Tag: microsoft
-
Brussels Court Slams Tracking-Based Ads, Upholds GDPR Privacy Standards
The Brussels Court of Appeal ruled on May 14, 2025, that the consent model used in tracking-based advertising by major tech companies such as Google, Microsoft, Amazon, and X (formerly Twitter) does not comply with EU privacy laws, including the General Data Protection Regulation (GDPR). First seen on thecyberexpress.com Jump to article: thecyberexpress.com/brussels-court-tracking-ads-gdpr/
-
Hackers Exploit RVTools to Deploy Bumblebee Malware on Windows Systems
A reliable VMware environment reporting tool, RVTools, was momentarily infiltrated earlier this week on May 13, 2025, to disseminate the sneaky Bumblebee loader virus, serving as a sobering reminder of the vulnerabilities present in software supply chains. This incident, detected by a security operations team through a high-confidence alert from Microsoft Defender for Endpoint, revealed…
-
Digitale Souveränität: Microsoft sperrt Zugriffe auf E-Mail/Cloud willkürlich (Ankläger Strafgerichtshof, chinesische Uni-Einrichtung)
Kurzer Beitrag der Art “Digitale Souveränität: Habt ihr nun den Schuss endlich gehört”. Microsoft hat das Mail-Konto des Chefanklägers des Internationalen Gerichtshofs blockiert Grund waren Sanktionen der US-Regierung unter Trump. Gleiches gilt für eine Genom-Firma im Umfeld einer chinesischen … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/05/19/digitale-souveraenitaet-microsoft-sperrt-zugriffe-auf-e-mail-cloud-willkuerlich-richter-chinesische-einrichtung/
-
Windows 10/11: Defender mit simplen Tool Defendnot deaktivierbar
Microsoft hat in Windows 10 und Windows 11 eine Schnittstelle (API) eingebaut, über die Hersteller von Antivirus-Software bei deren Installation den Microsoft Defender deaktivieren können. Einige Leute (darunter ein Blog-Leser) haben nun gezeigt, wie man mit einer einfachen Software (no-defender … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/05/19/windows-10-11-defender-mit-simplen-tool-deaktivierbar/
-
Windows 10/11: Defender mit simplen Tool deaktivierbar
Microsoft hat in Windows 10 und Windows 11 eine Schnittstelle (API) eingebaut, über die Hersteller von Antivirus-Software bei deren Installation den Microsoft Defender deaktivieren können. Einige Leute (darunter ein Blog-Leser) haben nun gezeigt, wie man mit einer einfachen Software (no-defender … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/05/19/windows-10-11-defender-mit-simplen-tool-deaktivierbar/
-
Bitlocker-Verschlüsselung über Bitpixie (CVE-2023-21563) ausgehebelt
Die von Microsoft für Windows verwendete Bitlocker-Verschlüsselung für Datenträger lässt sich über die Bitpixie-Schwachstelle (CVE-2023-21563) per Software aushebeln, wenn gewisse Randbedingungen gelten. Ein Sicherheitsforscher hatn gezeigt, wie sich der Master-Key, bei fehlender Pre-Boot-Authentifizierung unter Windows binnen Minuten, ohne Hardware-Hack, aus … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/05/18/windows-bitlocker-verschluesselung-ueber-bitpixie-cve-2023-21563-ausgehebelt/
-
Microsoft pulls MS365 Business Premium from nonprofits
Microsoft giveth and Microsoft taketh away First seen on theregister.com Jump to article: www.theregister.com/2025/05/16/microsoft_pulls_ms365_business_premium/
-
Week in review: Microsoft patches 5 actively exploited 0-days, recently fixed Chrome vulnerability exploited
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Patch Tuesday: Microsoft fixes 5 actively exploited zero-days On May 2025 … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/05/18/week-in-review-microsoft-patches-5-actively-exploited-0-days-recently-fixed-chrome-vulnerability-exploited/
-
Microsoft winnows: Layoffs hit software engineers hard
Python, TypeScript, Azure SDK devs among those let go First seen on theregister.com Jump to article: www.theregister.com/2025/05/16/microsofts_axe_software_developers/
-
Mai 2025-Patchday: Tenable Einschätzung zu Schwachstellen
Zum 13. Mai 2025 hat Microsoft ja zahlreiche Sicherheits-Updates für Windows, Office und weitere Produkte veröffentlich. Ich hatte zeitnah einen kurzen Überblick über die adressierten Schwachstellen gegeben. Sicherheitsanbieter Tenable hat mir im Nachgang noch deren Einschätzung zu den Sicherheitslücken übermittelt, … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/05/17/mai-2025-patchday-einschaetzung-zu-schwachstellen/
