Tag: microsoft
-
Windows 10 und 11: Mysterium um inetpub-Ordner teilweise aufgelöst
Nach dem April-Patchday ist auf vielen Windows-Systemen unerwartet ein Ordner namens inetpub aufgetaucht. Microsoft warnt davor, diesen zu löschen. First seen on golem.de Jump to article: www.golem.de/news/windows-10-und-11-mysterium-um-inetpub-ordner-teilweise-aufgeloest-2504-195313.html
-
Microsoft Issues Urgent Patch to Fix Office Update Crash
Microsoft has released an urgent patch for Office 2016 to address a critical issue causing key applications like Word, Excel, and Outlook to crash unexpectedly. The new update, KB5002623, was issued on April 10, 2025, following widespread reports of performance disruptions attributed to the earlier KB5002700 update. This latest patch applies exclusively to the Microsoft…
-
Microsoft Enhances Exchange and SharePoint Security with AMSI Integration
Microsoft has announced enhanced security measures for its Exchange Server and SharePoint Server products, both of which are critical assets for many organizations. The core of this enhancement is the integration with the Windows Antimalware Scan Interface (AMSI). The blog post emphasizes that Exchange and SharePoint servers are prime targets for attackers due to the…
-
Breach Roundup: Port of Seattle Notifies 90,000 Victims
Also, Oracle Denies Cloud Breach, Blames Hack on Obsolete Servers. This week, Port of Seattle notified victims, Oracle blamed hack on obsolete servers, Google and Microsoft released April patches, WK Kellogg breached, six arrested in Spain for AI-investment scam, Scattered Spider’s King Bob pleaded guilty, SmokeLoader users busted. First seen on govinfosecurity.com Jump to article:…
-
An inside look at Microsoft’s AI Red Team
First seen on scworld.com Jump to article: www.scworld.com/perspective/an-inside-look-at-microsofts-ai-red-team
-
Microsoft releases emergency update to fix Office 2016 crashes
Microsoft has released an out-of-band Office update to fix a known issue that caused Word, Excel, and Outlook to crash after installing the KB5002700 security update for Office 2016. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-releases-emergency-update-to-fix-office-2016-crashes/
-
Licensing issue blocks Microsoft 365 Family for some users
Microsoft is investigating a potential licensing issue blocking access to Microsoft 365 services for some customers with Family subscriptions. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-licensing-issue-blocks-microsoft-365-family-for-some-users/
-
Malicious npm Package Targets Atomic Wallet, Exodus Users by Swapping Crypto Addresses
Threat actors are continuing to upload malicious packages to the npm registry so as to tamper with already-installed local versions of legitimate libraries to execute malicious code in what’s seen as a sneakier attempt to stage a software supply chain attack.The newly discovered package, named pdf-to-office, masquerades as a utility for converting PDF files to…
-
Amazon Gift Card Email Hooks Microsoft Credentials
Amazon Gift Card Email Hooks Microsoft Credentials First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/04/amazon-gift-card-email-hooks-microsoft-credentials/
-
WellSpan Redefines Healthcare With Copilot
AI Tool Streamlines Clinical Workflows at WellSpan With Microsoft’s Dragon Copilot. WellSpan Health deploys Dragon Copilot, blending voice dictation and ambient listening to ease clinician burnout. It streamlines tasks with generative AI as part of an ecosystem shift, offering hope amid high burnout rates and workforce shortages. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/wellspan-redefines-healthcare-copilot-a-27966
-
Ransomware-Attacken stoßen in Windows-Lücke
Tags: access, backdoor, bug, cve, cvss, cyberattack, exploit, kaspersky, malware, microsoft, ransomware, update, vulnerability, windowsCyberkriminelle missbrauchen eine Sicherheitslücke in Windows, um eine Backdoor-Malware und Ransomware einzuschleusen.Sicherheitsforscher von Microsoft haben eine Schwachstelle im CLFS-Treiber (Common Log File System) von Windows entdeckt, die Angreifern Systemrechte verleiht. Sie wird als CVE-2025-29824 geführt, die mit einem CVSS-Wert von 7,8 über einen hohen Schweregrad verfügt.Laut einem Blogbeitrag der Forscher wurde die Lücke bereits für…
