Tag: microsoft
-
Microsoft ClickOnce, AWS exploited in critical infrastructure attacks
First seen on scworld.com Jump to article: www.scworld.com/brief/microsoft-clickonce-aws-exploited-in-critical-infrastructure-attacks
-
FORTÉ Enhances Hybrid Collaboration in Microsoft Teams Rooms with Shure’s IntelliMix Room Kits
Tags: microsoftFirst seen on scworld.com Jump to article: www.scworld.com/native/forte-enhances-hybrid-collaboration-in-microsoft-teams-rooms-with-shures-intellimix-room-kits
-
3 Ways to Get More Out of Your Microsoft 365 Deployment
Tags: microsoftFirst seen on scworld.com Jump to article: www.scworld.com/perspective/3-ways-to-get-more-out-of-your-microsoft-365-deployment
-
Siemens: Fixes for Microsoft Defender Antivirus issue in Simatic PCS underway
First seen on scworld.com Jump to article: www.scworld.com/brief/siemens-fixes-for-microsoft-defender-antivirus-issue-in-simatic-pcs-underway
-
Global credential harvesting campaign hits Microsoft Exchange servers
First seen on scworld.com Jump to article: www.scworld.com/brief/global-credential-harvesting-campaign-hits-microsoft-exchange-servers
-
Microsoft dangles extended Windows 10 support in exchange for Reward Points
Or your cloud-bound soul. Otherwise, $30 please First seen on theregister.com Jump to article: www.theregister.com/2025/06/25/microsoft_free_esu_tier/
-
nOAuth Exploit Enables Full Account Takeover of Entra Cross-Tenant SaaS Applications
A severe security flaw, dubbed nOAuth, has been identified in certain software-as-a-service (SaaS) applications integrated with Microsoft Entra ID, potentially allowing attackers to achieve full account takeover across tenant boundaries. Research conducted by Semperis, disclosed on June 26, 2025, revealed that 9 out of 104 tested applications approximately 9% within the Microsoft Entra App Gallery…
-
Upcoming Microsoft Security, Resilience Updates Includes Ability To Run Services Outside Windows Kernel
Microsoft works with CrowdStrike, Trend Micro, ESET and other cybersecurity vendors to improve Windows security and resilience. First seen on crn.com Jump to article: www.crn.com/news/security/upcoming-microsoft-security-resilience-updates-includes-ability-to-run-services-outside-windows-kernel
-
Microsoft Windows Security, Resiliency Updates: 5 Things To Know
Microsoft is using its Microsoft Virus Initiative to improve competitor deployment practices, bringing a Windows endpoint security platform to private preview and launching quick machine recovery as part of a series of Windows security and resilience moves. First seen on crn.com Jump to article: www.crn.com/news/security/microsoft-windows-security-resiliency-updates-5-things-to-know
-
Microsoft to make Windows more resilient following 2024 IT outage
The company has been working with security partners to make sure future software updates don’t lead to operational disruptions for customers. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/microsoft-windows-resilient-2024-it-outage/751740/
-
Threat Actors Exploit ChatGPT, Cisco AnyConnect, Google Meet, and Teams in Attacks on SMBs
Threat actors are increasingly leveraging the trusted names of popular software and services like ChatGPT, Cisco AnyConnect, Google Meet, and Microsoft Teams to orchestrate sophisticated cyberattacks. According to a recent report by Kaspersky Lab, SMBs, often perceived as less fortified than larger enterprises, are prime targets for both opportunistic hackers and organized cybercrime groups. Rising…
-
KnowBe4 kooperiert mit Microsoft für mehr ESicherheit
KnowBe4 gab eine strategische Integration mit Microsoft zur Stärkung der E-Mail-Sicherheit bekannt. Als erste Initiative im ICES-Anbieter-Ökosystem (Integrated-Cloud-Email-Security) von Microsoft stellt diese Integration eine Blaupause dafür dar, wie führende Sicherheitsanbieter zusammenarbeiten können, um einen verbesserten Schutz für ihre gemeinsamen Kunden zu bieten. KnowBe4-Defend wurde speziell zur Ergänzung der bestehenden E-Mail-Sicherheit von Microsoft-365 entwickelt. Das Tool…
-
Microsoft 365 ‘Direct Send’ abused to send phishing as internal users
An ongoing phishing campaign abuses a little”‘known feature in Microsoft 365 called “Direct Send” to evade detection by email security and steal credentials. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-365-direct-send-abused-to-send-phishing-as-internal-users/
-
Amerikanische Cloud-Applikationen prägen den Business-Alltag
Eine aktuelle, von Eperi beauftragte Techconsult-Erhebung in deutschen Unternehmen belegt, dass die Verbreitung amerikanischer Cloud-Applikationen hoch und die daraus resultierende Abhängigkeit groß ist. Allein Microsoft-365 wird weltweit bei knapp 30 Prozent aller Unternehmen genutzt. Dies legt nahe, dass potenzielle Abnabelungsbestrebungen von amerikanischen Cloud-Anbietern, insbesondere im Bereich des Office-Managements, besonders schwierig sein können. Mit 68,7 Prozent…
-
Microsoft Teams Adds Feature for Admins to Control 365 Certified Apps with Custom Rules
Microsoft is rolling out a major update to Microsoft Teams, empowering administrators with enhanced control over third-party app availability through new rule-based settings in the Teams admin center. This change”, detailed in Microsoft’s recent Message Center update (MC1085133)”, is set to begin global rollout in mid-August 2025, with completion expected by early September 2025. The…
-
Microsoft fixes Outlook bug causing crashes when opening emails
Microsoft has fixed a known issue that will cause the classic Outlook email client to crash when opening emails or starting a new message. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-fixes-outlook-bug-causing-crashes-when-opening-emails/
-
Microsoft confirms Family Safety blocks Google Chrome from launching
