Tag: microsoft
-
Microsoft Discovers GRUB2, U-Boot, and Barebox Bootloader Flaws with Copilot
Microsoft has disclosed the discovery of multiple critical vulnerabilities within the GRUB2, U-Boot, and Barebox bootloaders, leveraging its AI-driven Security Copilot platform for advanced threat analysis. These bootloaders, integral to the Unified Extensible Firmware Interface (UEFI) Secure Boot framework and widely deployed in embedded systems, were found to contain exploitable flaws that could compromise system…
-
Per KI aufgespürt: Microsoft warnt vor Lücken in Grub2 und anderen Bootloadern
Mit einem KI-Tool hat Microsoft 20 Sicherheitslücken in weitverbreiteten Bootloadern aufgespürt. Angreifer können damit etwa Bootkits einschleusen. First seen on golem.de Jump to article: www.golem.de/news/per-ki-aufgespuert-microsoft-warnt-vor-luecken-in-grub2-und-anderen-bootloadern-2504-194879.html
-
CVE-2025-26633: MSC EvilTwin Zero-Day Exploited by Water Gamayun
In early 2025, cybersecurity researchers uncovered a zero-day vulnerability in Microsoft’s Management Console (MMC), tracked as CVE-2025-26633 and nicknamed MSC EvilTwin. This critical flaw is being actively exploited by a threat group dubbed Water Gamayun and represents a dangerous vector… First seen on sensorstechforum.com Jump to article: sensorstechforum.com/cve-2025-26633-eviltwin-exploit/
-
Copilot+ PCs mit Windows 11 – Microsoft gibt AI-Features auch für AMD und Intel frei
Die AI-Zusatzfunktionen von Copilot+ PCs waren bislang Systemen mit Qualcomm Snapdragon vorbehalten. Jetzt sind AMD und Intel an der Reihe. First seen on computerbase.de Jump to article: www.computerbase.de/news/betriebssysteme/copilot-plus-pcs-mit-windows-11-microsoft-gibt-ai-features-auch-fuer-amd-und-intel-frei.92002
-
Privacy Roundup: Week 13 of Year 2025
Tags: access, ai, android, apple, application-security, breach, browser, cctv, chrome, cloud, cve, cybersecurity, data, detection, exploit, firmware, google, group, leak, linux, malware, microsoft, mobile, phishing, privacy, regulation, router, scam, service, software, technology, threat, tool, update, virus, vpn, vulnerability, zero-dayThis is a news item roundup of privacy or privacy-related news items for 23 MAR 2025 – 29 MAR 2025. Information and summaries provided here are as-is for warranty purposes. Note: You may see some traditional “security” content mixed-in here due to the close relationship between online privacy and cybersecurity – many things may overlap;…
-
Open Source statt Microsoft – So können Unternehmen Linux-Server günstig und sicher aufsetzen
First seen on security-insider.de Jump to article: www.security-insider.de/open-source-und-linux-statt-windows-a-b4da32bf803c2dc7f035009a3c83d64b/
-
Genial oder aus Versehen? – Microsoft stellt Windows 11 Source Code versehentlich auf Github
First seen on security-insider.de Jump to article: www.security-insider.de/microsoft-stellt-windows-11-source-code-versehentlich-auf-github-a-61e67960ae8b9baa7bb71ae67f1e1602/
-
Microsoft uses AI to find flaws in GRUB2, U-Boot, Barebox bootloaders
Microsoft used its AI-powered Security Copilot to discover 20 previously unknown vulnerabilities in the GRUB2, U-Boot, and Barebox open-source bootloaders. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-uses-ai-to-find-flaws-in-grub2-u-boot-barebox-bootloaders/
-
Cybersecurity Leaders Share Three Challenges Exposure Management Helps Them Solve
Tags: access, attack, automation, best-practice, breach, business, cloud, container, control, cyber, cybersecurity, data, exploit, guide, infrastructure, Internet, microsoft, mobile, network, risk, risk-management, strategy, supply-chain, technology, threat, tool, vulnerability, vulnerability-management, zero-trustEach Monday, the Tenable Exposure Management Academy provides the practical, real-world guidance you need to shift from vulnerability management to exposure management. In this blog, we share three challenges cybersecurity leaders say exposure management helps them solve. You can read the entire Exposure Management Academy series here. Traditional vulnerability management is undergoing a transformation.…
