Tag: microsoft
-
EncryptHub linked to MMC zero-day attacks on Windows systems
A threat actor known as EncryptHub has been linked to Windows zero-day attacks exploiting a Microsoft Management Console vulnerability patched this month. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/encrypthub-linked-to-zero-day-attacks-targeting-windows-systems/
-
New Malware Targets Android Users by Abusing Cross-Platform Framework for Evasion
A recent discovery by the McAfee Mobile Research Team has highlighted a new wave of Android malware campaigns that utilize the .NET MAUI cross-platform framework to evade detection. This framework, introduced by Microsoft as a replacement for Xamarin, allows developers to build applications for multiple platforms, including Android, iOS, Windows, and macOS. However, cybercriminals have…
-
Hackers Are Using Microsoft’s .NET MAUI to Spread Android Malware
McAfee Labs reveals new Android malware exploiting .NET MAUI to steal user data. Learn about advanced evasion techniques and how to stay protected. First seen on hackread.com Jump to article: hackread.com/net-maui-exploited-in-advanced-malware-campaigns-mcafee-labs/
-
EncryptHub linked to zero-day attacks targeting Windows systems
A threat actor known as EncryptHub has been linked to Windows zero-day attacks exploiting a Microsoft Management Console vulnerability patched this month. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/encrypthub-linked-to-zero-day-attacks-targeting-windows-systems/
-
Microsoft’s new AI agents take on phishing, patching, alert fatigue
Microsoft is rolling out a new generation of AI agents in Security Copilot, built to help with some of the most time-consuming security challenges, such as phishing, data … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/03/25/microsoft-security-copilot-agents/
-
Microsoft Adds AI Agents to Security Copilot
Microsoft has expanded the capabilities of Security Copilot with AI agents tackling data security, phishing, and identity management. The post Microsoft Adds AI Agents to Security Copilot appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/microsoft-adds-ai-agents-to-security-copilot/
-
New Android malware uses Microsoft’s .NET MAUI to evade detection
New Android malware campaigns use Microsoft’s cross-platform framework .NET MAUI while disguising as legitimate services to evade detection. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-android-malware-uses-microsofts-net-maui-to-evade-detection/
-
Microsoft Gives Security Copilot Some Autonomy
New agentic AI capabilities in Microsoft Security Copilot will allow agents to triage threats and provide recommendations. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/microsoft-gives-security-copilot-autonomy
-
Microsoft launches AI agents to automate cybersecurity amid rising threats
Tags: ai, cloud, cybersecurity, data, governance, identity, intelligence, microsoft, risk, strategy, threat, tool, vulnerabilityIntegration benefits for customers: Microsoft said the six new Security Copilot agents are designed to help security teams autonomously manage high-volume security and IT tasks while integrating smoothly with the broader Microsoft Security portfolio.According to Grover, the move is likely to benefit organizations already embedded in the Microsoft ecosystem, as the platform-centric approach offers advantages…
-
AI-Powered SaaS Security: Keeping Pace with an Expanding Attack Surface
Organizations now use an average of 112 SaaS applications”, a number that keeps growing. In a 2024 study, 49% of 644 respondents who frequently used Microsoft 365 believed that they had less than 10 apps connected to the platform, despite the fact that aggregated data indicated over 1,000+ Microsoft 365 SaaS-to-SaaS connections on average per…
-
Rilide Malware Poses as Browser Extension to Steal Login Credentials from Chrome and Edge Users
Rilide, a sophisticated malware, has been masquerading as a legitimate browser extension to steal sensitive information from users of Chromium-based browsers like Google Chrome and Microsoft Edge. First identified in April 2023, this malware is designed to capture screenshots, log passwords, and collect credentials for cryptocurrency wallets. It often disguises itself as a Google Drive…
-
Microsoft Introduces Security Copilot Agents with Enhanced AI Protections
Microsoft has launched an expanded version of its Security Copilot platform, now equipped with advanced AI agents. These agents are designed to autonomously handle critical security tasks such as phishing detection, data security, and identity management, revolutionizing how organizations protect themselves against cyberattacks. The cyber threat landscape is evolving rapidly, with attacks surpassing human capabilities…
-
Hackers Use .NET MAUI to Target Indian and Chinese Users with Fake Banking, Social Apps
Cybersecurity researchers are calling attention to an Android malware campaign that leverages Microsoft’s .NET Multi-platform App UI (.NET MAUI) framework to create bogus banking and social media apps targeting Indian and Chinese-speaking users.”These threats disguise themselves as legitimate apps, targeting users to steal sensitive information,” McAfee Labs researcher Dexter Shin said..NET First seen on thehackernews.com…
-
