Tag: microsoft
-
Microsoft shares script to restore inetpub folder you shouldn’t delete
Microsoft has released a PowerShell script to help restore an empty ‘inetpub’ folder created by the April 2025 Windows security updates if deleted. As Microsoft previously warned, this folder helps mitigate a high-severity Windows Process Activation privilege escalation vulnerability. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-shares-script-to-restore-inetpub-folder-you-shouldnt-delete/
-
New Rust-Developed InfoStealer Drains Sensitive Data from Chromium-Based Browsers
Tags: browser, chrome, credentials, cyber, cybersecurity, data, google, login, malware, microsoft, programming, rust, threatA newly identified information-stealing malware, crafted in the Rust programming language, has emerged as a significant threat to users of Chromium-based browsers such as Google Chrome, Microsoft Edge, and others. Dubbed >>RustStealer
-
Cybersecurity Snapshot: Experts Issue Best Practices for Migrating to Post-Quantum Cryptography and for Improving Orgs’ Cyber Culture
Tags: access, attack, best-practice, business, cio, ciso, communications, computer, computing, conference, corporate, crypto, cryptography, cyber, cybersecurity, data, defense, email, encryption, finance, government, group, ibm, identity, incident, incident response, infrastructure, jobs, lessons-learned, metric, microsoft, mitre, monitoring, nist, risk, service, strategy, technology, threat, tool, training, update, vulnerability, vulnerability-management, warfareCheck out a new roadmap for adopting quantum-resistant cryptography. Plus, find out how your company can create a better cybersecurity environment. In addition, MITRE warns about protecting critical infrastructure from cyber war. And get the latest on exposure response strategies and on CISO compensation and job satisfaction. Dive into five things that are top of…
-
Microsoft Unveils European Security Effort to Disrupt Cybercrime Networks
Tags: cve, cyber, cybercrime, exploit, flaw, microsoft, network, technology, threat, update, vulnerability, windows, zero-dayA critical heap-based buffer overflow vulnerability, tracked as CVE-2025-24993, has been discovered in the Windows New Technology File System (NTFS), posing a significant threat to millions of Windows users globally. The flaw, patched during Microsoft’s March 2025 Patch Tuesday, was actively exploited as a zero-day in the wild, prompting urgent advisories from both Microsoft and…
-
Microsoft Helps CBI Dismantle Indian Call Centers Behind Japanese Tech Support Scam
India’s Central Bureau of Investigation (CBI) has revealed that it has arrested four individuals and dismantled two illegal call centers that were found to be engaging in a sophisticated transnational tech support scam targeting Japanese citizens.The law enforcement agency said it conducted coordinated searches at 19 locations across Delhi, Haryana, and Uttar Pradesh on May…
-
MSFT-CrowdStrike ‘Rosetta Stone’ for Naming APTs: Meh?
Microsoft and CrowdStrike announced an effort to deconflict the overlapping names of threat groups and reduce confusion for companies, but we’ve been here before. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/microsoft-crowdstrike-rosetta-stone-apt
-
Omada bringt IGA direkt in Microsoft Teams mit dem neuen KI-Assistenten Javi
Javi funktioniert in der vertrauten Umgebung von Microsoft Teams mehrsprachig, geräteübergreifend und mit Fokus auf einfache Nutzung. So lassen sich Arbeitsprozesse beschleunigen, Schatten-IT vermeiden und selbst komplexe IGA-Aufgaben leicht in den Arbeitsalltag integrieren. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/omada-bringt-iga-direkt-in-microsoft-teams-mit-dem-neuen-ki-assistenten-javi/a41064/
-
Chrome und Edge Notfall-Updates und Ärger in Chrome/Edge 137
Kurzer Nachtrag aus den letzten Tagen. Sowohl Google musste dem Chrome-Browser als auch Microsoft dem auf Chromium basierenden Edge-Browser ein dringendes Sicherheitsupdate spendieren. Hintergrund sind Sicherheitslücken, die wohl in freier Wildbahn von Bedrohungsakteuren ausgenutzt wurden. Zudem habe ich zwei Lesermeldungen … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/06/06/chrome-und-edge-notfall-updates-und-edge-aerger/
-
June 2025 Patch Tuesday forecast: Second time is the charm?
