-21-8-2025/
-
Microsoft reportedly cuts China’s early access to bug disclosures, PoC exploit code
Better late than never after SharePoint assault? First seen on theregister.com Jump to article: www.theregister.com/2025/08/21/microsoft_cuts_chinas_early_access/
-
Copilot Kept Access Logs Unless You Told It Not To
Copilot Falls for Prompt Injection Yet Again. Microsoft quietly fixed a flaw that allowed users to instruct embedded artificial intelligence model Copilot not to log its access corporate files. If you work at an organization that used Copilot prior to Aug 18, there is a very real chance that your audit log is incomplete. First…
-
Nuance Agrees to Pay $8.5M to Settle MOVEit Hack Litigation
Tags: communications, data, exploit, flaw, hacker, healthcare, microsoft, moveIT, software, zero-daySettlement Is Latest Among Scores of Other MOVEit Lawsuits Still Pending. Nuance Communications, a Microsoft subsidiary, has agreed to pay $8.5 million to settle class action litigation filed after hackers exploited a zero-day flaw in Progress Software’s MOVEit file transfer software in 2023, stealing data belonging to more than a dozen of Nuance’s healthcare clients.…
-
Warlock Ransomware Exploits SharePoint Flaws for Initial Access and Credential Theft
Tags: access, credentials, cyber, exploit, flaw, group, microsoft, network, ransomware, remote-code-execution, theft, vulnerabilityThe Warlock ransomware group has intensified its operations by targeting unpatched on-premises Microsoft SharePoint servers, leveraging critical vulnerabilities to achieve remote code execution and initial network access. This campaign, observed in mid-2025, involves sending crafted HTTP POST requests to upload web shells, facilitating reconnaissance, privilege escalation, and credential theft. Initial Exploitation Attackers exploit flaws like…
-
Microsoft asks customers for feedback on reported SSD failures
Microsoft is seeking further information from customers who reported failure and data corruption issues affecting their solid-state drives (SSDs) and hard disk drives (HDDs) after installing the August 2025 security update. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-asks-customers-for-feedback-on-ssd-failure-issues/
-
Microsoft asks customers for feedback on reported SSD failures
Microsoft is seeking further information from customers who reported failure and data corruption issues affecting their solid-state drives (SSDs) and hard disk drives (HDDs) after installing the August 2025 security update. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-asks-customers-for-feedback-on-ssd-failure-issues/
-
Microsoft asks customers for feedback on SSD failure issues
Microsoft is seeking further information from customers who reported failure and data corruption issues affecting their solid-state drives (SSDs) and hard disk drives (HDDs) after installing the August 2025 security update. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-asks-customers-for-feedback-on-ssd-failure-issues/
-
Microsoft 365 Adds New Feature for Admins to Manage Link Creation Policies
Microsoft announced on August 20, 2025, a significant enhancement to its Microsoft 365 administrative capabilities with the introduction of new tenant-level controls for managing org-wide sharing links for user-built Copilot agents. This feature, scheduled for general availability in mid-September 2025, represents a critical step forward in enterprise governance for AI-powered collaboration tools. Enhanced Administrative Control…
-
Microsoft restricts Chinese firms’ access to vulnerability warnings after hacking concerns
Tags: access, china, compliance, cybersecurity, data, government, hacking, intelligence, microsoft, service, threat, vulnerability, windowsEnterprise operations fallout: Microsoft’s decision may have broader operational consequences for multinational corporations (MNCs), particularly those with significant operations in China. For some, the move adds pressure to an already delicate balancing act between geopolitical expectations and local compliance risks.”MNCs operating in China already know they are in the crosshairs of both the Chinese and…
-
New Campaign Uses Active Directory Federation Services to Steal M365 Credentials
Tags: attack, authentication, credentials, cyber, exploit, infrastructure, malware, microsoft, phishing, serviceResearchers at Push Security have discovered a new phishing campaign that targets Microsoft 365 (M365) systems and uses Active Directory Federation Services (ADFS) to enable credential theft. This attack vector exploits Microsoft’s authentication redirect mechanisms, effectively turning a legitimate service into a conduit for phishing operations. Sophisticated Phishing Infrastructure The campaign begins with malvertising lures…
-
Future of Windows: Microsoft Execs Spotlight Multimodal Interactions, Copilot+ PCs, Secure Cloud Devices
In a recent podcast interview, two Microsoft executives gave a preview of what’s next for Windows. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-microsoft-execs-future-of-windows/
-
Microsoft’s Patch Tuesday: 100+ Updates Including Azure OpenAI Service, Memory Corruption Flaw
Microsoft patched CVE-2025-50165, an “extremely high-risk” memory corruption flaw in its graphics component that could let attackers execute code over the network. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-microsoft-patch-tuesday-august-25/
-
Microsoft Lays Out its Quantum-Safe Plans