Malware Code-Signed Using Microsoft Trusted Signing Service
First seen on scworld.com Jump to article: www.scworld.com/brief/malware-code-signed-using-microsoft-trusted-signing-service
-
Automate cybersecurity at scale with Microsoft Security Copilot agents
First seen on thesecurityblogger.com Jump to article: www.thesecurityblogger.com/automate-cybersecurity-at-scale-with-microsoft-security-copilot-agents/
-
Cato Uses LLM-Developed Fictional World to Create Jailbreak Technique
A Cato Networks threat researcher with little coding experience was able to convince AI LLMs from DeepSeek, OpenAI, and Microsoft to bypass security guardrails and develop malware that could steal browser passwords from Google Chrome. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/03/cato-uses-llm-developed-fictional-world-to-create-jailbreak-technique/
-
Microsoft Adds Inline Data Protection to Edge for Business to Block GenAI Data Leaks
Microsoft on Monday announced a new feature called inline data protection for its enterprise-focused Edge for Business web browser.The native data security control is designed to prevent employees from sharing sensitive company-related data into consumer generative artificial intelligence (GenAI) apps like OpenAI ChatGPT, Google Gemini, and DeepSeek. The list will be expanded over time to…
-
AI agents swarm Microsoft Security Copilot
Looking to sort through large volumes of security info? Redmond has your backend First seen on theregister.com Jump to article: www.theregister.com/2025/03/24/microsoft_security_copilot_agents/
-
Hidden Threats: How Microsoft 365 Backups Store Risks for Future Attacks
Acronis Threat Research found 2M+ malicious URLs & 5,000+ malware instances in Microsoft 365 backup data”, demonstrating how built-in security isn’t always enough. Don’t let threats persist in your cloud data. Strengthen your defenses. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hidden-threats-how-microsoft-365-backups-store-risks-for-future-attacks/
-
Phishing-Angriffe, die legitime Microsoft-Kommunikation missbrauchen, nehmen zu
Am 3. März 2025 hat das KnowBe4-Threat-Labs-Team einen massiven Anstieg von Phishing-Angriffen festgestellt, die von legitimen Microsoft-Domains ausgingen. Erste Aktivitäten hatte KnowBe4-Defend schon ab dem 24. Februar wahrgenommen. Einen Höhepunkt erreichte der Angriff aber erst am 3. März, als von microsoft-noreply@microsoft.com innerhalb eines Zeitraums von nur 30 Minuten 7.000 Angriffe registriert wurden. Zur Durchführung der…
-
New phishing campaign uses scareware to steal Apple credentials
The campaign previously targeted Windows users: According to LayerX researchers, the campaign has been seen targeting Mac users only in the last few months. Initially, it targeted Windows users by masquerading as Microsoft security alerts.Designed to steal user credentials, threat actors have apparently shifted focus to Mac users owing to new security features being rolled…
-
Trusted Signing: Hacker signieren Windows-Malware über Microsoft-Plattform
Forscher haben Malware entdeckt, die über Microsofts neue Trusted-Signing-Plattform signiert wurde. Windows-Systeme lassen sich damit leichter infizieren. First seen on golem.de Jump to article: www.golem.de/news/trusted-signing-microsoft-dienst-zum-signieren-von-malware-missbraucht-2503-194597.html
-
Trump’s Aggression Sours Europe on US Cloud Giants
Companies in the EU are starting to look for ways to ditch Amazon, Google, and Microsoft cloud services amid fears of rising security risks from the US. But cutting ties won’t be easy. First seen on wired.com Jump to article: www.wired.com/story/trump-us-cloud-services-europe/
-
Microsoft Trusted Signing service abused to code-sign malware
Cybercriminals are abusing Microsoft’s Trusted Signing platform to code-sign malware executables with short-lived three-day certificates. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-trusted-signing-service-abused-to-code-sign-malware/
-
50 Jahre Microsoft – Was war euer erstes Windows-Betriebssystem?
Microsoft feiert am 4. April das 50-jährige Jubiläum. Was haltet ihr von Windows? Und was war euer erstes Microsoft-Betriebssystem? First seen on computerbase.de Jump to article: www.computerbase.de/news/betriebssysteme/50-jahre-microsoft-was-war-euer-erstes-windows-betriebssystem.91893
-
Microsoft Trust Signing service abused to code-sign malware
Cybercriminals are abusing Microsoft’s Trusted Signing platform to code-sign malware executables with short-lived three-day certificates. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-trust-signing-service-abused-to-code-sign-malware/
-
How Google-Wiz Deal Counters Microsoft Defender’s Dominance
Google Aims to Match Microsoft Defender With $32B Buy of Wiz’s Cloud Security Tech. Google’s plan to buy cloud security firm Wiz for $32 billion highlights its drive to compete with Microsoft Defender and expand multi-cloud protection, and will put pressure on AWS to respond. Forrester Analyst Andras Cser says Wiz will likely remain independent…
-
Exchange Online bug mistakenly quarantines user emails
Microsoft is investigating an Exchange Online bug causing anti-spam systems to mistakenly quarantine some users’ emails. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-exchange-online-bug-mistakenly-quarantines-user-emails/