Microsoft has been busy releasing more out-of-band (OOB) patches than usual throughout May. The May Patch Tuesday release of updates was typical in number of vulnerabilities … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/06/06/june-2025-patch-tuesday-forecast/
-
Microsoft startet European Security Program
Microsoft umwirbt derzeit intensiv den europäischen Markt, um weiterhin Kunden im Regierungsbereich zu behalten. Dazu hat Redmond ein europäischen Sicherheitsprogramm (European Security Program) angekündigt. Diese neue Initiative diene zur Stärkung der Cybersicherheit in ganz Europa und steht allen europäischen Regierungen … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/06/06/microsoft-startet-european-security-program/
-
Lumma-Infostealer: Analyse des Takedowns
Am 21. Mai 2025 erfolgte eine koordinierte Aktion von Europol, FBI und Microsoft gegen den berüchtigten Lumma-Infostealer. Trotz massiver Eingriffe ist die Malware offenbar nicht endgültig besiegt die Cyber-Kriminellen sind weiterhin aktiv. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/lumma-infostealer-analyse
-
Beware of Fake Zoom Client Downloads Granting Attackers Access to Your Computer
In the wake of the COVID-19 pandemic, collaborative tools like Microsoft Teams, Zoom, and WebEx have become indispensable for remote work, enabling seamless communication with colleagues and clients. However, their widespread adoption has also made them prime targets for cybercriminals. A recent phishing campaign exploiting the popularity of Zoom has surfaced, tricking users into downloading…
-
Hackers Are Stealing Salesforce Data, Google Warns
By Christy Lynch This post summarizes the June 4, 2025 threat intelligence update from Google and offers additional recommendations from Reveal Security based on similar and recently observed attack patterns targeting SaaS applications and cloud infrastructure. Reveal Security monitors the overall cyber landscape for unique threats that can evade legacy detection methodologies. This UNC6040 campaign…
-
Microsoft’s Free Cyber Security Support to European Governments Reflects ‘Deep, Enduring, Unwavering’ Commitment
Microsoft is helping Europe fight AI-based cyberattacks with a free security program tailored for governments. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-microsoft-european-security-program/
-
Microsoft Offers Free Cyber Security Support to European Governments Targeted By State-Sponsored Hackers
Microsoft is helping Europe fight AI-based cyberattacks with a free security program tailored for governments. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-microsoft-european-security-program/
-
Microsoft launches European Security Program to counter nation-state threats
Tags: access, ai, attack, blizzard, cloud, control, country, crime, crimes, cyber, cybercrime, cybersecurity, framework, google, government, group, infrastructure, intelligence, malicious, malware, microsoft, network, open-source, resilience, russia, service, strategy, threat, vulnerabilityThree-component strategy: The European Security Program will operate through three main components designed to strengthen continental cyber defenses.The first element centers on enhanced threat intelligence sharing, where Microsoft will provide European governments with AI-enhanced, real-time insights into nation-state tactics.The company’s Digital Crimes Unit will expand intelligence sharing through the Cybercrime Threat Intelligence Program, giving European…
-
Microsoft makes a ‘proactive investment’ in EU cybersecurity amid bloc’s tensions with US
Microsoft announced a new European Security Program as the company faces criticism over security issues and the EU navigates a changing relationship with the U.S. First seen on therecord.media Jump to article: therecord.media/microsoft-european-security-program
-
Critical flaw in Cisco ISE impacts cloud deployments on AWS, Microsoft Azure, and Oracle Cloud Infrastructure
Cisco fixed a critical flaw in the Identity Services Engine (ISE) that could allow unauthenticated attackers to conduct malicious actions. A vulnerability tracked as CVE-2025-20286 (CVSS score 9.9) in cloud deployments of Cisco ISE on AWS, Microsoft Azure, and Oracle Cloud Infrastructure allows unauthenticated remote attackers to access sensitive data, perform limited administrative actions, modify…
-
Cisco Alerts Users to Critical ISE Vulnerability Exposing Sensitive Data
Cisco has issued a critical security advisory (Advisory ID: cisco-sa-ise-aws-static-cred-FPMjUcm7) for its Identity Services Engine (ISE) when deployed on major cloud platforms”, Amazon Web Services (AWS), Microsoft Azure, and Oracle Cloud Infrastructure (OCI). The vulnerability, tracked as CVE-2025-20286 and classified under CWE-259 (Use of Hard-coded Password), carries a CVSS v3.1 base score of 9.9, indicating…
-
Outlook Users Targeted by New HTML-Based Phishing Scheme
A recent phishing campaign has revealed a sophisticated technique that exploits Microsoft Outlook’s unique handling of HTML emails to conceal malicious links from corporate users. The attack, initially appearing as a standard phishing attempt impersonating a Czech bank, leverages conditional HTML comments to display different content depending on the email client used to open the…
-
Microsoft, CrowdStrike Lead Effort to Map Threat Actor Names
First seen on thesecurityblogger.com Jump to article: www.thesecurityblogger.com/microsoft-crowdstrike-lead-effort-to-map-threat-actor-names/
-
Microsoft unveils free EU cybersecurity program for governments
Microsoft announced in Berlin today a new European Security Program that promises to bolster cybersecurity for European governments. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-unveils-free-eu-cybersecurity-program-for-governments/
-
Microsoft Launches Free Security Program for European Governments
Tags: ai, china, cyber, cybersecurity, government, intelligence, microsoft, ransomware, russia, threatMicrosoft is offering European countries a new cybersecurity program for free to help them defend against threats from nation-states like China and Russia, ransomware gangs, and AI-powered cyber threats through greater intelligence sharing, investments, and partnerships. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/06/microsoft-launches-free-security-program-for-european-governments/
-
Microsoft outlines three-pronged European cyber strategy
Microsoft chair Brad Smith outlines an expansive cyber programme targeting governments across Europe with enhanced threat intelligence and support First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366625190/Microsoft-outlines-three-pronged-European-cyber-strategy
-
Will Massive Security Glossary From Microsoft, Google, CrowdStrike, Palo Alto Improve Collaboration?
“This effort is not about creating a single naming standard,” said Vasu Jakkal, corporate vice president of Microsoft Security. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-microsoft-crowdstrike-threat-actor-name-glossary/
-
Lumma Infostealer Developers Persist in Their Malicious Activities
Tags: credentials, cyber, cybercrime, group, infrastructure, malicious, malware, microsoft, service, toolA coordinated operation by Europol, the FBI, Microsoft, and other public and private sector partners targeted the Lumma infostealer, a prolific malware distributed via a malware-as-a-service (MaaS) model. Known for stealing credentials and being a tool of choice for notorious cybercriminal groups like Scattered Spider, Angry Likho, and CoralRaider, Lumma’s infrastructure faced significant disruption. Starting…