-
Bug in Version 135: Microsoft Edge nach Update teilweise unbrauchbar
Auf einigen Systemen startet der Webbrowser Edge in Version 135 mit einem Fehler und lässt sich daraufhin nicht bedienen. Mehrere Workarounds helfen. First seen on golem.de Jump to article: www.golem.de/news/bug-in-version-135-microsoft-edge-nach-update-teilweise-nicht-bedienbar-2504-195225.html
-
Top 16 OffSec, pen-testing, and ethical hacking certifications
Tags: access, android, antivirus, application-security, attack, authentication, blockchain, bug-bounty, business, cisco, cloud, computing, credentials, crypto, cryptography, cyber, cybersecurity, data, defense, detection, encryption, exploit, guide, hacker, hacking, incident response, injection, iot, jobs, kali, linux, malware, microsoft, mitigation, mobile, network, penetration-testing, RedTeam, remote-code-execution, reverse-engineering, risk, risk-assessment, sap, skills, sql, technology, threat, tool, training, update, vulnerability, windowsExperiential learning Offensive security can’t be fully mastered through lectures alone. Candidates need hands-on training in lab environments to develop practical skills. Ideally, certification exams should include a practical assessment, such as developing an exploit to compromise a system.Because individuals learn OffSec techniques, such as penetration testing, in different ways, the most effective certifications offer…
-
Golem Karrierewelt: Heute kostenloses Webinar: Microsoft Copilot Administration
Tags: microsoftWorauf kommt es bei der sicheren Administration von Microsoft Copilot an? Das Live-Webinar mit dem Microsoft-365-Experten Aaron Siller bietet Antworten! First seen on golem.de Jump to article: www.golem.de/news/golem-karrierewelt-heute-kostenloses-webinar-microsoft-copilot-administration-2504-195196.html
-
Microsoft Identity Web Flaw Exposes Sensitive Client Secrets and Certificates
A new vulnerability has been discovered in the Microsoft.Identity.Web NuGet package under specific conditions, potentially exposing sensitive information such as client secrets and certificate details in service logs. The flaw, identified as CVE-2025-32016, has been rated as moderate, prompting developers to urgently address the issue to prevent unintended data exposure. Overview of the Vulnerability: The vulnerability…
-
CatB Ransomware Abuses Microsoft Distributed Transaction Coordinator for Stealthy Payload Execution
The cybersecurity realm has encountered a formidable adversary with the emergence of CatB ransomware, also known as CatB99 or Baxtoy. First identified in late 2022, this strain has caught the eye of security analysts due to its sophisticated evasion techniques and its potential connection to established ransomware families. There’s speculation within the security community that…
-
Microsoft Patches 125 Flaws Including Actively Exploited Windows CLFS Vulnerability
Microsoft has released security fixes to address a massive set of 125 flaws affecting its software products, including one vulnerability that it said has been actively exploited in the wild.Of the 125 vulnerabilities, 11 are rated Critical, 112 are rated Important, and two are rated Low in severity. Forty-nine of these vulnerabilities are classified as…
-
Windows 10/11: Alle Updates für Windows vom April 2025-Patchday verfügbar
Zum Patchday im April 2025 (8. April 2025) waren nicht alle Windows-Sicherheitsupdates fertig gestellt. So fehlte das Update für Windows 10 (RTM-Version, Version 1507) komplett. Microsoft hat dieses Update nun nachgereicht und dazu auch gleich einen eigenen Supportbeitrag veröffentlicht. Windows … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/04/10/windows-10-11-alle-updates-fuer-windows-vom-april-2025-patchday-verfuegbar/
-
Patchday: Microsoft Office Updates (8. April 2025)
Am 8. April2025 (zweiter Dienstag im Monat, Microsoft Patchday) hat Microsoft mehrere sicherheitsrelevante Updates für Microsoft Office 2016, sowie die C2R-Varianten (Office 2016-2021 und 365) und andere Produkte veröffentlicht. Nachfolgend finden Sie eine Übersicht über die verfügbaren Updates. Eine Übersicht … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/04/10/patchday-microsoft-office-updates-8-april-2025/
-