-
Russian Hackers Exploit CVE-2025-26633 via MSC EvilTwin to Deploy SilentPrism and DarkWisp
The threat actors behind the zero-day exploitation of a recently-patched security vulnerability in Microsoft Windows have been found to deliver two new backdoors called SilentPrism and DarkWisp.The activity has been attributed to a suspected Russian hacking group called Water Gamayun, which is also known as EncryptHub and LARVA-208.”The threat actor deploys payloads primarily by means…
-
Intel and Microsoft staff allegedly lured to work for fake Chinese company in Taiwan
11 companies, including SMIC, accused of disguising outposts so they can illicitly serve Beijing First seen on theregister.com Jump to article: www.theregister.com/2025/03/31/china_disguised_tech_companies_taiwan/
-
Windows 11 Insider Released Microsoft Removes BypassNRO.cmd Script to Enhance Security
Microsoft has launchedWindows 11 Insider Preview Build 26200.5516to the Dev Channel with exciting new updates, including innovative features and a key security enhancement. Among the major changes is the removal of the widely knownBypassNRO.cmd script, a move aimed at bolstering Windows 11’s overall security and ensuring a seamless user experience. Prioritizing Security and Connectivity In…
-
BlueVoyant stellt neuen KI-Agenten für Microsoft Security Copilot vor
IT-Entscheider, die mehr über den neuen KI-Agenten von BlueVoyant oder die Vorteile von Security Copilot erfahren möchten, sind herzlich eingeladen, sich an die Experten von BlueVoyant zu wenden. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/bluevoyant-stellt-neuen-ki-agenten-fuer-microsoft-security-copilot-vor/a40326/
-
Nach Crowdstrike-Fiasko: Microsoft will Bootfehler künftig aus der Ferne fixen
Ein neues Feature soll Windows-Systeme bei großflächigen Ausfällen wie der Crowdstrike-Panne des letzten Sommers schneller wieder lauffähig machen. First seen on golem.de Jump to article: www.golem.de/news/nach-crowdstrike-fiasko-microsoft-will-bootfehler-kuenftig-aus-der-ferne-fixen-2503-194842.html
-
Windows 11: Wie sich der Microsoft-Kontozwang weiter umgehen lässt
Die Entfernung der bypassnro.cmd aus Windows 11 erregt Aufsehen. Microsofts Online-Kontozwang lässt sich aber auch anders aushebeln. First seen on golem.de Jump to article: www.golem.de/news/windows-11-wie-sich-der-microsoft-kontozwang-weiter-umgehen-laesst-2503-194830.html
-
Microsoft schickt 6 AI Security Agenten ins Rennen
Neue AI-Offensive bei Microsoft. Vor einem Jahr hatte das Unternehmen den Microsoft Security Copilot eingeführt, um Sicherheitsvorfälle schnell und präzise zu erkennen, zu untersuchen und darauf zu reagieren. Nun hat man gleich sechs AI Security Agenten vorgestellt, die Nutzer bei … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/03/31/microsoft-schickt-6-ai-security-agenten-ins-rennen/
-
Windows 11 quick machine recovery: Restoring devices with boot issues
Microsoft has rolled out quick machine recovery, a new Windows feature aimed at preventing prolonged widespread outages like the one caused by a faulty CrowdStrike update in … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/03/31/quick-machine-recovery-restoring-windows-11-devices-with-boot-issues/
-
A New Microsoft Tool Automatically Detects, Diagnoses, and Resolves Boot Issues in Windows
Microsoft has unveiled a transformational tool aimed at addressing one of the most frustrating challenges in modern computing: boot failures. Aptly named >>Quick Machine Recovery,
-
Water Gamayun Hackers Exploit MSC EvilTwin Zero-day Vulnerability to Hack Windows Machine
Water Gamayun, a suspected Russian threat actor, has been identified exploiting the MSC EvilTwin zero-day vulnerability (CVE-2025-26633) to compromise Windows systems. This vulnerability, embedded in the Microsoft Management Console (MSC) framework, allows attackers to execute malicious code remotely, exfiltrate sensitive data, and maintain persistent control over infected machines. The exploit leverages custom payloads and advanced…
-
Microsoft tests new Windows 11 tool to remotely fix boot crashes
