Tag: microsoft
-
Microsoft Extends Windows 10 Security Updates for One Year with New Enrollment Options
Microsoft on Tuesday announced that it’s extending Windows 10 Extended Security Updates (ESU) for an extra year by letting users either pay a small fee of $30 or by sync their PC settings to the cloud.The development comes ahead of the tech giant’s upcoming October 14, 2025, deadline, when it plans to officially end support…
-
Users lack control as major AI platforms share personal info with third parties
Some of the most popular generative AI and large language model (LLM) platforms, from companies like Meta, Google, and Microsoft, are collecting sensitive data and sharing it … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/06/25/ai-platforms-data-sharing/
-
Black Hat SEO Poisoning Search Engine Results For AI to Distribute Malware
IntroductionZscaler ThreatLabz researchers recently uncovered AI-themed websites designed to spread malware. The threat actors behind these attacks are exploiting the popularity of AI tools like ChatGPT and Luma AI. These websites are utilizing platforms such as WordPress and are designed to poison search engine rankings and increase the probability of unsuspecting users landing on these…
-
Microsoft dropping outdated drivers over security fears
Tags: microsoftFirst seen on scworld.com Jump to article: www.scworld.com/news/microsoft-dropping-outdated-drivers-over-security-fears
-
The U.S. House banned WhatsApp on government devices due to security concerns
The U.S. House banned WhatsApp on official devices over security concerns, citing risks flagged by the Chief Administrative Officer. The U.S. House has banned WhatsApp on government devices due to data security concerns. Similar restrictions apply to AI tools like ChatGPT, ByteDance apps, and Microsoft Copilot. >>nuto has deemed WhatsApp a high-risk to users due…
-
Windows 10 KB5061087 update released with 13 changes and fixes
Microsoft has released the June 2025 non-security preview update for Windows 10, version 22H2, with fixes for bugs preventing the Start Menu from launching and breaking scanning features on USB multi-function printers. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-10-kb5061087-update-released-with-13-changes-and-fixes/
-
Windows 10 users can get extended security updates using Microsoft points
Microsoft says Windows 10 home users who want to delay switching to Windows 11 can enroll in the Extended Security Updates (ESU) program using Microsoft Rewards points. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-windows-10-extended-security-updates-available-using-reward-points/
-
Bank of America, Netflix, and Microsoft Hacked to Inject Fake Phone Numbers
Jérôme Segura, cybercriminals are exploiting search parameter vulnerabilities to inject fake phone numbers into the legitimate websites of major brands like Apple, Bank of America, Facebook, HP, Microsoft, Netflix, and PayPal. This sophisticated attack, technically termed a >>search parameter injection attack,
-
Microsoft fixes known issue that breaks Windows 11 updates
Microsoft is rolling out a configuration update designed to address a known issue causing Windows Update to fail on some Windows 11 systems. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-fixes-known-issue-that-breaks-windows-11-updates/
-
Microsoft Office-Zertifikat am 23. Juni 2025 ausgelaufen gibt es Probleme?
