Tag: microsoft
-
Microsoft Tightens Security Defaults for Windows 365 and Microsoft 365
First seen on scworld.com Jump to article: www.scworld.com/brief/microsoft-tightens-security-defaults-for-windows-365-and-microsoft-365
-
Microsoft investigates OneDrive bug that breaks file search
Tags: microsoftMicrosoft is investigating a known OneDrive issue that is causing searches to appear blank for some users or return no results even when searching for files they know they’ve already uploaded. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-investigates-onedrive-bug-that-breaks-file-search/
-
Microsoft to remove legacy drivers from Windows Update for security boost
Microsoft has announced plans to periodically remove legacy drivers from the Windows Update catalog to mitigate security and compatibility risks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-to-remove-legacy-drivers-from-windows-update-for-security-boost/
-
Azure Misconfiguration Lets Attackers Take Over Cloud Infrastructure
A recent security analysis has revealed how a chain of misconfigurations in Microsoft Azure can allow attackers to gain complete control over an organization’s cloud infrastructure, from initial access to full tenant takeover. The attack path, demonstrated using real-world tools and PowerShell scripts, highlights the urgent need for organizations to harden their Azure deployments and…
-
Microsoft 365 blockt alte Authentication-Protokolle ab Mitte Juni 2025
Ich ziehe mal ein Themen in einem Beitrag heraus, das mir die Tage untergekommen ist. Microsoft versucht die Sicherheit bei MS 365 zu erhöhen. Dazu werden ab Mitte Juli 2025 “Secure by Default-Einstellungen” für veraltete Authentication-Protokolle in Microsoft 365 eingeführt. Administratoren … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/06/20/microsoft-365-blockt-alte-authentication-protokolle-ab-mitte-juni-2025/
-
Microsoft boosts default security of Windows 365 Cloud PCs
Windows 365 Cloud PCs now come with new default settings aimed at preventing / minimizing data exfiltration and malicious exploits, Microsoft has announced. Windows 365 Cloud … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/06/20/microsoft-boosts-default-security-of-windows-365-cloud-pcs/
-
RPS und FPRPC: Microsoft blockt Legacy-Protokolle für Microsoft 365
Tags: microsoftDurch die Änderung werden einige Apps und Dienste, welche die beiden Protokolle nutzen, nicht mehr richtig funktionieren. First seen on golem.de Jump to article: www.golem.de/news/rps-und-fprpc-microsoft-blockt-legacy-protokolle-fuer-microsoft-365-2506-197313.html
-
Microsoft Introduces Enhanced Security Defaults for Windows 365 Cloud PCs
Microsoft has announced a significant update to the security posture of its Windows 365 Cloud PCs, introducing new secure-by-default capabilities designed to fortify virtual desktop environments against modern cyber threats. These changes, set to roll out in the second half of 2025, reflect Microsoft’s ongoing commitment to its Secure Future Initiative (SFI) and the evolving…
-
Microsoft Defender for Office 365 to Block Email Bombing Attacks
First seen on thesecurityblogger.com Jump to article: www.thesecurityblogger.com/microsoft-defender-for-office-365-to-block-email-bombing-attacks/
-
Microsoft unveils new security defaults for Windows 365 Cloud PCs
Microsoft has announced new Windows 365 security defaults starting in the second half of 2025 and affecting newly provisioned and reprovisioned Cloud PCs. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-unveils-new-security-defaults-for-windows-365-cloud-pcs/
-
Golden SAML Attack: How Attackers Gain Control of Federation Server’s Private Key
The Golden SAML assault is a lesser-known but much more dangerous threat in a world where password-based hacks breach millions of accounts every month. Unlike common password sprays or phishing attempts, Golden SAML attacks are rare, with Microsoft reporting only 20 incidents across fewer than ten unique customers over the past 24 months as of…
-
Firma aus Aachen soll Daten von Microsoft-Kunden schützen – Microsoft-CEO kündigt nächste Schritte für digitale Souveränität an
First seen on security-insider.de Jump to article: www.security-insider.de/microsoft-ceo-kuendigt-naechste-schritte-fuer-digitale-souveraenitaet-an-a-21b6223409a85a4da8699229ea1ba3ed/
-
Uncover LOTS Attacks Hiding in Trusted Tools, Learn How in This Free Expert Session
Most cyberattacks today don’t start with loud alarms or broken firewalls. They start quietly”, inside tools and websites your business already trusts.It’s called “Living Off Trusted Sites” (LOTS)”, and it’s the new favorite strategy of modern attackers. Instead of breaking in, they blend in.Hackers are using well-known platforms like Google, Microsoft, Dropbox, and Slack as…
-
Microsoft Entra ID Adds Passkey (FIDO2) Support in Public Preview
Microsoft has announced a significant update to its identity platform, Microsoft Entra ID, with the introduction of expanded passkey (FIDO2) support in public preview. Set to roll out globally from mid-October to mid-November 2025, this enhancement marks a major step in Microsoft’s ongoing push toward passwordless authentication and improved enterprise security, as per a report…
-
MY TAKE: Microsoft takes ownership of AI risk, Google, Meta, Amazon, OpenAI look the other way
Last week at Microsoft Build, Azure CTO Mark Russinovich made headlines by telling the truth. Related: A basis for AI optimism In a rare moment of public candor from a Big Tech executive, Russinovich warned that current AI architectures”, particularly… (more”¦) First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/06/my-take-microsoft-takes-ownership-of-ai-risk-google-meta-amazon-openai-look-the-other-way/
-
Veeam Backup Replication 12.3.2 schließt kritische Schwachstellen (CVE-2025-23121 etc.)