Patch Tuesday: Microsoft Fixes 134 Vulnerabilities, Including 1 Zero-Day
One CVE was used against “a small number of targets.” Windows 10 users needed to wait a little bit for their patches. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-microsoft-patch-tuesday-april-2025/
-
Microsoft fixes 124 flaws, including one under active exploitation
First seen on scworld.com Jump to article: www.scworld.com/news/microsoft-fixes-124-flaws-including-one-under-active-exploitation
-
Microsoft’s April 2025 bumper Patch Tuesday corrects 124 bugs
Microsoft is correcting 124 vulnerabilities in its March Patch Tuesday, one of which is being actively exploited in the wild, and 11 of which are ‘critical’ First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366622332/Microsofts-April-2025-bumper-Patch-Tuesday-corrects-124-bugs
-
Microsoft Warns Ransomware Actors Exploiting Windows Flaw
Tech Giant Says Threat Actors Are Exploiting a Flaw in Widely-Targeted Windows Tool. Ransomware threat actors are exploiting a zero-day vulnerability discovered in a highly targeted Windows logging system tool in a campaign in part targeting U.S. IT and real estate sectors, Microsoft confirmed in a Tuesday blog post urging customers to apply available patches.…
-
Windows CLFS Vulnerability Could Lead to ‘Widespread Deployment and Detonation of Ransomware’
Microsoft warns CVE-2025-29824 lets attackers with user access escalate privileges to deploy ransomware via a flaw in Windows CLFS. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-microsoft-windows-common-log-file-system-vulnerability/
-
Windows 11 April update unexpectedly creates new ‘inetpub’ folder
Microsoft’s April 2025 Patch Tuesday updates are strangely creating an empty “inetpub” folder in the root of the C:\ drive, even on systems that do not have Internet Information Services (IIS) installed. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-11-april-update-unexpectedly-creates-new-inetpub-folder/
-
Exploited Windows zero-day addressed on April Patch Tuesday
Microsoft delivers fixes for 121 vulnerabilities with 11 rated critical this month. Admins will have extra mitigation work to correct three flaws. First seen on techtarget.com Jump to article: www.techtarget.com/searchwindowsserver/news/366622229/Exploited-Windows-zero-day-addressed-on-April-Patch-Tuesday
-
Patch Tuesday Update April 2025
In total, including third-party CVEs, in this Patch Tuesday edition, Microsoft published 134 CVEs, including 9 republished CVEs. Overall, Microsoft announced one Zero-Day, 11 Critical, and 113 Important vulnerabilities. From an Impact perspective, Escalation of Privilege (EoP) vulnerabilities accounted for 39%, followed by Remote Code Execution (RCE) at 28% and Information Disclosure (ID) at 13%….…
-
Russian APT Hackers Use Device Code Phishing Technique to Bypass MFA
Tags: apt, authentication, cyber, exploit, government, group, hacker, intelligence, mfa, microsoft, phishing, russia, threatRussian state-backed advanced persistent threat (APT) group Storm-2372 has exploited device code phishing to bypass multi-factor authentication (MFA) and infiltrate high-value targets across governments, NGOs, and critical industries. Since August 2024, this group has weaponized the OAuth device authorization flow”, a legitimate authentication mechanism”, to hijack user sessions and exfiltrate sensitive data. Microsoft Threat Intelligence…
-
Windows-Sicherheit: Patientenakte 2014
Heute veröffentlichen wir unser White Paper zum Thema Windows-Sicherheit im Jahr 2014. Der Bericht enthält unter anderem interessante Informationen über Schwachstellen in Microsoft Windows und Office, die innerhalb des letzten Jahres gepatcht wurden, Drive-By-Downloads und Techniken zur Schadensbegrenzung. First seen on welivesecurity.com Jump to article: www.welivesecurity.com/deutsch/2015/01/08/windows-sicherheit-2014/
-
Windows 7: Ende des Mainstream Supports
Wie Microsoft bereits im Juli 2014 angekündigt hatte, wurde der Mainstream Support für das beliebte Betriebssystem Windows 7 am vergangenen Dienstag eingestellt. Nutzer erhalten zwar nach wie vor Sicherheitsupdates, darüber hinaus allerdings keine Aktualisierungen. First seen on welivesecurity.com Jump to article: www.welivesecurity.com/deutsch/2015/01/15/windows-7-ende-des-mainstream-supports/