Kurze Information an die Leserschaft, die Microsoft Office verwenden. Ein Blog-Leser hat mich gerade informiert, dass am gestrigen 23. Juni 2025 ein Service-Zertifikat für Office-Online-Inhalte abgelaufen ist. Momentan deutet sich an, dass Microsoft die Übersicht über seine Zertifikate bzw. deren … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/06/24/microsoft-office-zertifikat-am-23-juni-2025-ausgelaufen-gibt-es-probleme/
-
Hackers Target Over 70 Microsoft Exchange Servers to Steal Credentials via Keyloggers
Unidentified threat actors have been observed targeting publicly exposed Microsoft Exchange servers to inject malicious code into the login pages that harvest their credentials.Positive Technologies, in a new analysis published last week, said it identified two different kinds of keylogger code written in JavaScript on the Outlook login page -Those that save collected data to…
-
New ‘Echo Chamber’ attack can trick GPT, Gemini into breaking safety rules
“Early planted prompts influence the model’s responses, which are then leveraged in later turns to reinforce the original objective,” the post on Echo Chamber noted. “This creates a feedback loop where the model begins to amplify the harmful subtext embedded in the conversation, gradually eroding its own safety resistances.”The attack works by the attacker starting…
-
LinuxFest Northwest: Barbie’s Journey A CI/CD Tale Of Transformation
Authors/Presenters: Autumn Nash (Product Manager At Microsoft, Specializing In Linux Security) Kerri-Leigh Grady (Solutions Architect At AWS) Our sincere appreciation to LinuxFest Northwest (Now Celebrating Their Organizational 25th Anniversary Of Community Excellence), and the Presenters/Authors for publishing their superb LinuxFest Northwest 2025 video content. Originating from the conference’s events located at the Bellingham Technical College…
-
MCP-Bug bei Asana könnte Unternehmensdaten offengelegt haben
Tags: access, ai, api, authentication, bug, business, chatgpt, ciso, cybersecurity, data-breach, LLM, microsoft, open-source, service, siem, software, tool, trainingCISOs mit einem MCP-Server von Asana in ihrer Umgebung sollten ihre Protokolle und Metadaten auf Datenlecks überprüfen.Die Software-as-a-Service-Plattform Asana zählt zu den beliebtesten Projektmanagement-Tools in Unternehmen. Der Anbieter gab kürzlich bekannt, dass sein MCP-Server (Model Context Protocol) vorübergehend aufgrund eines Bugs offline genommen wurde. Der Server war allerdings bereits nach kurzer Zeit wieder online.Laut Forschern…
-
MCP-Bug bei Asana könnte Unternehmensdaten offengelegt haben
Tags: access, ai, api, authentication, bug, business, chatgpt, ciso, cybersecurity, data-breach, LLM, microsoft, open-source, service, siem, software, tool, trainingCISOs mit einem MCP-Server von Asana in ihrer Umgebung sollten ihre Protokolle und Metadaten auf Datenlecks überprüfen.Die Software-as-a-Service-Plattform Asana zählt zu den beliebtesten Projektmanagement-Tools in Unternehmen. Der Anbieter gab kürzlich bekannt, dass sein MCP-Server (Model Context Protocol) vorübergehend aufgrund eines Bugs offline genommen wurde. Der Server war allerdings bereits nach kurzer Zeit wieder online.Laut Forschern…
-
Microsoft will start removing legacy drivers from Windows Update
Microsoft will start removing legacy drivers from Windows Update to improve driver quality for Windows users but, most importantly, to increase security, the company has … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/06/23/microsoft-will-start-removing-legacy-drivers-from-windows-update/
-
MCP-Bug bei Asana könnte Unternehmensdaten offengelegt haben
Tags: access, ai, api, authentication, bug, business, chatgpt, ciso, cybersecurity, data-breach, LLM, microsoft, open-source, service, siem, software, tool, trainingCISOs mit einem MCP-Server von Asana in ihrer Umgebung sollten ihre Protokolle und Metadaten auf Datenlecks überprüfen.Die Software-as-a-Service-Plattform Asana zählt zu den beliebtesten Projektmanagement-Tools in Unternehmen. Der Anbieter gab kürzlich bekannt, dass sein MCP-Server (Model Context Protocol) vorübergehend aufgrund eines Bugs offline genommen wurde. Der Server war allerdings bereits nach kurzer Zeit wieder online.Laut Forschern…
-
Microsoft Enhances Defender for Office 365 with Detailed Spam and Phishing Analysis
Microsoft has announced a significant upgrade to its Defender for Office 365 platform, introducing a new AI-powered capability designed to provide unprecedented clarity into why emails are classified as spam, phishing, or clean. This enhancement, powered by large language models (LLMs), aims to bolster email security for organizations worldwide by offering clear, human-readable explanations for…
-
Microsoft Reduces Windows 11 24H2 Restore Point Retention from 90 to 60 Days
