Tag: microsoft
-
Unicorn Bug: Erster Angriff in freier Wildbahn
Vor kurzem hat Microsoft ein Patch für eine kritische Schwachstelle veröffentlicht, die im Internet Explorer (IE) eine Remote-Code-Execution ermöglicht. Die Schwachstelle, bekannt als Unicorn Bug CVE-2014-6332, wurde bereits im Mai dieses Jahres von einem Forscher des IBM X-Force Security Teams entdeckt. First seen on welivesecurity.com Jump to article: www.welivesecurity.com/deutsch/2014/11/25/unicorn-bug-erster-angriff-freier-wildbahn/
-
Windows-Sicherheit: Patientenakte 2014
Heute veröffentlichen wir unser White Paper zum Thema Windows-Sicherheit im Jahr 2014. Der Bericht enthält unter anderem interessante Informationen über Schwachstellen in Microsoft Windows und Office, die innerhalb des letzten Jahres gepatcht wurden, Drive-By-Downloads und Techniken zur Schadensbegrenzung. First seen on welivesecurity.com Jump to article: www.welivesecurity.com/deutsch/2015/01/08/windows-sicherheit-2014/
-
Windows 7: Ende des Mainstream Supports
Wie Microsoft bereits im Juli 2014 angekündigt hatte, wurde der Mainstream Support für das beliebte Betriebssystem Windows 7 am vergangenen Dienstag eingestellt. Nutzer erhalten zwar nach wie vor Sicherheitsupdates, darüber hinaus allerdings keine Aktualisierungen. First seen on welivesecurity.com Jump to article: www.welivesecurity.com/deutsch/2015/01/15/windows-7-ende-des-mainstream-supports/
-
Microsoft Security Update Summary (8. April 2025)
Microsoft hat am 8. April 2025Sicherheitsupdates für Windows-Clients und -Server, für Office sowie für weitere Produkte veröffentlicht. Die Sicherheitsupdates beseitigen 121 Schwachstellen (CVEs), eine davon wurde als 0-day klassifiziert. Diese Schwachstelle wurde bereits angegriffen. Nachfolgend findet sich ein … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/04/09/microsoft-security-update-summary-8-april-2025/
-
Microsoft investigates global Exchange Admin Center outage
Tags: microsoftMicrosoft is investigating an ongoing outage that is blocking admins worldwide from accessing the Exchange Admin Center (EAC). First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-investigates-global-exchange-admin-center-outage/
-
April 2025 updates break Windows Hello on some PCs
Microsoft says some Windows users might be unable to log into their accounts via Windows Hello after installing the April 2025 security updates. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-april-2025-updates-break-windows-hello-on-some-pcs/
-
Microsoft Warns of Ransomware Attacks Exploiting CVE-2025-29824 Zero-Day
On April 8, 2025, Microsoft released its monthly security updates, addressing a total of 121 vulnerabilities across various products. Among these, CVE-2025-29824, a zero-day vulnerability in the Windows Common Log File System (CLFS) Driver, has been actively exploited in ransomware… First seen on sensorstechforum.com Jump to article: sensorstechforum.com/cve-2025-29824-zero-day-ransomware-attacks/
-
Windows Kerberos Vulnerability Enables Security Feature Bypass
Microsoft has disclosed a new security vulnerability in Windows operating systems, tracked as CVE-2025-29809. This flaw, classified withImportantseverity, impacts the Kerberos authentication protocol, potentially enabling attackers to bypass critical security features. The vulnerability stems from weaknesses described underCWE-922: Insecure Storage of Sensitive Information, making it a pressing concern for organizations relying on Kerberos for secure authentication.…
-
Word/Excel 2016: Abstürze nach April 2025 Update KB5002700?
Die Sicherheitsupdates vom 8. April 2025 für Microsoft Office scheinen einige Kollateralschäden zu verursachen. Neben dem Outlook 2016-Kalender-Problem scheint das Microsoft das Office-Update KB5002700 auch Word 2016 sowie Excel 2016 zum Absturz zu bringen. Office 2016 Update KB5002700 Das Update … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/04/09/word-2016-abstuerze-nach-april-2025-update-kb5002700/
-
Emotet: Banking-Malware bedroht deutsche Nutzer
Wie Microsoft berichtet, bedroht eine neue Variante einer bekannten Malware, die es auf Zugangsdaten zu Banking-Accounts abgesehen hat, vor allem deutschsprachige Nutzer. Die Malware namens Emotet, von ESET als Win32/Emotet erkannt, wurde bereits im Juni letzten Jahres entdeckt. First seen on welivesecurity.com Jump to article: www.welivesecurity.com/deutsch/2015/01/08/emotet-banking-malware-bedroht-deutsche-nutzer/
-
Hackers Stole ‘Highly Sensitive’ US Banking Regulator Emails
Microsoft Reportedly Alerted Office of the Comptroller of the Currency to Breach. For nearly two years, hackers reportedly spied on 150,000 highly sensitive emails sent and received by America’s banking regulator, the Office of the Comptroller of the Currency. The OCC said it’s continuing to probe the major information security incident. First seen on govinfosecurity.com…
-
Lenovo und Superfish Lösungsfindung statt Panik
Seit ein paar Tagen sorgt Superfish für einigen Ärger im Netz. Denn diese schlecht durchdachte Software wurde auf einigen Lenovo-Rechnern vorinstalliert mitgeliefert und gefährdet auf Microsoft Windows Computern die Sicherheit. Doch die Aufregung ist in manchen Fällen unbegründet. First seen on welivesecurity.com Jump to article: www.welivesecurity.com/deutsch/2015/02/23/lenovo-und-superfish/
-
Microsoft Drops Another Massive Patch Update
A threat actor has already exploited one of the flaws in a ransomware campaign with victims in the US and other countries. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/microsoft-drops-another-massive-patch-update
-
Outlook 2016: Kalender-Zugriff nach April 2025-Update KB5002700 gesperrt
