Tag: microsoft
-
Microsoft fixes Windows upgrades failing with 0x8007007F error
Microsoft has resolved a known issue that caused Windows upgrades to fail with 0x8007007F errors on some Windows 11 and Windows Server systems. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-fixes-windows-upgrades-failing-with-0x8007007f-error/
-
Microsoft releases emergency updates to fix Windows recovery
Microsoft has released emergency Windows out-of-band updates to resolve a known issue breaking reset and recovery operations after installing the August 2025 Windows security updates. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-releases-emergency-updates-to-fix-windows-recovery/
-
Nur noch pausierbar: Microsoft Store erzwingt automatische App-Updates
Wer im Microsoft Store die automatischen Updates deaktiviert hatte, könnte bald eine Überraschung erleben. Die Option wird ungefragt reaktiviert. First seen on golem.de Jump to article: www.golem.de/news/nur-noch-pausierbar-microsoft-store-erzwingt-automatische-app-updates-2508-199343.html
-
Microsoft Teams “Couldn’t Connect” Issue After Sidebar Update Gets a Fix
Microsoft is actively rolling out a solution to address a widespread service disruption affecting Teams users globally, where the application displays a >>couldn’t connect to this app
-
Microsoft shares workaround for Teams “couldn’t connect” error
Tags: microsoftMicrosoft is resolving a known issue that causes “couldn’t connect” errors when launching the Microsoft Teams desktop and web applications. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-shares-workaround-for-teams-couldnt-connect-error/
-
Cyberangriff auf Colt: Support-Systeme nach Lösegelddrohung offline
Tags: access, api, china, cve, cyberattack, exploit, extortion, hacker, infrastructure, mail, microsoft, ransomware, rce, remote-code-execution, service, technology, update, vulnerabilityDer TK-Konzern Colt kämpft seit einer Woche mit den Folgen einer Ransomware-Attacke.Colt Technology Services, ein britischer Telekommunikationskonzern, der 900 Rechenzentren in Europa, Asien und Nordamerika miteinander verbindet, wurde am 12. August 2025 Opfer eines Cyberangriffs.Der Fall wurde zunächst als ‘technisches Problem” bezeichnet. Inzwischen hat das Unternehmen jedoch den Angriff bestätigt und seine interne Support-Systeme, darunter…
-
Cyberangriff auf Colt: Support-Systeme nach Lösegelddrohung offline
Tags: access, api, china, cve, cyberattack, exploit, extortion, hacker, infrastructure, mail, microsoft, ransomware, rce, remote-code-execution, service, technology, update, vulnerabilityDer TK-Konzern Colt kämpft seit einer Woche mit den Folgen einer Ransomware-Attacke.Colt Technology Services, ein britischer Telekommunikationskonzern, der 900 Rechenzentren in Europa, Asien und Nordamerika miteinander verbindet, wurde am 12. August 2025 Opfer eines Cyberangriffs.Der Fall wurde zunächst als ‘technisches Problem” bezeichnet. Inzwischen hat das Unternehmen jedoch den Angriff bestätigt und seine interne Support-Systeme, darunter…
-
Check Point analysiert die Zero-Click-Schwachstelle in Microsoft-365-Copilot namens Echolink
Check Point Software Technologies warnt vor einer kürzlich entdeckten Zero-Click-Sicherheitslücke in Microsoft-365-Copilot. Die als bezeichnete Schwachstelle markiert den Beginn einer neuen Angriffsära, da sie weder einen Klick, noch einen Download oder jegliche Nutzerinteraktion erfordert, um sensible Unternehmensdaten abzugreifen. Die Lücke wurde in Microsofts KI-gestützter Arbeitsumgebung ausgenutzt, um Angreifern zu ermöglichen, verdeckte Prompts in geteilten […]…
-
August security updates break Windows recovery, reset
Microsoft has confirmed that the August 2025 Windows security updates are breaking reset and recovery operations on systems running Windows 10 and older versions of Windows 11. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-august-security-updates-break-windows-recovery-reset/
-
August-Patchday: Microsoft patcht Windows-Recovery kaputt
Einige Nutzer können ihre Windows-Systeme seit einigen Tagen nicht mehr zurücksetzen. Betroffen sind mehrere Versionen von Windows 10 und 11. First seen on golem.de Jump to article: www.golem.de/news/august-patchday-microsoft-patcht-windows-recovery-kaputt-2508-199310.html
-
Microsoft Defender AI Can Detect Plaintext Credentials in Active Directory
Tags: ai, attack, credentials, cyber, cybersecurity, data-breach, intelligence, microsoft, vulnerabilityMicrosoft has unveiled a new AI-powered security capability that addresses one of cybersecurity’s most persistent vulnerabilities: plaintext credentials stored in Active Directory systems. The enhanced Microsoft Defender feature uses sophisticated artificial intelligence to detect exposed credentials with unprecedented precision, helping organizations eliminate a critical attack vector that has plagued enterprise environments. Widespread Credential Exposure Problem…
-
Microsoft Entra Private Access brings conditional access to on-prem Active Directory
Susan Bradley / CSOThe deepest level of auditing, including workgroup and domain authentication attempts that use NTLM, can be achieved by setting:Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers = Audit AllNetwork security: Restrict NTLM: Audit NTLM authentication in this domain = Enable allNetwork security: Restrict NTLM: Audit Incoming NTLM Traffic = Enable…
-
CheckPoint-Analyse der 0-Click EchoLeak-Schwachstelle in Microsoft Copilot
Sicherheitsforscher haben im Juni 2025 auf die erste Zero-Click-Schwachstelle in der KI-Anwendung Microsoft 365 Copilot gestoßen. Angreifer könnten Microsoft 365 Copilot über diese, als EchoLeak bezeichnete, Schwachstelle zu einer Datenexfiltration zwingen. Nun hat Check Point Reseach eine erste Analyse des … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/08/19/checkpoint-analyse-der-0-click-echoleak-schwachstelle-in-microsoft-copilot/
