Tag: microsoft
-
Microsoft eventually realized the world isn’t just the Northern Hemisphere
Veteran engineer explains the fall of ‘Fall’ in Windows release First seen on theregister.com Jump to article: www.theregister.com/2025/08/07/windows_naming_conventions/
-
Faced with £40B budget hole, UK public sector commits £9B to Microsoft
Government plans £1.9B annual spending during five-year MoU First seen on theregister.com Jump to article: www.theregister.com/2025/08/07/uk_microsoft_spending/
-
DarkCloud Stealer Targets Windows Systems to Harvest Login Credentials and Financial Data
A new variant of the DarkCloud information-stealer malware has been observed targeting Microsoft Windows systems, primarily affecting Windows users by collecting sensitive data such as login credentials, financial information, and personal contacts. Discovered in early July 2025 by Fortinet’s FortiGuard Labs, this high-severity campaign leverages sophisticated phishing tactics to initiate infections, demonstrating advanced evasion methods…
-
Financially motivated cluster a key player in ToolShell exploitation
Researchers from Palo Alto Networks detail ransomware deployment and malicious;backdoors in a campaign against Microsoft SharePoint users. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/financially-motivated-cluster-toolshell-exploitation/757217/
-
An organization without a response plan will be hit harder by a security incident
Security leaders shared advice gleaned from customer engagements, and reinforced the importance of planning and following fundamentals for defense. First seen on cyberscoop.com Jump to article: cyberscoop.com/microsoft-threat-intel-response-tips/
-
Microsoft will kill the Lens PDF scanner app for iOS, Android
Microsoft announced that it will phase out the Microsoft Lens PDF scanner app for Android and iOS devices starting September 15, 2025. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-will-kill-the-microsoft-lens-pdf-scanner-app-for-ios-android-in-september/
-
Check Point untersucht Angriffe durch Kombination aus mehreren Ransomwares
Es wurde festgestellt, dass bei diesen Angriffen mehrere Arten von Ransomware gleichzeitig eingesetzt wurden. Eine davon ist die reguläre LockBit Black, die zweite verwendet die Erweiterung .x2anylock. Diese Erweiterung wurde später vom Betreiber der Ransomware Warlock verwendet, der im Bericht von Microsoft über die SharePoint-Sicherheitslücke erwähnt wird. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/check-point-untersucht-angriffe-durch-kombination-aus-mehreren-ransomwares/a41654/
-
Microsoft 365 apps to soon block file access via FPRPC by default
Microsoft has announced that the Microsoft 365 apps for Windows will start blocking access to files via the insecure FPRPC legacy authentication protocol by default starting late August. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-365-apps-to-soon-block-file-access-via-insecure-fprpc-legacy-auth-protocol-by-default/
-
13 Produkt-Highlights der Black Hat USA
Tags: access, ai, api, application-security, business, chatgpt, cisco, cloud, compliance, credentials, crowdstrike, cybersecurity, data, detection, google, governance, Hardware, identity, leak, LLM, malware, marketplace, microsoft, monitoring, network, openai, phishing, risk, saas, service, soc, threat, tool, usa, vulnerability, zero-trustDas Mandalay Bay Convention Center wird zur Black Hat USA zum Cybersecurity-Hub 2025 lag der Fokus dabei insbesondere auf Agentic und Generative AI.Zur Black-Hat-Konferenz haben sich auch 2025 Tausende von Sicherheitsexperten in Las Vegas zusammengefunden, um sich über die neuesten Entwicklungen im Bereich Cybersecurity zu informieren und auszutauschen. Der thematische Fokus lag dabei in erster…
-
CVE-2025-53786: Frequently Asked Questions About Microsoft Exchange Server Hybrid Deployment Elevation of Privilege Vulnerability
Tags: access, advisory, attack, authentication, cisa, cloud, cve, cybersecurity, exploit, flaw, identity, infrastructure, microsoft, mitigation, service, vulnerability, zero-dayFrequently asked questions about CVE-2025-53786, an elevation of privilege vulnerability affecting Microsoft Exchange Server Hybrid Deployments. Background Tenable’s Research Special Operations (RSO) team has compiled this blog to answer Frequently Asked Questions (FAQ) regarding an elevation of privilege vulnerability affecting Microsoft Exchange Server Hybrid Deployments. FAQ What is CVE-2025-53786 CVE-2025-53786 is an elevation of privilege…
