Tag: microsoft
-
Storm-1977 targets education sector with password spraying, Microsoft warns
Microsoft warns that threat actor Storm-1977 is behind password spraying attacks against cloud tenants in the education sector. Over the past year, Microsoft Threat Intelligence researchers observed a threat actor, tracked as Storm-1977, using AzureChecker.exe to launch password spray attacks against cloud tenants in the education sector. AzureChecker.exe connected to sac-auth[.]nodefunction[.]vip to download AES-encrypted data, which,…
-
Storm-1977 Hits Education Clouds with AzureChecker, Deploys 200+ Crypto Mining Containers
Microsoft has revealed that a threat actor it tracks as Storm-1977 has conducted password spraying attacks against cloud tenants in the education sector over the past year.”The attack involves the use of AzureChecker.exe, a Command Line Interface (CLI) tool that is being used by a wide range of threat actors,” the Microsoft Threat Intelligence team…
-
Microsoft Office 365 MFA targeted by ‘SessionShark’ phishing kit
First seen on scworld.com Jump to article: www.scworld.com/news/microsoft-office-365-mfa-targeted-by-sessionshark-phishing-kit
-
Two Systemic Jailbreaks Uncovered, Exposing Widespread Vulnerabilities in Generative AI Models
Two significant security vulnerabilities in generative AI systems have been discovered, allowing attackers to bypass safety protocols and extract potentially dangerous content from multiple popular AI platforms. These >>jailbreaks
-
Die Bösen kooperieren, die Guten streiten sich
Tags: ciso, compliance, cyber, cyberattack, cyersecurity, finance, group, microsoft, resilience, sap, strategy, usaEine Koalition einflussreicher CISOs sieht den G7-Gipfel 2025 als ideale Gelegenheit, die G7- und OECD-Mitgliedsstaaten zu einer stärkeren Zusammenarbeit und Harmonisierung der Cybersicherheitsvorschriften zu bewegen.Da Cyberangriffe immer weiter zunehmen und internationale Banden vermehrt miteinander kooperieren, bedarf es einer stärkeren, grenzüberschreitenden Zusammenarbeit der ‘Guten”. Das zumindest behaupten Führungskräfte namhafter Unternehmen wie Salesforce, Microsoft, AWS, Mastercard, SAP…
-
Tippen verkürzt Akkulaufzeit: Fix für hohe CPU-Last in Outlook kommt erst Ende Mai
Tags: microsoftEin Bug in Outlook sorgt für heiße CPUs und verkürzte Akkulaufzeiten. Microsoft hat nun einen Fix, doch die meisten bekommen ihn erst in einem Monat. First seen on golem.de Jump to article: www.golem.de/news/tippen-verkuerzt-akkulaufzeit-fix-fuer-hohe-cpu-last-in-outlook-kommt-erst-ende-mai-2504-195662.html
-
Microsoft Defender XDR False Positive Leaked Massive 1,700+ Sensitive Documents to Publish
An alarming data leak involving Microsoft Defender XDR has exposed more than 1,700 sensitive documents from hundreds of organizations, following a chain reaction triggered by a critical false positive error. Security researchers at ANY.RUN first identified and reported the incident, highlighting major weaknesses in automated threat detection systems and the risks posed by user behaviors…
-
A Smarter Alternative to Entra Permissions Management
Microsoft has announced the retirement of Entra Permissions Management (formerly CloudKnox), with sales ending June 30, 2025. EPM offered valuable visibility into cloud permissions, helping teams identify overprivileged identities across AWS, Azure, and GCP. But for many organizations, that visibility came with significant manual overhead: Policy rewrites, change windows, and time-consuming investigations. As EPM sunsets,……
-
‘SessionShark’ A New Toolkit Bypasses Microsoft Office 365 MFA Security
Tags: 2fa, authentication, cyber, cybercrime, marketplace, mfa, microsoft, office, phishing, service, threatSecurity researchers have uncovered a new and sophisticated threat to Microsoft Office 365 users: a phishing-as-a-service toolkit dubbed “SessionShark O365 2FA/MFA.” Promoted through cybercriminal marketplaces, SessionShark is designed to bypass Microsoft’s multi-factor authentication (MFA) protections”, an alarming escalation in the ongoing battle between defenders and cyber attackers. A Toolkit Purpose-Built to Evade 2FA and MFA…