Nutzer von Veeam Backup & Replication müssen reagieren. Der Anbieter Veeam hat zum 17. Juni 2025 Veeam Backup & Replication 12.3.2 sowie Veeam Agent for Microsoft Windows 6.3.2 veröffentlicht. Veeam Backup & Replication 12.3.2 schließt unter anderem eine kritische Remote … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/06/17/veeam-backup-replication-12-3-2-schliesst-kritische-schwachstellen-cve-2025-23121-etc/
-
Researchers unearth keyloggers on Outlook login pages
Unknown threat actors have compromised internet-accessible Microsoft Exchange Servers of government organizations and companies around the world, and have injected the … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/06/17/researchers-unearth-keyloggers-on-outlook-login-pages/
-
Microsoft fixes Surface Hub boot issues with emergency update
Microsoft has released an emergency update to fix a known issue causing startup failures for some Surface Hub v1 devices running Windows 10. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-fixes-surface-hub-boot-issues-with-emergency-update/
-
Workaround verfügbar: Outlook nervt Nutzer mit Absturz beim Öffnen von E-Mails
E-Mails mit Outlook Classic zu öffnen, könnte sich dieser Tage als äußerst nervig erweisen. Laut Microsoft stürzt die Anwendung wiederholt ab. First seen on golem.de Jump to article: www.golem.de/news/workaround-verfuegbar-outlook-nervt-nutzer-mit-absturz-beim-oeffnen-von-e-mails-2506-197208.html
-
Microsoft Promises to Keep European Cloud Data in Europe
Microsoft’s Sovereign Cloud solutions are designed to ensure European cloud data is stored and processed in Europe First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/microsoft-european-cloud-data/
-
State-sponsored hackers compromised the email accounts of several Washington Post journalists
State-sponsored hackers compromised the email accounts of several journalists working at the Washington Post. A cyberattack, likely carried out by state-sponsored hackers, compromised the Microsoft email accounts of Washington Post journalists, including reporters covering China and national security. >>A cyberattack on the Washington Post compromised email accounts of several journalists and was potentially the work…
-
8 tips for mastering multicloud security
Tags: access, attack, automation, business, ciso, cloud, compliance, conference, control, cybersecurity, data, detection, framework, google, governance, identity, intelligence, least-privilege, malware, microsoft, monitoring, okta, resilience, risk, service, siem, skills, software, strategy, technology, threat, tool, training, vulnerability2. Create unified security governance: A unified security governance model should be established, spanning all cloud environments and supported by centralized identity management, visibility, automation, and policy enforcement, advises Nigel Gibbons, director and senior advisor at security services firm NCC Group.This approach, Gibbons says, minimizes complexity and silos by creating consistent security controls across cloud…
-
Netskope Deepens Microsoft Integration to Strengthen Data Security and Governance Across the Enterprise
First seen on scworld.com Jump to article: www.scworld.com/news/netskope-deepens-microsoft-integration-to-strengthen-data-security-and-governance-across-the-enterprise
-
Washington Post Staffer Emails Targeted in Cyber Breach
Journalists’ Microsoft accounts were breached, which would have given attackers access to emails of staff reporters covering national security, economic policy, and China. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/washington-post-staffer-emails-targeted-cyber-breach
-
Washington Post Hacked Multiple Journalists’ Email Accounts Compromised
The Washington Post confirmed late last week that its email systems were targeted in a cyberattack, resulting in the compromise of several journalists’ email accounts. >>The Wall Street Journal, which first reported the breach, said it was potentially the work of a foreign government.
-
Copilot AI Bug Could Leak Sensitive Data via Email Prompts
Microsoft Patched Flaw Allowing Attackers to Hijack Copilot Responses. A well-phrased email was all an attacker would have needed to trick Microsoft Copilot into handing over sensitive data until the operating system giant patched the vulnerability. The zero-click prompt injection attack vulnerability received a CVSS severity score of 9.3. First seen on govinfosecurity.com Jump to…
-
Washington Post Journalists’ Microsoft Email Accounts Hacked
The Microsoft email accounts of several Washington Post journalists whose coverage includes national security and economic policy, including China, where hacked and could give the bad actors access to the messages that were sent and received. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/06/washington-post-journalists-microsoft-email-accounts-hacked/
-
Erster Zero-Click-Angriff auf Microsoft 365 Copilot
Eine Lücke in Microsoft 365 Copilot ermöglicht es, sensible Daten zu stehlen.Stellen Sie sich einen Angriff vor, der so heimlich ist, dass er keine Klicks, keine Downloads und keine Warnungen erfordert es reicht eine einzelne E-Mail, die in Ihrem Posteingang landet. Das ist der Fall bei EchoLeak, einer kritischen Sicherheitslücke in Microsoft 365 Copilot. Sie…