Tag: microsoft
-
Oops, they did it again: Microsoft breaks Outlook with another dubious update
Testing? We’ve heard of it First seen on theregister.com Jump to article: www.theregister.com/2025/03/20/outlook_outage_again/
-
Windows Shortcut-Exploit seit 2017 von staatlichen Hackers als 0-Day genutzt
Sicherheitsforscher der Trend Micro Zero Day Initiative (ZDI) weisen auf eine 0-Day-Schwachstelle ( ZDI-CAN-25373) in Windows hin, die wohl seit 2017 von 11 staatlich unterstützten Hackergruppen aus Nordkorea, Iran, Russland und China ausgenutzt wird. Microsoft hat die Schwachstelle in Verknüpfungsdateien … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/03/20/windows-shortcut-exploit-seit-2017-von-staatlichen-hackers-als-0-day-genutzt/
-
VSCode extensions found downloading early-stage ransomware
Two malicious VSCode Marketplace extensions were found deploying in-development ransomware from a remote server, exposing critical gaps in Microsoft’s review process. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/vscode-extensions-found-downloading-early-stage-ransomware/
-
Microsoft Won’t Fix This Bad Zero Day (Despite Wide Abuse)
Satya says NO: Redmond blames Windows users, rather than solve 30-year-old bug”, exploited since 2017. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/03/windows-shortcut-lnk-zdi-can-25373-richixbw/
-
How CASB security protects your school district
Many districts remain unaware of CASBs or their necessity despite relying on cloud applications. This guide explains how these tools protect student safety in cloud-driven environments. A Cloud Access Security Broker (CASB) enforces security policies as an intermediary between cloud applications and users. Districts using Google Workspace, Microsoft 365, or similar platforms for collaboration and…
-
Nation-state groups hit hundreds of organizations with Microsoft Windows zero-day
Trend Micro researchers discovered and reported the eight-year-old defect to Microsoft six months ago. The company hasn’t made any commitments to patch or remediate the issue. First seen on cyberscoop.com Jump to article: cyberscoop.com/microsoft-windows-zero-day-exploits-nation-states/
-
Microsoft lifts Windows 11 upgrade block after Asphalt 8 crash fix
Microsoft has lifted an upgrade block that prevented Asphalt 8: Airborne players from upgrading their systems to Windows 11 24H2 due to compatibility issues. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-lifts-windows-11-upgrade-block-after-asphalt-8-crash-fix/
-
State-Backed Hackers Exploiting Windows Zero-Day Since 2017
At least 11 state-sponsored hacking groups from North Korea, Iran, Russia, and China have been actively exploiting a newly uncovered Windows zero-day vulnerability in cyber espionage and data theft attacks since 2017. Despite clear evidence of exploitation, Microsoft has declined… First seen on sensorstechforum.com Jump to article: sensorstechforum.com/zdi-can-25373-zero-day-exploited-since-2017/
-
New Windows zero-day feared abused in widespread espionage for years
.The zero-day vulnerability, tracked as ZDI-CAN-25373, has yet to be publicly acknowledged and assigned a CVE-ID by Microsoft. ZDI-CAN-25373 has to do with the way Windows displays the contents of .lnk files, a type of binary file used by Windows to act as a shortcut to a file, folder, or application, through the Windows UI.A…
-
China, Russia, North Korea Hackers Exploit Windows Security Flaw
Tags: attack, china, exploit, flaw, government, group, hacker, infrastructure, korea, microsoft, north-korea, russia, threat, update, windowsAmost a dozen state-sponsored threat groups from Russia, China, and North Korea have been exploiting a security flaw in WIndows in attacks on governments and critical infrastructure that date back to 2017. According to Trend Micro’s VDI unit, Microsoft has no plans to patch the vulnerability. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/03/china-russia-north-korea-hackers-exploit-windows-security-flaw/
-
How to Protect Your Business from Cyber Threats: Mastering the Shared Responsibility Model
Cybersecurity isn’t just another checkbox on your business agenda. It’s a fundamental pillar of survival. As organizations increasingly migrate their operations to the cloud, understanding how to protect your digital assets becomes crucial. The shared responsibility model, exemplified through Microsoft 365’s approach, offers a framework for comprehending and implementing effective cybersecurity First seen on thehackernews.com…
-
Hacker nutzen alte Windows-Sicherheitslücke aus Microsoft tut nichts
Tags: bug, bug-bounty, china, cyberattack, exploit, germany, hacker, iran, microsoft, military, north-korea, update, vulnerability, windowsExperten des Sicherheits-Unternehmens Trend Micro haben eine als ZDI-CAN-25373 bezeichnete Sicherheitslücke in Windows entdeckt, die Angreifer seit mindestens 2017 ausnutzen. Über die Lücke können die Angreifer Schadcode auf den betroffenen Windows-Rechnern ausführen, sofern der Benutzer eine verseuchte Webseite besucht oder eine infizierte Datei öffnet.Die Lücke steckt in der Vorgehensweise, wie Windows .lnk-Dateien (Verknüpfungsdateien) verarbeitet. Angreifer können Kommandozeilen-Befehle, die…
-
Golem Karrierewelt: Heute Live-Webinar: Microsoft Copilot in Meetings
Welche Effizienzgewinne verspricht der Einsatz von KI in Meetings? Im Podcast dreht sich alles um den Einsatz von Microsoft Copilot in Teams-Meetings. First seen on golem.de Jump to article: www.golem.de/news/golem-karrierewelt-heute-live-webinar-microsoft-copilot-in-meetings-2503-194395.html
-
Nation-State Groups Abuse Microsoft Windows Shortcut Exploit