Microsoft has begun testing a new Windows 11 tool called Quick Machine Recovery, which is designed to remotely deploy fixes for buggy drivers and configurations that prevent the operating system from starting. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-tests-new-quick-machine-recovery-tool-to-fix-boot-crashes/
-
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 39
Tags: android, detection, framework, Hardware, international, malware, marketplace, microsoft, ransomware, serviceSecurity Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Microsoft Trusted Signing service abused to code-sign malware Shedding light on the ABYSSWORKER driver VSCode Marketplace Removes Two Extensions Deploying Early-Stage Ransomware New Android Malware Campaigns Evading Detection Using Cross-Platform Framework .NET MAUI Raspberry Robin: Copy…
-
Microsoft’s killing script used to avoid Microsoft Account in Windows 11
Microsoft has removed the ‘BypassNRO.cmd’ script from Windows 11 preview builds, which allowed users to bypass the requirement to use a Microsoft Account when installing the operating system. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsofts-killing-script-used-to-avoid-microsoft-account-in-windows-11/
-
Week in review: Chrome sandbox escape 0-day fixed, Microsoft adds new AI agents to Security Copilot
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Microsoft’s new AI agents take on phishing, patching, alert fatigue Microsoft … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/03/30/week-in-review-chrome-sandbox-escape-0-day-fixed-microsoft-adds-new-ai-agents-to-security-copilot/
-
Executive Perspectives: Pierre Noel on Cybersecurity Leadership, Risk, and Resilience
In this edition of Axio’s Executive Insight Series, Scott Kannry, CEO of Axio, sits down with Pierre Noel, former CISO of Microsoft Asia and Huawei, to discuss the evolution of Read More First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/03/executive-perspectives-pierre-noel-on-cybersecurity-leadership-risk-and-resilience/
-
Salt Typhoon may have upgraded backdoors for efficiency and evasion
CrowDoor and attributed to the Earth Estries APT group in November 2024.”GhostSparrow, aka Salt Typhoon (Microsoft), Earth Estries (Trend Micro), Ghost Emperor (Kaspersky Labs), and UNC2286 (Mandiant), has escalated cyber espionage, breaching US telecom networks and accessing data on over a million individuals. One of the key features ESET reported on the two previously unseen…
-
Phishing-Alarm: Microsoft Word erzeugt PDF-Phishing-Link
Mir ist von einem Blog-Leser eine sehr krude Geschichte zugespielt worden. Ein mit Microsoft Word erzeugtes Dokument enthielt eine WebEx-Einladung. Durch die Silbentrennung wurde ein “Phishing-Link” erzeugt, der auf obskure Seiten umleitete. Später stellte sich heraus, dass die PDF-Konverter die … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/03/29/phishing-alarm-microsoft-word-erzeugt-pdf-phishing-link/
-
Now Windows Longhorn is long gone, witness reflects on Microsoft’s OS belly-flop
‘This was not good dog food’ First seen on theregister.com Jump to article: www.theregister.com/2025/03/27/looking_back_at_windows_longhorn/
-
Microsoft fixes button that restores classic Outlook client
Microsoft resolved an issue that caused the new Outlook email client to crash when users clicked a button designed to switch back to classic Outlook. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-fixes-button-that-restores-classic-outlook-client/
-
Microsoft fixes Remote Desktop issues caused by Windows updates
Microsoft has fixed a known issue that caused problems with Remote Desktop and RDS connections after installing Windows updates released since January 2025. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-fixes-remote-desktop-issues-caused-by-windows-updates/
-
Hijacked Microsoft web domain injects spam into SharePoint servers
The legacy domain for Microsoft Stream was hijacked to show a fake Amazon site promoting a Thailand casino, causing all SharePoint sites with old embedded videos to display it as spam. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/hijacked-microsoft-stream-classic-domain-spams-sharepoint-sites/