The goal of the Quantum-Safe Program is to ensure that by 2033, all Microsoft products and services are safe by default from quantum-based attacks. First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/microsoft-lays-out-its-quantum-safe-plans
-
Microsoft crams Copilot AI directly into Excel cells
Meet the new COPILOT function First seen on theregister.com Jump to article: www.theregister.com/2025/08/18/microsoft_adds_copilot_ai_formulas/
-
Microsoft starts including PQC algorithms in cyber foundations
Microsoft updates on its post-quantum cyber strategy as it continues integrating quantum safe algorithms into some of the core foundations underpinning its products and services. First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366629896/Microsoft-starts-including-PQC-algorithms-in-cyber-foundations
-
Hackers steal Microsoft logins using legitimate ADFS redirects
Hackers are using a novel technique that combines legitimate office.com links with Active Directory Federation Services (ADFS) to redirect users to a phishing page that steals Microsoft 365 logins. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-steal-microsoft-logins-using-legitimate-adfs-redirects/
-
Microsoft macht aus dem ikonischen XP-Hintergrund Crocs mit Clippy-Anhänger
Tags: microsoftFirst seen on t3n.de Jump to article: t3n.de/news/microsoft-clippy-crocs-50-jahre-1701896/
-
Microsoft macht aus dem ikonischen XP-Hintergrund Crocs mit Clippy-Anhänger
Tags: microsoftFirst seen on t3n.de Jump to article: t3n.de/news/microsoft-clippy-crocs-50-jahre-1701896/
-
Microsoft investigates outage impacting Copilot, Office.com
Microsoft is investigating an ongoing issue preventing users across North America from accessing Office.com and the company’s Copilot AI-powered assistant. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-investigates-outage-impacting-copilot-officecom/
-
Copilot Vulnerability Lets Attackers Bypass Audit Logs and Gain Hidden Access
A critical vulnerability in Microsoft’s M365 Copilot allowed users to access sensitive files without leaving any trace in audit logs, creating significant security and compliance risks for organizations worldwide. The flaw, discovered in July 2024, remained largely hidden from customers despite being classified as an >>important
-
Microsoft fixes the fixes that broke Windows tools
Upgrade errors on Windows 11: One of the first problems users encountered after Patch Tuesday was a failed upgrade error when trying to install the update on Windows 11. The failure appeared with error code 0x8007007F, preventing some devices from completing the installation.Apart from affected clients running Windows 11 v23H2 and Windows 11 v22H2, the…
-
At least three UK organizations hit by SharePoint zero-day hacking campaign
At least three British organizations have reported to the country’s data protection regulator that hackers exploited bugs affecting on-premise Microsoft SharePoint servers. First seen on therecord.media Jump to article: therecord.media/organizations-united-kingdom-sharepoint
-
Backup in SaaS-Umgebungen in der Praxis
Die Datensicherung für Cloud- und Onpremises-Konzepte sollten effizient unter einer Plattform erfolgen und zudem unveränderlichen Speicher unterstützen. Ein mittelständisches Bauunternehmen gibt Einblicke, wie es diese Herausforderung für Microsoft-365 mit Arcserve innerhalb kurzer Zeit gemeistert hat. Traditionelle oder veraltete Backup-Lösungen können kaum noch den adäquaten Schutz für die Daten leisten weder hinsichtlich eines klassischen Ausfalls […]…
-
Microsoft reportedly fixing SSD failures caused by Windows updates
Recently released Windows 11 24H2 updates are reportedly causing data corruption and failure issues for some SSD and HDD models on up-to-date systems. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-reportedly-fixing-ssd-failures-caused-by-windows-updates/
-
Microsoft Issues Emergency Patch for Windows Reset and Recovery Bug
Microsoft has released an emergency out-of-band security update to address a critical issue affecting Windows reset and recovery operations across multiple versions of the operating system. The patch, released on August 19, 2025, resolves problems that emerged after users installed the August 2025 Windows security update, causing some reset and recovery attempts to fail on…
-
Microsoft Issues OutBand Update to Fix Recovery Issues
Microsoft has issued an emergency patch to fix Windows recovery problems for some users First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/microsoft-outofband-update/
-
ASPM buyer’s guide: 7 products to help secure your applications
Tags: access, ai, api, application-security, attack, business, ceo, cloud, compliance, container, crowdstrike, data, detection, endpoint, exploit, gartner, google, guide, iam, identity, infrastructure, ivanti, marketplace, microsoft, monitoring, okta, open-source, oracle, programming, risk, software, supply-chain, threat, tool, vulnerability, vulnerability-managementProtect the software development lifecycle (SDLC) and supply chain pipelinesAutomate software testingIntegrate with various applications to mitigate and remove various risksFeatures offered by ASPMs vary widely. As a result, tools can prove difficult to evaluate in terms of exactly what is being protected, what data and metadata is being collected to inform security judgments, and…
-
Microsoft fixes Windows upgrades failing with 0x8007007F error
Microsoft has resolved a known issue that caused Windows upgrades to fail with 0x8007007F errors on some Windows 11 and Windows Server systems. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-fixes-windows-upgrades-failing-with-0x8007007f-error/