-
New ‘Defendnot’ tool tricks Windows into disabling Microsoft Defender
A new tool called ‘Defendnot’ can disable Microsoft Defender on Windows devices by registering a fake antivirus product, even when no real AV is installed. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/new-defendnot-tool-tricks-windows-into-disabling-microsoft-defender/
-
OutBand-Updates für Windows 11 24H2 LTSC und Windows Server 2008/R2 (Mai 2025)
Noch ein kleiner Nachtrag für Administratoren von Windows Server 2008/R2. Es gab zum 13. Mai 2025 Out-of-Band-Updates für diese Betriebssystemversionen, um Sicherheitslücken zu schließen. Und für Windows 11 24H2 Enterprise LTSC hat Microsoft wohl auch ein Sonderupdate zum Schließen von … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/05/17/out-of-band-updates-fuer-windows-11-24h2-ltsc-und-windows-server-2008-r2-mai-2025/
-
Microsoft confirms May Windows 10 updates trigger BitLocker recovery
Microsoft has confirmed that some Windows 10 and Windows 10 Enterprise LTSC 2021 systems will boot into BitLocker recovery after installing the May 2025 security updates. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-confirms-may-windows-10-updates-trigger-bitlocker-recovery/
-
Hackers exploit VMware ESXi, Microsoft SharePoint zero-days at Pwn2Own
During the second day of Pwn2Own Berlin 2025, competitors earned $435,000 after exploiting zero-day bugs in multiple products, including Microsoft SharePoint, VMware ESXi, Oracle VirtualBox, Red Hat Enterprise Linux, and Mozilla Firefox. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-exploit-vmware-esxi-microsoft-sharepoint-zero-days-at-pwn2own/
-
Hackers Leveraging PowerShell to Bypass Antivirus and EDR Defenses
Cybersecurity researchers have uncovered a growing trend in which threat actors are exploiting Microsoft PowerShell a legitimate Windows command-line interface to bypass advanced antivirus and Endpoint Detection and Response (EDR) defenses. This technique, often termed as “Living off the Land” (LotL), allows attackers to leverage built-in system utilities, reducing their reliance on external malicious payloads…
-
Proofpoint Buys Hornetsecurity, A Microsoft 365 Security Specialist For $1 Billion
Cybersecurity giant Proofpoint has announced its agreement to acquire Hornetsecurity Group, a leading European provider of AI-powered Microsoft 365 security solutions. The deal, reportedly valued at $1 billion, is expected to close in the second half of 2025, although exact financial terms were not publicly disclosed in the announcement. This strategic move significantly strengthens Proofpoint’s…
-
Proofpoint buying Hornetsecurity in a play to expand email security scope
One of many big purchases in the industry: While the terms are confidential, sources have reported the price of the Hornetsecurity purchase, which is expected to close in the second half of 2025, to be well over $1 billion. This would make it Proofpoint’s largest acquisition, and also one of the biggest cybersecurity deals in…
-
ChatGPT will soon record, transcribe, and summarize your meetings
OpenAI may be planning to challenge Microsoft Teams Copilot integration with a new “Record” feature in ChatGPT. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/artificial-intelligence/chatgpt-will-soon-record-transcribe-and-summarize-your-meetings/
-
After helping Russia on the ground North Korea targets Ukraine with cyberespionage
Tags: credentials, cyber, cyberespionage, email, government, hacker, identity, intelligence, korea, microsoft, north-korea, phishing, resilience, risk, russia, ukraineCredential harvesting: Before the phishing emails, the same Ukrainian government entities were targeted with email alerts impersonating Microsoft and claiming unusual sign-in activity was detected on their accounts. The victims were asked to perform identity verification by clicking on a button, which took them to credential harvesting pages.The Proofpoint researchers didn’t manage to obtain any…
-
Proofpoint to acquire Hornetsecurity for over $1 billion