-
Privatnutzer: ESU-Lizenz für Windows 10 gilt für mehrere PCs
Privatanwender, die mehrere Windows-10-Rechner besitzen, brauchen nicht für jeden PC eine eigene ESU-Lizenz – dafür aber einen Microsoft-Account. First seen on golem.de Jump to article: www.golem.de/news/privatnutzer-esu-lizenz-fuer-windows-10-gilt-fuer-mehrere-pcs-2508-198956.html
-
CISA Issues Urgent Advisory to Address Microsoft Exchange Flaw
Tags: advisory, authentication, cisa, cloud, cve, cyber, cybersecurity, flaw, infrastructure, microsoft, vulnerabilityThe Cybersecurity and Infrastructure Security Agency (CISA) has issued Emergency Directive 25-02 on August 7, 2025, requiring federal agencies to immediately address a critical vulnerability in Microsoft Exchange hybrid configurations that could allow attackers to escalate from on-premises systems to cloud environments. Critical Security Vulnerability Discovered CISA has identified a post-authentication vulnerability designated CVE-2025-53786 affecting…
-
CISA Issues Urgent Advisory to Address Microsoft Exchange Flaw
Tags: advisory, authentication, cisa, cloud, cve, cyber, cybersecurity, flaw, infrastructure, microsoft, vulnerabilityThe Cybersecurity and Infrastructure Security Agency (CISA) has issued Emergency Directive 25-02 on August 7, 2025, requiring federal agencies to immediately address a critical vulnerability in Microsoft Exchange hybrid configurations that could allow attackers to escalate from on-premises systems to cloud environments. Critical Security Vulnerability Discovered CISA has identified a post-authentication vulnerability designated CVE-2025-53786 affecting…
-
Black Hat 2025 Recap: A look at new offerings announced at the show
Tags: access, ai, api, application-security, automation, chatgpt, cisco, cloud, compliance, control, crowdstrike, dark-web, data, detection, google, governance, group, identity, intelligence, LLM, malware, microsoft, monitoring, network, openai, password, risk, saas, service, soc, software, threat, tool, vulnerability, zero-trustSnyk secures AI from inception: Snyk’s new platform capability, Secure at Inception, includes real-time security scanning that begins at the moment of code generation or execution. It offers visibility into generative AI, agentic, and model context protocol (MCP) components in software, and also features a new, experimental scanner for detecting AI-specific MCP vulnerabilities.Secure AI Inception…
-
Inside Microsoft’s Real-Time War Against Cybersecurity Threats
At Black Hat 2025, Microsoft revealed how its security teams work in real time to outpace hackers and stop attacks before they escalate. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-black-hat-2025-microsoft-security-teams-response-cyber-threats/
-
Microsoft Exchange Server Hybrid durch CVE-2025-53786 gefährdet
Noch ein Hinweis für Administratoren von Microsoft Exchange Server Hybrid-Konfigurationen. Microsoft weist darauf hin, dass diese Konstellationen durch eine Elevation of Privilege-Schwachstelle (CVE-2025-53786) gefährdet seien. Es gibt aber einen Hotfix, um diese Schwachstelle in diesen Hybrid-Konstellationen zu beseitigen und Hinweise, … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/08/07/microsoft-exchange-server-hybrid-durch-cve-2025-53786-gefaehrdet/
-
Microsoft Exchange Server Hybrid durch CVE-2025-53786 gefährdet
Noch ein Hinweis für Administratoren von Microsoft Exchange Server Hybrid-Konfigurationen. Microsoft weist darauf hin, dass diese Konstellationen durch eine Elevation of Privilege-Schwachstelle (CVE-2025-53786) gefährdet seien. Es gibt aber einen Hotfix, um diese Schwachstelle in diesen Hybrid-Konstellationen zu beseitigen und Hinweise, … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/08/07/microsoft-exchange-server-hybrid-durch-cve-2025-53786-gefaehrdet/
-
Microsoft Warns of Hybrid Exchange Deployment Flaw
