Tag: microsoft
-
Microsoft-Sicherheitslücke in Deutschland weit verbreitet
Tags: bug, china, cyberattack, cybersecurity, germany, infrastructure, microsoft, ransomware, risk, software, update, usa, vulnerabilityDie Gefahr ist noch nicht gebannt: Experten verzeichnen weiter steigende Infektionszahlen.Deutsche Unternehmen, Behörden und Bildungseinrichtungen sind in Europa am stärksten von der schwerwiegenden Schwachstelle in der Sharepoint-Software von Microsoft betroffen. Nach einer Analyse des europäischen Cybersecurity-Unternehmens Eye Security wurden bislang weltweit 396 infizierte Server in 145 Organisationen identifiziert 42 davon betreffen demnach Unternehmen, die in…
-
Staatliche Akteure: Hacker infiltrieren Botschaften in Russland über Provider
Microsoft deckt Cyberattacken der Hackergruppe Secret Blizzard auf ausländische Botschaften auf. Die Angreifer nutzen russische Internetprovider. First seen on golem.de Jump to article: www.golem.de/news/staatliche-akteure-hacker-infiltrieren-botschaften-in-russland-ueber-provider-2508-198712.html
-
Microsoft Upgrades .NET Bounty Program, Offers Rewards Up to $40,000
Microsoft has announced significant enhancements to its .NET Bounty Program, introducing expanded coverage, streamlined award structures, and substantially increased financial incentives for security researchers. The updated program now offers maximum rewards of USD 40,000 for critical vulnerabilities affecting .NET and ASP.NET Core frameworks, including Blazor and Aspire components. These changes represent Microsoft’s continued commitment to…
-
Over 17,000 SharePoint Servers Found Exposed Online, 840 Vulnerable to Active 0-Day Attacks
Tags: attack, china, cve, cyber, cybersecurity, data-breach, finance, government, healthcare, Internet, microsoft, threat, vulnerability, zero-dayA significant cybersecurity crisis has emerged with the discovery of over 17,000 Microsoft SharePoint servers exposed to internet-based attacks, including 840 systems vulnerable to a critical zero-day vulnerability that Chinese threat actors are actively exploiting. The vulnerability, designated CVE-2025-53770 and dubbed >>ToolShell
-
Microsoft 365 im Fadenkreuz: So umgehen Hacker die MFA
Eine neue Phishing-Welle zeigt: Selbst moderne Sicherheitsmechanismen wie die Multifaktor-Authentifizierung (MFA) bieten keinen vollständigen Schutz. Cyberkriminelle zielen gezielt auf Microsoft 365 und nutzen gefälschte Anwendungen, um Unternehmenszugänge zu kompromittieren. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/microsoft-365-mfa
-
How bright are AI agents? Not very, recent reports suggest
CSOs should ‘skip the fluff’: Meghu’s advice to CSOs: Stop reading the marketing and betting too much of your business on AI/LLM technology as it exists today. Start small and always have a human operator to guide it.”If you skip the fluff and get to the practical application, we have a new technology that could…
-
Attackers wrap phishing links through URL scanning services to bypass detection
urldefense.proofpoint.com and url.emailprotection.link (Intermedia).”Link wrapping is designed by vendors like Proofpoint to protect users by routing all clicked URLs through a scanning service, allowing them to block known malicious destinations at the moment of click,” Cloudflare researchers wrote in their report on the attacks. “While this is effective against known threats, attacks can still succeed…
-
Microsoft catches Russian hackers targeting foreign embassies
End goal is the installation of a malicious TLS root certificate for use in intel gathering. First seen on arstechnica.com Jump to article: arstechnica.com/information-technology/2025/07/microsoft-catches-russian-hackers-targeting-foreign-embassies/
-
Vergleich Microsoft Defender for Office 365 zu ICES-Software von Drittanbietern