-
Microsoft announces fix for CPU spikes when typing in Outlook
Microsoft says it will soon fix a known issue causing CPU spikes when typing messages in recent versions of its classic Outlook email client. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-announces-fix-for-cpu-spikes-when-typing-in-outlook/
-
Microsoft’s Patch for Symlink Vulnerability Introduces New Windows DenialService Flaw
Microsoft’s recent attempt to resolve a critical privilege escalation vulnerability has inadvertently introduced a new denial-of-service (DoS) flaw in Windows systems, leaving organizations vulnerable to update failures and potential security risks. In early April 2025, Microsoft addressed CVE-2025-21204, a security flaw that allowed attackers to abuse symbolic links (symlinks) to elevate privileges via the Windows servicing…
-
Devs sound alarm after Microsoft subtracts C/C++ extension from VS Code forks
Cursor, Codium makers lose access as add-on goes exclusive First seen on theregister.com Jump to article: www.theregister.com/2025/04/24/microsoft_vs_code_subtracts_cc_extension/
-
Microsoft Defender XDR stuft Adobe Acrobat Cloud-Links als bösartig ein Folge war, dass sensible Dokument öffentlich wurden
Es hat mal wieder arg “gerappelt”. Der Microsoft Defender XDR hat beim Adobe Acrobat Cloud-Links fälschlich als “bösartig” eingestuft. Das hatte und hat zur Folge, dass plötzlich Tausende Adobe-Nutzer mehr als 1.700 sensible Dokumente auf der Online-Plattform AnyRun prüfen ließen. … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/04/24/microsoft-defender-xdr-stuft-adobe-acrobat-cloud-links-als-boesartig-ein-folge-war-dass-sensible-dokument-oeffentlich-wurden/
-
‘SessionShark’ ToolKit Evades Microsoft Office 365 MFA
The creators of the toolkit are advertising it as an educational and ethical resource, but what it promises to provide users if purchased indicates it’s anything but. First seen on darkreading.com Jump to article: www.darkreading.com/remote-workforce/sessionshark-toolkit-microsoft-365-steal-tokens
-
Kyndryl Expands Microsoft Partnership to Strengthen Enterprise Data Security and AI Readiness
First seen on scworld.com Jump to article: www.scworld.com/news/kyndryl-expands-microsoft-partnership-to-strengthen-enterprise-data-security-and-ai-readiness
-
Hackers abuse OAuth 2.0 workflows to hijack Microsoft 365 accounts
Russian threat actors have been abusing legitimate OAuth 2.0 authentication workflows to hijack Microsoft 365 accounts of employees of organizations related to Ukraine and human rights. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-abuse-oauth-20-workflows-to-hijack-microsoft-365-accounts/
-
Microsoft fixes machine learning bug flagging Adobe emails as spam
Microsoft says it mitigated a known issue in one of its machine learning (ML) models that mistakenly flagged Adobe emails in Exchange Online as spam. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-fixes-machine-learning-bug-flagging-adobe-emails-as-spam/
-
Microsoft mystery folder fix might need a fix of its own
This one weird trick can stop Windows updates dead in their tracks First seen on theregister.com Jump to article: www.theregister.com/2025/04/24/microsoft_mystery_folder_fix/
-
Breach Roundup: Cookie Bite Exposes MFA Achilles Heel
Tags: attack, breach, cyberattack, data, data-breach, google, mfa, microsoft, north-korea, ransomwareAlso, Blue Shield Breach Exposes 4.7M, Cyberattack Disrupts City Systems in Texas. This week, Cookie Bite bypasses MFA in Azure Entra ID, Microsoft fixed RDP Freezes, a ransomware attack in Catalonia, Blue Shield exposed data to Google, a cyberattack disrupted city systems in Texas, South Korean telecom breach exposed USIM data and a warning about…
-
Threat Actors Exploiting Unsecured Kubernetes Clusters for Crypto Mining