CISA Issues Emergency Directive Requiring Federal Agencies to Fix Flaw. A vulnerability in Exchange hybrid deployments could allow attackers to escalate privileges and gain administrative access to cloud-based environments. Microsoft said Tuesday there is no evidence of its exploitation and strongly recommended installing hot fix updates made available in April. First seen on govinfosecurity.com Jump…
-
CISA orders fed agencies to patch new Exchange flaw by Monday
CISA has issued an emergency directive ordering all Federal Civilian Executive Branch (FCEB) agencies to mitigate a critical Microsoft Exchange hybrid vulnerability tracked as CVE-2025-53786 by Monday morning at 9:00 AM ET. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-orders-fed-agencies-to-patch-new-cve-2025-53786-exchange-flaw/
-
Hybrid Exchange environment vulnerability needs fast action
if they haven’t already done so, install the Hot Fix released April 18, or any newer release, on their on-premises Exchange servers and follow the configuration instructions outlined in the document Deploy dedicated Exchange hybrid app. For additional details, they should refer to Exchange Server Security Changes for Hybrid Deployments;then reset the service principal’s keyCredentials. That reset should be…
-
Microsoft, CISA warn yet another Exchange server bug can lead to ‘total domain compromise’
No reported in-the-wild exploits”¦yet First seen on theregister.com Jump to article: www.theregister.com/2025/08/07/microsoft_cisa_warn_yet_another/
-
CISA, Microsoft warn organizations of high-severity Microsoft Exchange vulnerability
The public disclosure and advisories came late Wednesday during Black Hat, but Microsoft said the timing was coordinated. First seen on cyberscoop.com Jump to article: cyberscoop.com/cisa-microsoft-exchange-vulnerability/
-
#BHUSA: Microsoft Debuts AI Agent Able to Reverse Engineer Malware
A new Microsoft AI agent, named Project Ire, is able to autonomously classify malware at a global scale with a high level of precision First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/microsoft-ai-agent-reverse/
-
Rubrik und Sophos stärken gemeinsam die Cyberresilienz von Microsoft 365
Das Cybersicherheitsunternehmen Rubrik und Sophos haben eine strategische Partnerschaft bekannt gegeben. Gemeinsam bringen sie ‘Sophos M365 Backup and Recovery Powered by Rubrik” auf den Markt die erste für Managed-Detection and Response (MDR) optimierte Microsoft-365-Backup- und Recovery-Lösung, die vollständig in Sophos-Central, der Sicherheitsplattform von Sophos, integriert ist. Die neue Lösung unterstützt IT- und Cybersicherheitsteams, indem […]…
-
CISA, Microsoft warn of critical Exchange hybrid flaw CVE-2025-53786
CISA and Microsoft warn of CVE-2025-53786, a high-severity Exchange flaw allowing privilege escalation in hybrid cloud environments. CISA and Microsoft warn of a high-severity flaw, tracked as CVE-2025-53786, in Exchange hybrid deployments that allows attackers to escalate privileges in cloud setups. Microsoft address the vulnerability in Exchange Server 2016, 2019 and Subscription Edition RTM. The…
-
Microsoft urges admins to plug severe Exchange security hole (CVE-2025-53786)
>>In an Exchange hybrid deployment, an attacker who first gains administrative access to an on-premises Exchange server could potentially escalate privileges within the … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/08/07/exchange-hybrid-deployment-vulnerability-cve-2025-53786/
-
Weaponizing Microsoft 365 Direct Send to Bypass Email Security Defenses
Security researchers at StrongestLayer, in collaboration with Jeremy, a seasoned Security Architect at a major manufacturing firm, have exposed a multi-layered spear phishing attack that exploits Microsoft 365’s Direct Send feature to infiltrate corporate email systems. The campaign, flagged initially by StrongestLayer’s AI system TRACE, masqueraded as innocuous voicemail notifications from services like RingCentral, but…
-
CISA Warns of ‘ToolShell’ Exploitation Chain Targeting SharePoint Servers; IOCs and Detections Released
Tags: authentication, cisa, cve, cyber, cybersecurity, data, detection, exploit, flaw, infrastructure, injection, microsoft, network, remote-code-execution, vulnerabilityThe Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical alert regarding an exploitation chain dubbed >>ToolShell