Wie schlägt sich der Microsoft Defender eigentlich im Vergleich zu ICES-Lösungen von Drittanbietern zum Schutz von Microsoft Office 365? Die ICES-Lösungen können ja in Microsoft Defender for Office 365 integriert werden. Die Tage ist mir eine Übersicht Microsoft mit einem … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/08/01/vergleich-microsoft-defender-zu-ices-software-von-drittanbietern/
-
Russia-linked APT Secret Blizzard targets foreign embassies in Moscow with ApolloShadow malware
Russia-linked Secret Blizzard targets foreign embassies in Moscow via ISP-level AitM attacks, deploying custom ApolloShadow malware. Microsoft researchers uncovered a cyberespionage campaign by the Russia-linked APT group Secret Blizzard (aka Turla, Snake, Uroburos, Waterbug, Venomous Bear and KRYPTON) targeting foreign embassies in Moscow. The threat actor uses an adversary-in-the-middle (AiTM) method at the ISP level to deploy custom malware called ApolloShadow. This…
-
Microsoft 365 im Visier: Cyberkriminelle knacken MFA
First seen on datensicherheit.de Jump to article: www.datensicherheit.de/microsoft-365-cyberkriminelle-knacken-mfa
-
Microsoft to disable Excel workbook links to blocked file types
Tags: microsoftMicrosoft has announced that it will start disabling external workbook links to blocked file types by default between October 2025 and July 2026. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-to-disable-external-workbook-links-to-blocked-file-types/
-
Microsoft’s Azure AI Speech needs just seconds of audio to spit out a convincing deepfake
No way this will be abused First seen on theregister.com Jump to article: www.theregister.com/2025/07/31/microsoft_updates_azure_ai_speech/
-
Microsoft now pays up to $40,000 for some .NET vulnerabilities
Microsoft has expanded its .NET bug bounty program and increased rewards to $40,000 for some .NET and ASP.NET Core vulnerabilities. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-now-pays-up-to-40-000-for-some-net-vulnerabilities/
-
Experts Detect Multi-Layer Redirect Tactic Used to Steal Microsoft 365 Login Credentials
Cybersecurity researchers have disclosed details of a new phishing campaign that conceals malicious payloads by abusing link wrapping services from Proofpoint and Intermedia to bypass defenses.”Link wrapping is designed by vendors like Proofpoint to protect users by routing all clicked URLs through a scanning service, allowing them to block known malicious destinations at the moment…
-
Russian hackers use ISP access to hack embassies in AiTM attacks
Microsoft warns that a cyber-espionage group linked to Russia’s Federal Security Service (FSB) is targeting diplomatic missions in Moscow using local internet service providers. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-russian-hackers-use-isp-access-to-hack-embassies-in-aitm-attacks/
-
Kremlin monitors foreign embassies in Moscow through cyber-espionage at ISP level
In a warning to foreign embassies in Moscow, Microsoft said a Russian state-backed hacking group known as Secret Blizzard or Turla has been using internet service providers for adversary-in-the-middle (AiTM) attacks. First seen on therecord.media Jump to article: therecord.media/russia-fsb-turla-espionage-foreign-embassies-isp-level
-
Russia-affiliated Secret Blizzard conducting ongoing espionage against embassies in Moscow
A new Microsoft report finds that the long-running threat group has gained positions on state-aligned ISPs and Russian telecoms, while tricking foreign embassy staff to download custom malware. First seen on cyberscoop.com Jump to article: cyberscoop.com/russia-secret-blizzard-espionage-embassies-moscow/
-
Kremlin goons caught abusing ISPs to spy on Moscow-based diplomats, Microsoft says
Russia spying on foreign embassies? Say it ain’t so First seen on theregister.com Jump to article: www.theregister.com/2025/07/31/kremlin_goons_caught_abusing_isps/
-
Brit watchdog pushes to rein in Microsoft and AWS with ‘strategic market status’
Regulators around the globe pay attention as results of 21-month cloud probe published First seen on theregister.com Jump to article: www.theregister.com/2025/07/31/cma_aws_microsoft_sms/