Microsoft has confirmed that its Family Safety parental control service is blocking users from launching Google Chrome and other web browsers on Windows systems. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-confirms-family-safety-blocks-google-chrome-from-launching/
-
Cybercriminals Use TeamFiltration Pentesting Framework to Breach Microsoft Teams, OneDrive, Outlook, and More
Tags: breach, cyber, cybercrime, data-breach, exploit, framework, malicious, microsoft, penetration-testing, threat, toolProofpoint threat researchers have exposed an active account takeover (ATO) campaign, dubbed UNK_SneakyStrike, exploiting the TeamFiltration pentesting framework to target Microsoft Entra ID user accounts. Since December 2024, this malicious operation has impacted over 80,000 user accounts across hundreds of organizations, achieving several successful breaches. UNK_SneakyStrike Campaign The attackers have weaponized TeamFiltration a tool originally…
-
KnowBe4 und Microsoft bündeln Kräfte für mehr ESicherheit
Neben einer verbesserten Erkennung von Bedrohungen ermöglicht die Integration auch eine effizientere Arbeit der Security-Teams: Einheitliche SOC-Tools unterstützen bei Analyse, Ursachenforschung und Reaktion schnell, gezielt und effektiv. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/knowbe4-und-microsoft-buendeln-kraefte-fuer-mehr-e-mail-sicherheit/a41246/
-
Windows Family Safety: Chrome-Blockade bestätigt
Nutzer beklagen sich seit Anfang Juni 2025, dass sie den Google Chrome-Browser nicht mehr verwenden können, wenn Microsoft Family Safety unter Windows installiert ist. Ich hatte darüber berichtet und nun hat Microsoft das Ganze offiziell in einem Support-Beitrag bestätigt … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/06/26/windows-family-safety-chrome-blockade-bestaetigt/
-
Hackers abuse Microsoft ClickOnce and AWS services for stealthy attacks
A sophisticated malicious campaign that researchers call OneClik has been leveraging Microsoft’s ClickOnce software deployment tool and custom Golang backdoors to compromise organizations within the energy, oil, and gas sectors. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/oneclik-attacks-use-microsoft-clickonce-and-aws-to-target-energy-sector/
-
The Era of Agentic Security with Microsoft Security Copilot
In the evolving landscape of cyber threats, security teams often find themselves overwhelmed. They are constantly battling an unrelenting barrage of incidents with limited resources. Traditional automation falls short. The dynamic and unpredictable nature of modern attacks keeps threat actors one step ahead of defenders. This is where Microsoft Security Copilot steps in. It’s not..…
-
nOAuth Vulnerability Still Affects 9% of Microsoft Entra SaaS Apps Two Years After Discovery
New research has uncovered continued risk from a known security weakness in Microsoft’s Entra ID, potentially enabling malicious actors to achieve account takeovers in susceptible software-as-a-service (SaaS) applications.Identity security company Semperis, in an analysis of 104 SaaS applications, found nine of them to be vulnerable to Entra ID cross-tenant nOAuth abuse.First disclosed by First seen…
-
Threat Actors Distribute Compromised SonicWall SSL VPN NetExtender to Steal Sensitive Data
Threat actors were discovered disseminating a malicious, altered version of SonicWall’s SSL VPN NetExtender application in a complex cyberattack that was discovered through a partnership between SonicWall and Microsoft Threat Intelligence (MSTIC). NetExtender, a critical tool for remote users, facilitates secure connections to corporate networks, enabling seamless access to applications, file transfers, and network resources…
-
nOAuth Lives on in Cloud App Logins Using Entra ID
Hackers Can Use Unverified Email to Log onto SaaS Apps With Entra ID. A flaw in a Microsoft single sign-on feature allowing cloud app account takeovers discovered in 2023 never really went away, say researchers – notwithstanding a computing giant claim that it almost immediately fixed the vulnerability known as nOAuth. First seen on govinfosecurity.com…
-
Microsoft nOAuth Flaw Still Exposes SaaS Apps Two Years After Discovery
Semperis estimates that at least 15,000 enterprise SaaS applications are still vulnerable to a flaw discovered in 2023 First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/microsoft-noauth-flaw-2025/
-
Windows 11 Configuration Bug Freezes Update Scanning Process
A recently discovered bug in Windows 11 has caused significant frustration among users, as the operating system’s update scanning process can freeze unexpectedly, leaving systems unable to check for or install critical updates. Microsoft has officially acknowledged the issue and is rolling out fixes to affected devices worldwide. The problem, which primarily impacts users running…
-
Beware the Hidden Risk in Your Entra Environment
If you invite guest users into your Entra ID tenant, you may be opening yourself up to a surprising risk. A gap in access control in Microsoft Entra’s subscription handling is allowing guest users to create and transfer subscriptions into the tenant they are invited into, while maintaining full ownership of them. All the guest…
-
APT Attackers Leverage Microsoft ClickOnce to Run Malware as Trusted Applications
The Trellix Advanced Research Center has exposed a highly sophisticated Advanced Persistent Threat (APT) malware campaign dubbed >>OneClik,
-
Mit Einschränkungen: Microsoft bietet kostenlose Updates für Windows 10 bis 2026
Für Privatnutzer sollte das ESU-Programm für Windows 10 ohnehin günstiger sein als für Geschäftskunden. Jetzt geht es sogar ganz ohne Geld. First seen on golem.de Jump to article: www.golem.de/news/mit-einschraenkungen-microsoft-bietet-kostenlose-updates-fuer-windows-10-bis-2026-2506-197431.html