Tag: microsoft
-
Windows 10: Support für Microsoft-365-Apps überraschend erweitert
Entgegen früheren Angaben will Microsoft Windows-10-Nutzer nun doch noch weiter mit Sicherheitsupdates für Office-Anwendungen versorgen. First seen on golem.de Jump to article: www.golem.de/news/windows-10-support-fuer-microsoft-365-apps-ueberraschend-erweitert-2505-196095.html
-
New Exploit Method Extracts Microsoft Entra Tokens Through Beacon
A novel exploit method leveraging Beacon Object Files (BOFs) has emerged, enabling attackers to extract Microsoft Entra (formerly Azure AD) tokens from compromised endpoints, even on non-domain-joined or BYOD devices. This technique sidesteps traditional detection mechanisms and expands access to high-value targets, posing significant risks to enterprise cloud environments. PRT Extraction Limits on BYOD Devices…
-
Sicherheit: Microsoft Teams verhindert künftig Screenshots
Tags: microsoftMicrosoft will in Teams künftig verhindern, dass Benutzer Screenshots von Bildschirmen machen können, die in Meetings geteilt werden. First seen on golem.de Jump to article: www.golem.de/news/sicherheit-microsoft-teams-verhindert-kuenftig-screenshots-2505-196088.html
-
Microsoft wants us to believe AI will crack practical fusion power, driving future AI
This BS ends at some point, right? First seen on theregister.com Jump to article: www.theregister.com/2025/05/09/microsoft_ai_fusion/
-
Critical Azure and Power Apps Vulnerabilities Allow Attackers to Exploit RCE
Microsoft has patched four critical security vulnerabilities affecting its Azure cloud services and Power Apps platform that could allow attackers to escalate privileges, perform spoofing attacks, or access sensitive information. Security researchers discovered these high-severity flaws, with one receiving a maximum CVSS score of 10.0, underscoring the potential impact on enterprise environments. The most severe…
-
Microsoft Teams will soon block screen capture during meetings
Tags: microsoftMicrosoft is working on adding a new Teams feature that will prevent users from capturing screenshots of sensitive information shared during meetings. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-teams-will-soon-block-screen-capture-during-meetings/
-
BlueVoyant stellt neuen Optimierungsservice für Microsoft Security vor
COMS basiert auf BlueVoyants tiefgreifender Expertise im Microsoft Security-Ökosystem und bietet Kunden fortlaufende Konfigurations- und Kostenoptimierung, maßgeschneiderte Bedrohungsanalysen sowie Zugriff auf hochqualifizierte Technologieexperten. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/bluevoyant-stellt-neuen-optimierungsservice-fuer-microsoft-security-vor/a40719/
-
Microsoft Listens to Security Concerns and Delays New OneDrive Sync
Tags: corporate, cybersecurity, data, malware, microsoft, privacy, risk, service, software, vulnerabilityMisuse of the newly announced Microsoft OneDrive synchronization feature puts corporate security and personal privacy at serious risk in ways not likely understood by the users. Microsoft wants people to connect their personal OneDrive file share with their work systems, synchronizing potentially private files onto their enterprise managed PCs. The problem is having these files…
-
Legacy Login in Microsoft Entra ID Exploited to Breach Cloud Accounts
A flaw in Microsoft Entra ID’s legacy login allowed attackers to bypass MFA, targeting admin accounts across finance,… First seen on hackread.com Jump to article: hackread.com/legacy-login-microsoft-entra-id-breach-cloud-accounts/
-
CVE funding crisis offers chance for vulnerability remediation rethink
Tags: access, ai, awareness, best-practice, cisa, cve, cvss, cybersecurity, data, exploit, Hardware, healthcare, intelligence, iot, kev, least-privilege, metric, mfa, microsoft, network, open-source, penetration-testing, risk, software, threat, tool, training, update, vulnerability, vulnerability-managementAutomatic for the people: AI technologies could act as a temporary bridge for vulnerability triage, but not a replacement for a stable CVE system, according to experts consulted by CSO.”Automation and AI-based tools can also enable real-time discovery of new vulnerabilities without over-relying on standard CVE timelines,” said Haris Pylarinos, founder and chief executive of…
-
Kaspersky Alerts on AI-Driven Slopsquatting as Emerging Supply Chain Threat
Tags: ai, cyber, cybersecurity, kaspersky, microsoft, programming, risk, software, supply-chain, threat, vulnerabilityCybersecurity researchers at Kaspersky have identified a new supply chain vulnerability emerging from the widespread adoption of AI-generated code. As AI assistants increasingly participate in software development-with Microsoft CTO Kevin Scott predicting AI will write 95% of code within five years-a phenomenon called >>slopsquatting
-
Microsoft Launches >>Copilot+ PC<< for an Upgraded Windows Experience
Microsoft has announced a significant wave of new Windows experiences designed for Copilot+ PCs, which the company describes as >>the fastest, most intelligent and most secure Windows PCs ever built.