-
Low-Code Tools in Microsoft Azure Allowed Unprivileged Access
Using the API Connections for Azure Logic Apps, a security researcher found unauthenticated users could access sensitive data of other customers. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/low-code-tools-azure-allowed-unprivileged-access
-
Phishing-Kampagne über Proofpoint-Link-Wrapping
Clouddflare hat eine neue Analyse seines Threat-Intel-Teams Cloudforce One veröffentlicht. Der Bericht zeigt, wie Angreifer die Link-Wrapping-Funktion von Proofpoint missbrauchen, um unbemerkt auf verschiedene Phishing-Seiten von Microsoft-Office-365 umzuleiten. Phishing war im vergangenen Jahr erneut die häufigste Ursache für Sicherheitsverletzungen und Identitätsdiebstahl. Diese Technik ist besonders gefährlich und effektiv, da Opfer viel eher auf eine vermeintlich…
-
Passwordless Future Years Away Despite Microsoft Authenticator Move
Experts argue that password managers are still useful despite Microsoft Authenticator ditching its capabilities First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/passwordless-years-microsoft/
-
HYCU R-Cloud Plattform bietet umfassende Sichtbarkeit für alle Azure & Microsoft Umgebungen
Moderne Unternehmen sollten sich nicht mit fragmentierten Tools, versteckten Kosten oder der Bindung an einen bestimmten Anbieter zufriedengeben. HYCU R-Cloud bietet ihnen die Transparenz, Kontrolle und Effizienz, die sie zum Schutz ihres gesamten Microsoft-Portfolios benötigen. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/hycu-r-cloud-plattform-bietet-umfassende-sichtbarkeit-fuer-alle-azure-microsoft-umgebungen/a41550/
-
Response to CISA Alert: Microsoft Releases Guidance on Exploitation of SharePoint Vulnerabilities
AttackIQ has released a new emulation that compiles the Tactics, Techniques, and Procedures (TTPs) associated with the exploitation of the CVE-2025-49704, CVE-2025-49706, CVE-2025-53770, and CVE-2025-53771 vulnerabilities, which affect on-premises Microsoft SharePoint servers. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/07/response-to-cisa-alert-microsoft-releases-guidance-on-exploitation-of-sharepoint-vulnerabilities/
-
Applying Tenable’s Risk-based Vulnerability Management to the Australian Cyber Security Centre’s Essential Eight
Tags: ai, attack, breach, business, cloud, compliance, container, control, cvss, cyber, cybersecurity, data, data-breach, defense, endpoint, finance, firewall, framework, google, government, identity, incident response, infrastructure, intelligence, Internet, microsoft, mitigation, network, ransomware, risk, service, software, strategy, technology, threat, tool, update, vpn, vulnerability, vulnerability-management, windows, zero-dayLearn how Thales Cyber Services uses Tenable to help customers navigate the maturity levels of the Essential Eight, enabling vulnerability management and staying ahead of cyber threats. In today’s fast-moving digital world, cyber threats are more advanced and relentless than ever. A single security breach can mean financial loss, reputational damage and operational chaos. That’s…
-
MS Authenticator users face passkey crunch time
The deadline for moving to passkeys in Microsoft Authenticator is rapidly approaching, and users are advised to take action now First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366628067/MS-Authenticator-users-face-passkey-crunch-time
-
Hackers Deploy Cobalt Strike Beacon Using GitHub and Social Media
A sophisticated cyberattack campaign disrupted the Russian IT industry and entities in several other countries, leveraging advanced evasion techniques to deploy the notorious Cobalt Strike Beacon. Attackers ingeniously concealed payload information within user profiles on platforms like GitHub, Microsoft Learn Challenge, Quora, and Russian social networks, blending malicious data into legitimate user-generated content to bypass…