In a startling revelation from Microsoft Threat Intelligence, threat actors are increasingly targeting unsecured Kubernetes clusters to conduct illicit activities such as cryptomining. The dynamic and complex nature of containerized environments poses significant challenges for security teams in detecting runtime anomalies or identifying the source of breaches. Rising Threats in Containerized Environments According to Microsoft’s…
-
New Steganography Campaign Exploits MS Office Vulnerability to Distribute AsyncRAT
A recently uncovered cyberattack campaign has brought steganography back into the spotlight, showcasing the creative and insidious methods attackers employ to deliver malware. This operation, dubbed the >>Stego-Campaign,
-
Despite Recent Security Hardening, Entra ID Synchronization Feature Remains Open for Abuse
Microsoft synchronization capabilities for managing identities in hybrid environments are not without their risks. In this blog, Tenable Research explores how potential weaknesses in these synchronization options can be exploited. Synchronizing identity accounts between Microsoft Active Directory (AD) and Entra ID is important for user experience, as it seamlessly synchronizes user identities, credentials and groups…
-
BrandTrends aus dem ersten Quartal 2025 Microsoft bleibt Top-Ziel, Mastercard erfährt ein Comeback
Check Point Research (CPR), die Threat Intelligence-Abteilung von Check Point Software Technologies hat sein aktuelles Brand-Phishing-Ranking für Q1 2025 veröffentlicht. Der Bericht hebt die Marken hervor, die von Cyber-Kriminellen am häufigsten imitiert werden, um personenbezogene Daten, Unternehmensdaten und Zahlungsinformationen zu stehlen. Er zeigt damit die Trends von Phishing-Angriffen im digitalen Zeitalter. Im ersten Quartal 2025…
-
Microsoft Resumes Recall Feature Rollout After Privacy Backlash, Adds Security Functions
Microsoft is expanding the rollout of Recall after months of testing and the addition of new security features. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-microsoft-recall-expands-rollout/
-
Microsoft now pays up to $30,000 for some AI vulnerabilities
Microsoft announced an increase in bug bounty payouts to $30,000 for AI vulnerabilities found in Dynamics 365 and Power Platform services and products. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-now-pays-up-to-30-000-for-some-ai-vulnerabilities/
-
Microsoft fixes bug causing incorrect 0x80070643 WinRE errors
Microsoft says it resolved a known issue causing erroneous 0x80070643 installation failure errors when deploying the April 2025 Windows Recovery Environment (WinRE) updates. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-fixes-bug-causing-incorrect-0x80070643-winre-errors/
-
Trotz Back-Up: 86 Prozent der Unternehmen zahlen Lösegeld
Tags: alphv, api, backup, cyber, cyberattack, germany, hacker, microsoft, phishing, ransomware, resilience, risk, tool, update, usa, vulnerability, zero-trust80 Prozent der Cyberangriffe beginnen mit kompromittierten Zugangsdaten und einem Active Directory.Cybertools um sich gegen Angriffe zu wappnen, werden genauso wie Kampagnen zur Sensibilisierung gegen Phishing und Ähnliches immer zahlreicher. Dennoch kapitulieren Unternehmen auf der ganzen Welt immer noch häufig vor Ransomware-Angreifern.Eine neue Studie von Rubrik Zero Labs, an der mehr als 1.600 IT- und…
-
Verbessertes Data Security Posture Management – Kyndryl und Microsoft kooperieren für mehr Datensicherheit
First seen on security-insider.de Jump to article: www.security-insider.de/kyndryl-beratungsdienste-microsoft-purview-a-c105f7ffe3e2a4a7ea2d68e57a9a3216/
-
Angriffswelle im April 2025 auf NGOs über Office 365 Accounts und SharePoint-Links?
Frage an die Administratoren von Microsoft Tenants mit Office 365-Konten: Beobachtet ihr verstärkt Angriffe auf diese Konten. Mir liegt eine Lesermeldung vor, die nahelegt, dass NGOs verstärkt im Fokus solcher Angriff sein könnten. Ich stelle das Thema mal hier im … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/04/24/angriffswelle-im-april-2025-auf-ngos-ueber-office-365-accounts-und-sharepoint-links/