Trend Micro uncovered a method that nation-state threat actors are using to target victims via the Windows .Ink shortcut file extension. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/nation-state-groups-abuse-microsoft-windows-shortcut-exploit
-
11 Nation-State Hackers Exploit Unpatched Windows Flaw Since 2017
Microsoft refuses to patch serious Windows shortcut vulnerability abused in global espionage campaigns! First seen on hackread.com Jump to article: hackread.com/nation-state-hackers-exploit-windows-unpatched-flaw-2017/
-
Google’s $32B Wiz Acquisition: A Watershed Moment in Cloud Security MA
Google acquires cloud security leader Wiz for $32B”, the largest cybersecurity deal ever. This historic purchase boosts Google Cloud’s security offerings, enhances its multicloud capabilities, and intensifies competition with Microsoft and AWS in the rapidly evolving cloud security landscape. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/03/googles-32b-wiz-acquisition-a-watershed-moment-in-cloud-security-ma/
-
Microsoft Sounds Warning on Multifunctional ‘StilachiRAT’
The sneaky malware packs capabilities for system reconnaissance as well as credential and cryptocurrency theft. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/microsoft-sounds-warning-on-multifunctional-stilachirat
-
BEC Attacks Set Sights On Microsoft 365 Infrastructure
First seen on scworld.com Jump to article: www.scworld.com/brief/bec-attacks-set-sights-on-microsoft-365-infrastructure
-
Druva expands backup services to Microsoft Azure
First seen on scworld.com Jump to article: www.scworld.com/brief/druva-expands-backup-services-to-microsoft-azure
-
Microsoft identifies new RAT targeting cryptocurrency wallets and more
A previously unreported remote access trojan that Microsoft researchers dubbed StilachiRAT is designed to steal a wide range of data, including information about cryptocurrency wallet extensions for Google’s Chrome browser. First seen on therecord.media Jump to article: therecord.media/stilachirat-new-remote-access-trojan-crypto-wallets
-
Microsoft isn’t fixing 8-year-old shortcut exploit abused for spying
‘Only’ a local access bug but important part of N Korea, Russia, and China attack picture First seen on theregister.com Jump to article: www.theregister.com/2025/03/18/microsoft_trend_flaw/
-
Google Purchases Wiz in $32B Deal to Boost Cloud Security
Largest Cybersecurity Deal of All-Time Aims to Boost AI-Driven Multicloud Solutions. Google Cloud plans to acquire cloud security leader Wiz for $32 billion, integrating its AI-powered security capabilities to better protect companies across multiple cloud environments. The deal reinforces protections across multicloud environments, including AWS, Microsoft Azure, and Google Cloud. First seen on govinfosecurity.com Jump…
-
Unpatched Windows Zero-Day Flaw Exploited by 11 State-Sponsored Threat Groups Since 2017
An unpatched security flaw impacting Microsoft Windows has been exploited by 11 state-sponsored groups from China, Iran, North Korea, and Russia as part of data theft, espionage, and financially motivated campaigns that date back to 2017.The zero-day vulnerability, tracked by Trend Micro’s Zero Day Initiative (ZDI) as ZDI-CAN-25373, refers to an issue that allows bad…
-
OAuth Attacks Target Microsoft 365, GitHub
In a cyber twist, attackers behind two of the campaigns are using the apps to redirect users to phishing and malware distribution sites. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/oauth-attacks-target-microsoft-365-github
-
Microsoft Warns of StilachiRAT Stealing Remote Desktop Protocol Session Data
Microsoft has recently issued a warning about a novel remote access trojan (RAT) known as StilachiRAT, which poses significant threats to system security by stealing sensitive data, including credentials and cryptocurrency information. This sophisticated malware was discovered by Microsoft Incident Response researchers in November 2024 and is notable for its advanced evasion techniques and persistence…
-
Sophisticated Phishing Attack Leverages Microsoft 365 Infrastructure to Target Users
Tags: attack, business, control, credentials, cyber, email, exploit, infrastructure, microsoft, phishingA highly sophisticated phishing campaign has been uncovered exploiting Microsoft 365’s trusted infrastructure to facilitate credential harvesting and account takeover attempts. This attack leverages legitimate Microsoft domains and tenant misconfigurations to conduct Business Email Compromise (BEC) operations, effectively bypassing traditional email security controls by exploiting inherent trust mechanisms within the Microsoft ecosystem. Attack Mechanism The…
-
New StilachiRAT uses sophisticated techniques to avoid detection
Microsoft discovered a new remote access trojan (RAT), dubbed StilachiRAT, that uses sophisticated techniques to avoid detection. In November 2024, Microsoft researchers discovered StilachiRAT, a sophisticated remote access trojan (RAT) designed for stealth, persistence, and data theft. Analysis of its WWStartupCtrl64.dll module revealed that the malware supports sophisticated functionalities to steal credentials from browsers, digital…
-
Microsoft Warns of StilachiRAT: A Stealthy RAT Targeting Credentials and Crypto Wallets
Microsoft is calling attention to a novel remote access trojan (RAT) named StilachiRAT that it said employs advanced techniques to sidestep detection and persist within target environments with an ultimate aim to steal sensitive data.The malware contains capabilities to “steal information from the target system, such as credentials stored in the browser, digital wallet information,…