Proofpoint has entered into an agreement to acquire Hornetsecurity Group, a Germany-based provider of Microsoft 365 security services, in a deal reportedly valued at more than $1 billion. The acquisition, described as the largest in Proofpoint’s history, comes amid accelerating consolidation in the cybersecurity industry as companies seek to broaden their offerings to enterprise customers…
-
Belgisches Gericht urteilt: Das TCF-Framework ist nicht DSGVO-konform
Ein belgisches Gericht hat jetzt über eine Klage von Datenschützern zum TCF-Framework geurteilt. Die Richter sehen das TCF-Framework als nicht DSGVO-konform an. Damit bekommt die Online-Werbebranche um Microsoft, Google und Co. ein Problem, weil sie die Cookie-Zustimmung über das TCF-Framework … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/05/15/belgisches-gericht-das-tcf-framework-ist-nicht-dsgvo-konform/
-
Windows 10 Users Get 3 More Years of Microsoft 365 Security Updates
In a surprise reversal, Microsoft has adjusted Microsoft 365 Apps support for Windows 10, granting security updates through 2028 as many users are delaying Windows 11 upgrades. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-microsoft-365-windows-10-extend-support/
-
Microsoft needs to get serious about secure software, or we’ll find a new IT partner
First seen on scworld.com Jump to article: www.scworld.com/perspective/microsoft-needs-to-get-serious-about-secure-software-or-well-find-a-new-it-partner
-
Kyndryl Expands Distributed Cloud Services with Microsoft Adaptive Cloud Integration
First seen on scworld.com Jump to article: www.scworld.com/news/kyndryl-expands-distributed-cloud-services-with-microsoft-adaptive-cloud-integration
-
Google patches Chrome vulnerability used for account takeover and MFA bypass
How could this be exploited?: OAuth provides a way of giving access to something without the need for a password. It’s useful in multiple scenarios, for example, in single sign-on (SSO). Users might also encounter it when giving a contact access to a file or document in a cloud service such as Microsoft 365 without…
-
Breach Roundup: SAP NetWeaver Flaw Draws Hackers
Tags: breach, conference, credentials, flaw, hacker, ivanti, microsoft, north-korea, russia, sap, zero-dayAlso, DOGE Employee’s Credentials Found in Infostealer Dumps. This week, SAP NetWeaver flaw drew hackers, zero-days in Ivanti EPMM, DOGE employee’s credentials found in infostealer dumps and Nucor halted operations. North Korean hackers targeted South Koreans with fake conference invites, Russian hackers targeted webmail servers and Microsoft fixed 72 flaws. First seen on govinfosecurity.com Jump…
-
Proofpoint to acquire European cloud security firm Hornetsecurity for over $1 billion
In a deal set to close later this year, cybersecurity giant Proofpoint is acquiring German firm Hornetsecurity, which specializes in protecting companies from risks associated with Microsoft 365. First seen on therecord.media Jump to article: therecord.media/proofpoint-hornetsecurity-acquisition
-
Device-Code-Phishing sollte nicht auf die leichte Schulter genommen werden
Vor kurzem haben Microsoft-Forscher in einem Blogbeitrag von einer neuartigen Phishing-Kampagne berichtet, bei der die Angreifer es auf die Eingabe von Gerätecodes abgesehen haben. Wohl Mitte des vergangenen Jahres hatte eine Gruppe Cyberkrimineller die Device-Code-Phishing-Kampagne gestartet. Ihr Ziel: staatliche Stellen, NGOs und Privatunternehmen. Device-Codes kommen häufig als Authentifizierungsmethode zur Absicherung eines digitalen Dienstes zum Einsatz.…
-
CISA Alerts on Five Active Zero-Day Windows Vulnerabilities Being Exploited
Tags: cisa, cyber, cybersecurity, exploit, infrastructure, kev, microsoft, mitigation, network, risk, vulnerability, windows, zero-dayCybersecurity professionals and network defenders, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five newly identified Windows 0-day vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. These vulnerabilities, currently exploited in the wild, present significant risks for organizations relying on Microsoft Windows environments. The CISA urges all stakeholders to prioritize immediate mitigation efforts…
-
Patch Tuesday: Microsoft Patches 78 Vulnerabilities, 5 Zero-Day Flaws
Microsoft patched vulnerabilities for the Common Log File System driver, Microsoft Edge, SharePoint, and more. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-microsoft-patch-tuesday-may-2025/