Tag: microsoft
-
Abusing Trust: Threat Actors Leverage Signed Drivers for Stealthy Windows Kernel Exploits
Cybercriminals continue to use kernel-level malware as a preferred weapon against Windows systems amid a terrifying increase in cyberthreats. Operating at ring 0 the highest privilege level in the operating system such malware grants attackers unparalleled access to disable security defenses, maintain persistence, and operate undetected. Despite Microsoft’s robust countermeasures like PatchGuard, Driver Signature Enforcement…
-
BladedFeline Exploits Whisper and PrimeCache to Breach IIS and Microsoft Exchange Servers
ESET researchers have uncovered a series of malicious tools deployed by BladedFeline, an Iran-aligned advanced persistent threat (APT) group, targeting Kurdish and Iraqi government officials. Active since at least 2017, BladedFeline has been linked with medium confidence to the notorious OilRig APT group, known for cyberespionage across the Middle East. Sophisticated Cyberespionage Campaign The group’s…
-
NightEagle hackers exploit Microsoft Exchange flaw to spy on China’s strategic sectors
Attackers pursued stealthy persistence: Following successful exploitation of the zero-day, attackers deploy a modified Go-based version of Chisel, an open-source SOCKS tunneling tool, scheduling it to run every four hours and establish covert tunnels to their C2 servers.This allowed them to move in and out of the network whenever they wanted, enabling persistence for over…
-
KI-Governance bei Hyperscalern – Microsofts Transparenzbericht legt Kontrollarchitektur offen
First seen on security-insider.de Jump to article: www.security-insider.de/microsofts-transparenzbericht-legt-kontrollarchitektur-offen-a-8c1ba5e622a653bb85f9af75b9a0bf42/
-
Windows Update Revamped with Smarter Interface for Security Notifications
Microsoft has announced a significant update to the Windows Update experience, introducing a smarter and more responsive interface designed to keep users better informed about their device’s security status. This latest update, available for Windows 11 version 21H2 and Windows 10 versions 21H2 and 22H2, aims to enhance user awareness regarding critical security updates and…
-
Microsoft to Remove PowerShell 2.0 from Windows 11 Due to Security Risks
Microsoft has announced a significant change for Windows 11 users: the removal of Windows PowerShell 2.0, a legacy scripting platform, from upcoming builds. This move, first revealed in the Windows 11 Insider Preview Build 27891 released to the Canary Channel, is part of the company’s ongoing efforts to enhance system security and streamline the operating…
-
July 2025 Patch Tuesday forecast: Take a break from the grind
There was a barrage of updates released the week of June 2025 Patch Tuesday. This included security updates from Adobe, Google, Microsoft, Mozilla, and others. But it has been … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/07/07/july-2025-patch-tuesday-forecast/
-
Microsoft finally bids farewell to PowerShell 2.0
Venerable command line tool to depart Windows First seen on theregister.com Jump to article: www.theregister.com/2025/07/04/microsoft_finally_bids_farewell_to/
-
Massive spike in use of .es domains for phishing abuse
¡Cuidado! Time to double-check before entering your Microsoft creds First seen on theregister.com Jump to article: www.theregister.com/2025/07/05/spain_domains_phishing/
-
Von Scratch zu Quellcode: Microsoft ehrt jungen Sicherheitsforscher
Tags: microsoftAls 13-Jähriger hat er Microsoft Teams gehackt und seitdem eine Vielzahl weiterer Sicherheitslücken aufgedeckt. First seen on golem.de Jump to article: www.golem.de/news/von-scratch-zu-quellcode-microsoft-ehrt-jungen-sicherheitsforscher-2507-197797.html
-
NightEagle APT Exploits Microsoft Exchange Flaw to Target China’s Military and Tech Sectors
Tags: apt, china, cybersecurity, defense, exploit, flaw, government, microsoft, military, network, technology, threat, zero-dayCybersecurity researchers have shed light on a previously undocumented threat actor called NightEagle (aka APT-Q-95) that has been observed targeting Microsoft Exchange servers as a part of a zero-day exploit chain designed to target government, defense, and technology sectors in China.According to QiAnXin’s RedDrip Team, the threat actor has been active since 2023 and has…
-
Verified, but vulnerable: Malicious extensions exploit IDE trust badges
Sideloaded extensions are particularly vulnerable: After confirming the behavior on VSCode, OX extended their investigation to other platforms, including Visual Studio, IntelliJ IDEA, and Cursor.The researchers said that despite the differences in file structures and verification mechanisms across platforms, they were able to identify the requests used for verification and locate the relevant values within…
-
Boxxe bolsters position with CAE buy
Channel consolidation continues with Cisco and Microsoft partner snapped up in the latest deal First seen on computerweekly.com Jump to article: www.computerweekly.com/microscope/news/366627099/boxxe-bolsters-position-with-CAE-buy
-
Researchers Discover New Method to Identify Azure Arc in Enterprise Environments and Maintain Persistence
Security researchers have discovered novel ways to identify and take advantage of Microsoft Azure Arc in business settings, which is a major advancement in cybersecurity and may reveal weaknesses in this hybrid management system. Introduced in 2019, Azure Arc extends Azure’s native management capabilities to non-Azure resources, including on-premises servers and Kubernetes clusters, through the…
-
Microsoft Windows Firewall complains about Microsoft code
Just ignore the warnings. Nothing to see here. Move along First seen on theregister.com Jump to article: www.theregister.com/2025/07/03/microsoft_windows_firewall_error/
-
Azure API Vulnerabilities Expose VPN Keys and Grant Over-Privileged Access via Built-In Roles