-
Threat Actors Use Pirated Games to Bypass Microsoft Defender SmartScreen and Adblockers
Cybersecurity researchers have uncovered a sophisticated campaign where threat actors leverage pirated game downloads to distribute HijackLoader, a modular malware loader, effectively bypassing common defenses like adblockers and Microsoft Defender SmartScreen. Sites such as Dodi Repacks, often deemed >>safe
-
Ransomware gang masking PipeMagic backdoor as ChatGPT desktop app: Microsoft
Hackers are disguising a powerful strain of malware as a ChatGPT desktop application in preparation for ransomware attacks, Microsoft said. First seen on therecord.media Jump to article: therecord.media/ransomware-gang-masking-pipemagic-backdoor
-
Fake ChatGPT Desktop App Delivering PipeMagic Backdoor, Microsoft
Microsoft warns that a fake ChatGPT desktop app was used to deliver PipeMagic malware, linked to ransomware attacks… First seen on hackread.com Jump to article: hackread.com/fake-chatgpt-desktop-app-pipemagic-backdoor-microsoft/
-
Threat Actors Exploit Microsoft Help Index File to Deploy PipeMagic Malware
Cybersecurity researchers have uncovered a sophisticated campaign where threat actors leverage a Microsoft Help Index File (.mshi) to deploy the PipeMagic backdoor, marking a notable evolution in malware delivery methods. This development ties into the exploitation of CVE-2025-29824, a zero-day elevation of privilege vulnerability in the Windows Common Log File System (CLFS) driver, which Microsoft…
-
Microsoft Windows Vulnerability Exploited to Deploy PipeMagic RansomExx Malware
Tags: attack, cve, cybersecurity, exploit, flaw, malware, microsoft, ransomware, threat, vulnerability, windowsCybersecurity researchers have lifted the lid on the threat actors’ exploitation of a now-patched security flaw in Microsoft Windows to deploy the PipeMagic malware in RansomExx ransomware attacks.The attacks involve the exploitation of CVE-2025-29824, a privilege escalation vulnerability impacting the Windows Common Log File System (CLFS) that was addressed by Microsoft in April 2025, First…
-
Microsoft’s Nuance coughs up $8.5M to rid itself of MOVEit breach suit
Supply chain breach has been a major target of legal action First seen on theregister.com Jump to article: www.theregister.com/2025/08/18/nuance_lawsuit/
-
Microsoft’s Nuance coughs up $8.5M to rid itself of MOVEit breach suit
Supply chain breach has been a major target of legal action First seen on theregister.com Jump to article: www.theregister.com/2025/08/18/nuance_lawsuit/
-
UK’s Colt hit by cyberattack, support systems offline amid ransom threat
Tags: api, attack, china, communications, cve, cyberattack, data, data-breach, exploit, finance, flaw, group, infrastructure, Internet, microsoft, network, programming, ransom, rce, remote-code-execution, russia, service, software, threat, update, vulnerabilitywith samples on a Russian Tor site.”We’ve seen already this year that telecom is particularly vulnerable to attacks, and I think this WarLock attack highlights some recurring issues that telecom and large-scale network service providers are starting to see,” said Gabrielle Hempel, Security Operations Strategist at Exabeam. “There’s this operational ripple effect when you’re a…
-
Recent Windows updates may fail to install via WUSA
Microsoft has mitigated a known issue that caused Windows update failures when installing them from a network share using the Windows Update Standalone Installer (WUSA). First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-windows-11-windows-server-2025-updates-may-fail-from-network-shares/
-
Hybride Exchange Server in Gefahr – Mehr als 28.000 Microsoft Exchange Server ungepatcht
Tags: microsoftFirst seen on security-insider.de Jump to article: www.security-insider.de/gefaehrliche-exchange-schwachstelle-cve-2025-53786-a-694700074ad4215820e14d24f8226c93/
-
ElevationPrivilege Vulns Dominate Microsoft’s Patch Tuesday
The company’s August security update consisted of patches for 111 unique Common Vulnerabilities and Exposures (CVEs). First seen on darkreading.com Jump to article: www.darkreading.com/application-security/elevation-privilege-vulns-dominate-microsoft-patches
-
Guess what else GPT-5 is bad at? Security
OpenAI and Microsoft have said that GPT-5 is one of their safest and secure models out of the box yet. An AI red-teamer called its performance “terrible.” First seen on cyberscoop.com Jump to article: cyberscoop.com/gpt5-openai-microsoft-security-review/
-
Microsoft August 2025 Patch Tuesday fixes one zero-day, 107 flaws
Today is Microsoft’s August 2025 Patch Tuesday, which includes security updates for 107 flaws, including one publicly disclosed zero-day vulnerability in Windows Kerberos. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-august-2025-patch-tuesday-fixes-one-zero-day-107-flaws/
-
Windows 11 KB5063878 & KB5063875 cumulative updates released
Microsoft has released Windows 11 KB5063878 and KB5063875 cumulative updates for versions 24H2 and 23H2 to fix security vulnerabilities and issues. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-11-kb5063878-and-kb5063875-cumulative-updates-released/
-
Windows 10 KB5063709 update fixes extended security updates enrollment
Microsoft has released the KB5063709 cumulative update for Windows 10 22H2 and Windows 10 21H2, with seven fixes or changes, including a fix for a bug that prevented enrollment in extended security updates. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-10-kb5063709-update-fixes-extended-security-updates-enrollment/