Zum 8. April 2025 hat Microsoft das Office-Update KB5002700 veröffentlicht, um eine Reihe Schwachstellen in Microsoft Office 2016 zu schließen. Nach Installation dieses Updates ist kein Zugriff auf dem Kalender mehr möglich. Es gibt aber einen schnellen Workaround, einfach die … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/04/09/outlook-2016-kalender-zugriff-nach-april-2025-update-kb5002700-gesperrt/
-
Patchday: Windows 10/11 Updates (8. April 2025)
Am 8. April 2025 (zweiter Dienstag im Monat, Patchday bei Microsoft) hat Microsoft kumulative Updates für die noch unterstützten Client-Betriebssystem-Versionen von Windows 10 und Windows 11 veröffentlicht. Hier einige Details zu diesen Updates, die Schwachstellen sowie Probleme beheben sollen. Updates … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/04/09/patchday-windows-10-11-updates-8-april-2025/
-
Google’s got a hot cloud security startup, a new unified platform, and its eye on Microsoft’s $20B+ security biz
Chocolate Factory doubles down on enterprise security at Cloud Next First seen on theregister.com Jump to article: www.theregister.com/2025/04/09/google_enterprise_security_ambitions/
-
Zero-day bug used in ransomware attacks on US real estate firms
Microsoft published a blog post on Tuesday about the bug alongside its larger Patch Tuesday release, detailing how hackers exploited the vulnerability and used a strain of malware called PipeMagic before deploying ransomware on victims. First seen on therecord.media Jump to article: therecord.media/microsoft-zero-day-used-ransomware-attack-real-estate
-
Microsoft patches zero-day actively exploited in string of ransomware attacks
Microsoft said Storm-2460 has exploited the zero-day in the Windows Common Log File System to attack organizations in the U.S., Venezuela, Spain and Saudi Arabia. First seen on cyberscoop.com Jump to article: cyberscoop.com/microsoft-patch-tuesday-april-2025/
-
Fake Microsoft Office add-in tools push malware via SourceForge
Threat actors are abusing SourceForge to distribute fake Microsoft add-ins that install malware on victims’ computers to both mine and steal cryptocurrency. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/fake-microsoft-office-add-in-tools-push-malware-via-sourceforge/
-
The SQL Server Crypto Detour
Tags: access, api, backup, credentials, crypto, cryptography, data, encryption, jobs, microsoft, password, service, sql, tool, update, vulnerability, windowsAs part of my role as Service Architect here at SpecterOps, one of the things I’m tasked with is exploring all kinds of technologies to help those on assessments with advancing their engagement. Not long after starting this new role, I was approached with an interesting problem. A SQL Server database backup for a ManageEngine’s…
-
Microsoft fixes auth issues on Windows Server, Windows 11 24H2
Microsoft has fixed a known issue causing authentication problems when Credential Guard is enabled on systems using the Kerberos PKINIT pre-auth security protocol. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-fixes-auth-issues-on-windows-server-windows-11-24h2/
-
Microsoft fixes actively exploited Windows CLFS zero-day (CVE-2025-29824)
April 2025 Patch Tuesday is here, and Microsoft has delivered fixes for 120+ vulnerabilities, including a zero-day (CVE-2025-29824) that’s under active attack. … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/04/08/patch-tuesday-microsoft-zero-day-cve-2025-29824/
-
Windows CLFS zero-day exploited by ransomware gang
Microsoft says the RansomEXX ransomware gang has been exploiting a high-severity zero-day flaw in the Windows Common Log File System to gain SYSTEM privileges on victims’ systems. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-windows-clfs-zero-day-exploited-by-ransomware-gang/
-
Microsoft April 2025 Patch Tuesday: Fixing 121 Vulnerabilities, Including a Critical Zero-Day
Tags: cyber, exploit, flaw, microsoft, remote-code-execution, software, update, vulnerability, zero-dayMicrosoft has rolled out its April 2025 Patch Tuesday update, addressing 121 security vulnerabilities across its software ecosystem. This comprehensive update includes fixes for critical issues such as the elevation of privilege, remote code execution, and information disclosure vulnerabilities. Among the patched flaws is a zero-day vulnerability actively exploited in the wild, underscoring the urgency…
-
Microsoft Patch Tuesday for April 2025, Snort rules and prominent vulnerabilities
Microsoft has released its monthly security update for April of 2025 which includes 126 vulnerabilities affecting a range of products, including 11 that Microsoft has marked as “critical”. First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/microsoft-patch-tuesday-april-2025/
-
Microsoft Patches 125 Windows Vulns, Including Exploited CLFS Zero-Day
Patch Tuesday: Microsoft ships urgent cover for another WIndows CLFS vulnerability already exploited in the wild. The post Microsoft Patches 125 Windows Vulns, Including Exploited CLFS Zero-Day appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/microsoft-patches-125-windows-vulns-including-exploited-clfs-zero-day/
-
Microsoft April 2025 Patch Tuesday fixes exploited zero-day, 134 flaws
Today is Microsoft’s April 2025 Patch Tuesday, which includes security updates for 134 flaws, including one actively exploited zero-day vulnerability. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-april-2025-patch-tuesday-fixes-exploited-zero-day-134-flaws/
-
Windows 10 KB5055518 update fixes random text when printing
Microsoft has released the KB5055518 cumulative update for Windows 10 22H2 and Windows 10 21H2, with nine changes or fixes. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-10-kb5055518-update-fixes-random-text-when-printing/