In a significant change for Windows 11 users, Microsoft has announced that, beginning with the June 2025 security update (KB5060842), system restore points in Windows 11 version 24H2 will now be retained for up to 60 days, down from the previous 90-day period. This adjustment, which also applies to all future releases of Windows 11…
-
Stellar Repair For Outlook: A Comprehensive Review Of The Ultimate PST Repair Tool
Microsoft Outlook is a cornerstone of professional and personal communication, relied upon by millions for email management, calendaring, and task organization. However, Outlook’s Personal Storage Table (PST) files, which store emails, contacts, calendars, and other data, are prone to corruption due to various factors. When PST files become corrupted, users face disruptions, ranging from missing…
-
Microsoft blockiert Google Chrome mittels Schutzfunktion
Seit Anfang Juni können einige Windows-Nutzer Google Chrome nicht mehr verwenden. Schuld daran ist eine Schutzfunktion für Minderjährige. First seen on golem.de Jump to article: www.golem.de/news/windows-schutzfunktion-von-microsoft-blockiert-google-chrome-2506-197357.html
-
CoPilot Control System Deep Dive
Kurze Information für Administratoren, die vor dem Thema “CoPilot” stehen und dieses Features im Unternehmen absichern und verwalten müssen. Microsoft hatte am 17. /18. Juni 2025 eine zweitägige Online-Veranstaltung mit dem Titel “CoPilot Control System Deep Dive” veranstaltet, die Informationen … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/06/23/copilot-control-system-deep-dive/
-
Microsoft Family Safety Now Blocking All Versions of Google Chrome
In a development that has left students, parents, and educators frustrated, Microsoft’s Family Safety feature is now blocking all versions of Google Chrome from launching on Windows devices. The issue, which first surfaced in early June, has persisted for over two weeks without an official fix or comment from Microsoft, raising concerns about both digital…
-
Windows Snipping Tool Now Lets Users Export Captures as GIFs
Microsoft has rolled out a significant update to its popular Snipping Tool, introducing the ability to export screen recordings as animated GIFs”, a feature long requested by users and now available to Windows 11 Insiders in the Canary and Dev Channels. This enhancement, part of Snipping Tool version 11.2505.21.0, aims to streamline the process of…
-
Windows Snipping Tool now lets you create animated GIF recordings
Microsoft announced that the Windows screenshot and screencast Snipping Tool utility is getting support for exporting animated GIF recordings. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-snipping-tool-now-lets-you-create-animated-gif-recordings/
-
Die Sache mit den 16 Milliarden Zugangsdaten
Die Woche ging die Meldung über ein riesiges Datenleck mit 16 Milliarden Zugangsdaten durch die Presse. Riesen-Problem für Apple, Google, Meta, Microsoft & Co. hieß es. Hintergrund ist, dass Sicherheitsforscher auf eine entsprechende Datensammlung stießen, die 16 Milliarden Datensätze mit … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/06/22/die-sache-mit-den-16-milliarden-zugangsdaten/
-
Microsoft Announces New Graph Powered Detection of Hybrid Attack Targeting Organizations
Microsoft has unveiled a groundbreaking advancement in cybersecurity with the integration of the Enterprise Exposure Graph into its threat detection and response capabilities. This cutting-edge solution, part of Microsoft Defender XDR and Microsoft Security Exposure Management (MSEM), is designed to combat the increasing sophistication of hybrid attacks that span on-premises and cloud environments. Innovative Exposure…
-
Microsoft SSL Zertifikat vom Partner-Center abgelaufen
Kurze Information für Microsoft Partner (Cloud Solution Provider etc.), die sich im Microsoft Partner Center verlustieren möchten. Irgend jemand hat bei Microsoft nicht aufgepasst, denn deren SSL-Zertifikat ist sein Tagen ungültig. Beim Versuch eines Zugriffs auf das Portal kommt dann … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/06/21/microsoft-ssl-zertifikat-vom-partner-center-abgelaufen/
-
Microsoft 365 brings the shutters down on legacy protocols
Tags: microsoftFrontPage Remote Procedure Call and others set to be blocked in the name of ‘Secure by Default’ First seen on theregister.com Jump to article: www.theregister.com/2025/06/19/the_microsoft_axeman_is_coming/
-
LinuxFest Northwest: The Intersectionality Of Human Psychology, Security And The Era Of AI And Misinfo
Author/Presenter: Autumn Nash (Product Manager At Microsoft, Specializing In Linux Security Our sincere appreciation to LinuxFest Northwest (Now Celebrating Their Organizational 25th Anniversary Of Community Excellence), and the Presenters/Authors for publishing their superb LinuxFest Northwest 2025 video content. Originating from the conference’s events located at the Bellingham Technical College in Bellingham, Washington; and via the…