-
Azure Storage Utility Vulnerability Allows Privilege Escalation to Root Access
A critical vulnerability discovered by Varonis Threat Labs has exposed users of Microsoft Azure’s AI and High-Performance Computing (HPC) workloads to a potential privilege escalation attack. The flaw, found in a utility pre-installed on select Azure Linux virtual machines, made it possible for an unprivileged local user to gain root access-a severe breach of the…
-
Rekordhoch bei Microsoft-Schwachstellen
Microsoft steht zunehmend im Fadenkreuz der Hacker. Laut dem aktuellen Microsoft Vulnerabilities Report des Sicherheitsunternehmens BeyondTrust wurden im Jahr 2024 insgesamt 1.360 Schwachstellen in Microsoft-Systemen erfasst mehr als jemals zuvor. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/microsoft-schwachstellen
-
Microsoft OneDrive move may facilitate accidental sensitive file exfiltration
want to make syncing easier, as it can create lots of security and IT headaches.The rollout was originally scheduled for this weekend (May 11), but sometime late on Thursday, the Microsoft page about the feature was changed to say that it was being pushed out in June. Microsoft did not immediately explain the delay, but discussions…
-
Microsoft updates the Windows 11 Start Menu
Plus it is solving the ‘I can’t find the settings’ problem with AI. That’s what you wanted, right? First seen on theregister.com Jump to article: www.theregister.com/2025/05/07/microsoft_updates_the_windows_11/
-
Dev Proxy v0.27: New API Modeling and AI Features Released
Latest features in Microsoft Dev Proxy v0.27, including TypeSpec generation and Nested App Authentication. Enhance your development today! First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/05/dev-proxy-v0-27-new-api-modeling-and-ai-features-released/
-
BlueVoyant Launches Optimization Service for Microsoft Security Tools
First seen on scworld.com Jump to article: www.scworld.com/news/bluevoyant-launches-optimization-service-for-microsoft-security-tools
-
Argano Acquires Real Dynamics to Strengthen Microsoft Dynamics Services
First seen on scworld.com Jump to article: www.scworld.com/news/argano-acquires-real-dynamics-to-strengthen-microsoft-dynamics-services
-
Seamless AI Communication: Microsoft Azure Adopts Google’s A2A Protocol
Microsoft has announced its support for the Agent2Agent (A2A) protocol, an open standard developed in collaboration with industry partners including Google, to enable seamless communication between AI agents across platforms, clouds, and organizational boundaries. This strategic move, integrated into Azure AI Foundry and Copilot Studio, aims to address the growing demand for interoperable AI systems…
-
AI Agents Fail in Novel Ways, Put Businesses at Risk
Microsoft researchers identify 10 new potential pitfalls for companies who are developing or deploying agentic AI systems, with failures potentially leading to the AI becoming a malicious insider. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/ai-agents-fail-novel-put-businesses-at-risk
-
How to capture forensic evidence for Microsoft 365
Tags: access, antivirus, attack, authentication, cloud, compliance, control, data, firewall, microsoft, network, risk, risk-management, windowsA Microsoft 365 E5 license (E5, E5 Compliance, or E5 Insider Risk Management)Workstations that run Windows 11 Enterprise with Microsoft 365 applicationsDevices joined via Microsoft Entra with certain Defender antivirus versions and application versions on boardOnly organizations that meet those criteria will be able to run Microsoft Purview Insider Risk Management to get the forensic…
-
Konsolidierung im Cybersecurity-Markt – Ist Microsofts Dominanz bei Security-Lösungen noch zu stoppen?
First seen on security-insider.de Jump to article: www.security-insider.de/microsofts-aufstieg-cybersicherheit-wettbewerb-a-bb7a803c58c508b70c04ed8921e2548b/
-
Report von BeyondTrust – So viele Microsoft-Schwachstellen gab’s noch nie
First seen on security-insider.de Jump to article: www.security-insider.de/microsoft-sicherheitsluecken-2024-analyse-a-59abcc4172c538ff83050898be57b0c2/
-
The ITDR Imperative: Securing Active Directory
ITDR is the next stage in enterprise security as attackers increasingly target credentials.. However, while the industry discusses ITDR at length, one fact continues to be overlooked: Any serious ITDR strategy must begin with protecting the user credentials within the directory services, for example, Microsoft Active Directory (AD). Why Active Directory is Central to ITDR……
-
Neuer Phishing-Trick: Microsoft Dynamics 365 Customer Voice täuscht Kunden
Eine neu entdeckte Phishing-Kampagne nutzt Microsoft Dynamics 365 Customer Voice aus, um betrügerische E-Mails zu versenden. Check Point warnt vor gefälschten Umfrage-Links, die täuschend echt wirken und sensible Daten stehlen sollen. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/dynamics-365-customer-voice
-
Windows Server: April 2025-Updates Windows Hello-Problem und Kerberos-Ereignisse bestätigt
Die Sicherheitsupdates vom April 2025 für Windows Server können Probleme bei Domänencontrollern verursachen, so dass die Kerberos-Ereignis-IDs 45 und 21 protokolliert werden. Microsoft hat dieses Problem bestätigt und schreibt, dass die Anmeldung mit Windows Hello im Key Trust-Modus fehlschlagen kann. … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/05/08/windows-server-april-2025-updates-windows-hello-problem-und-kerberos-ereignisse-bestaetigt/
-
Play Ransomware Group Used Windows Zero-Day
Previously, Microsoft reported that Storm-2460 had also used the privilege escalation bug to deploy ransomware on organizations in several countries. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/play-ransomware-group-windows-zero-day