Token Security experts recently conducted a thorough investigation that exposed serious security weaknesses in Microsoft Azure’s Role-Based Access Control (RBAC) architecture. Azure RBAC, the backbone of permission management in the cloud platform, allows administrators to assign roles to users, groups, or service principals with predefined permissions at varying scopes, from entire subscriptions to specific resources.…
-
Microsoft investigates ongoing SharePoint Online access issues
Microsoft is investigating an ongoing incident causing intermittent issues for users attempting to access SharePoint Online sites. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-investigates-ongoing-sharepoint-online-access-issues/
-
Microsoft shuts down 3,000 email accounts created by North Korean IT workers
Microsoft said it has spent years monitoring North Korea’s campaign to get its citizens hired in IT roles at U.S. companies and recently saw changes in how the campaign operates. First seen on therecord.media Jump to article: therecord.media/microsoft-shuts-down-3000-north-korea-it-worker-email
-
Microsoft Acknowledges Error Entry in Windows Firewall With Advanced Security
Microsoft has officially confirmed that its recent Windows 11 update, KB5060829, is causing unexpected error entries in the Windows Firewall With Advanced Security logs. The company has assured users and IT administrators that these errors, while potentially alarming, do not indicate any malfunction or security risk and can be safely ignored. Following the installation of…
-
Microsoft Edge Fixes Actively Exploited Chromium Flaw, Update Immediately
Microsoft has released a critical security update for its Edge browser, addressing a high-severity vulnerability in the Chromium engine that is currently being exploited in the wild. The update, available in Microsoft Edge Stable Channel Version 138.0.3351.65, patches CVE-2025-6554″, a flaw that security experts urge all users to remediate without delay. CVE-2025-6554 is a type…
-
Attackers Impersonate Top Brands in Callback Phishing
Microsoft, PayPal, Docusign, and others are among the trusted brands threat actors use in socially engineered scams that try to get victims to call adversary-controlled phone numbers. First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/attackers-top-brands-callback-phishing
-
13-Year-Old Dylan Joins Forces with Microsoft Security Response Center as the Youngest Security Researcher
Dylan, 13, has accomplished a remarkable achievement by becoming the youngest security researcher to work with the Microsoft Security Response Center (MSRC), leaving his mark on the history of cybersecurity. His journey from tinkering with Scratch, a visual programming language for creating games, to identifying critical vulnerabilities in Microsoft products showcases a rare blend of…
-
New ‘BUBBAS GATE’ Malware Advertised on Telegram Boasts SmartScreen and AV/EDR Bypass
A new malware loader dubbed”BUBBAS GATE”has surfaced on underground forums and Telegram channels, drawing attention for its bold claims of advanced evasion capabilities, including bypassing Microsoft’s SmartScreen and modern AV/EDR solutions. The loader was first advertised on June 22, 2025, with the threat actor touting a suite of features designed to evade detection and maximize…
-
Microsoft, Office und der Brass mit KI und CoPilot-Gängelung Teil I
Ich ziehe mal ein leidiges Thema zu einem eigenen Blog-Beitrag zusammen. Microsoft treibt ja mit aller Gewalt die “Sau AI durchs Dorf” und sorgt zum 1. Juli 2025 mit einer Zwangsbeglückung seiner Office-Anwender für Frust. Wie kann man das abschalten? … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/07/03/microsoft-office-und-der-brass-mit-ki-und-copilot-gaengelung-teil-i/
-
Exchange Server Subscription Edition now available
Microsoft has announced that the Exchange Server Subscription Edition (SE) is now available to all customers of its enterprise email service. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-exchange-server-subscription-edition-now-available/
-
Microsoft to Lay Off 9,000 Employees, Affecting 4% of Workforce
Microsoft announced that it will lay off approximately 9,000 employees worldwide, representing nearly 4% of its global workforce of 228,000 as of June 2024. This move marks the company’s second significant round of job cuts this year, following the elimination of about 6,000 positions in May, and brings the total number of layoffs since May…
-
Eigenartige Firewall-Fehler: Microsoft gesteht Update-Panne bei Windows 11 24H2
Unter Windows 11 24H2 werden seit dem Update KB5060829 merkwürdige Firewall-Fehler protokolliert. Laut Microsoft besteht kein Grund zur Sorge. First seen on golem.de Jump to article: www.golem.de/news/update-panne-bei-microsoft-firewall-fehler-in-windows-11-koennen-ignoriert-werden-2507-197719.html
-
Microsoft asks users to ignore Windows Firewall config errors
Microsoft asked customers this week to disregard incorrect Windows Firewall errors that appear after rebooting their systems following the installation of the June 2025 preview update. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-asks-users-to-ignore-windows-firewall-config-errors/
-
Schutz vor Ransomware, Migration von VMware zu Hyper-V und Backup für Microsoft 365 – Flexible Datensicherung mit Zmanda: Hybridlösungen für Unternehmen
First seen on security-insider.de Jump to article: www.security-insider.de/flexible-datensicherung-mit-zmanda-hybridloesungen-fuer-unternehmen-a-b8f6645bff5b3e471e09cc0d74cee6a2/
-
Update-Panne bei Microsoft: Firewall-Fehler in Windows 11 können ignoriert werden
Unter Windows 11 24H2 werden seit dem Update KB5060829 merkwürdige Firewall-Fehler protokolliert. Laut Microsoft besteht kein Grund zur Sorge. First seen on golem.de Jump to article: www.golem.de/news/update-panne-bei-microsoft-firewall-fehler-in-windows-11-koennen-ignoriert-werden-2507-197719.html