Tag: microsoft
-
Microsoft 365 Credentials Hit By Malicious OAuth App Attack
First seen on scworld.com Jump to article: www.scworld.com/brief/microsoft-365-credentials-hit-by-malicious-oauth-app-attack
-
Microsoft Dragon Copilot: Just what the doctor ordered?
Tags: microsoftFirst seen on scworld.com Jump to article: www.scworld.com/news/microsoft-dragon-copilot-just-what-the-doctor-ordered
-
Microsoft 365 credentials subjected to malicious OAuth app attack
First seen on scworld.com Jump to article: www.scworld.com/brief/microsoft-365-credentials-subjected-to-malicious-oauth-app-attack
-
StilachiRAT Exploits Chrome for Crypto Wallets and Credentials
StilachiRAT: Sophisticated malware targets crypto wallets credentials. Undetected, it maps systems steals data. Microsoft advises strong security measures. First seen on hackread.com Jump to article: hackread.com/stilachirat-exploits-chrome-crypto-wallets-credentials/
-
New RAT malware used for crypto theft, reconnaissance
Microsoft has discovered a new remote access trojan (RAT) that employs “sophisticated techniques” to avoid detection, ensure persistence, and extract sensitive information data. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-new-rat-malware-used-for-crypto-theft-reconnaissance/
-
WDAC und Driver Blocklist scheitern; MS will Video von Will Dormann
Brass zwischen Sicherheitsforscher Will Dormann und Microsoft? Dormann hatte die Tage einen Post auf Mastodon veröffentlicht, dass die Microsoft Vulnerable Driver Blocklist und WDAC auf drei unterschiedliche Arten scheitern, Windows zu schützen. Und als er ein Problem an Microsoft melden … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/03/17/windows-wdac-und-driver-blocklist-scheitern-ms-will-video-von-will-dormann/
-
March Windows updates mistakenly uninstall Copilot
Microsoft says the March 2025 Windows cumulative updates automatically and mistakenly remove the AI-powered Copilot digital assistant from some Windows 10 and Windows 11 systems. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-march-windows-updates-mistakenly-uninstall-copilot/
-
Microsoft 365 Targeted in New Phishing, Account Takeover Attacks
Threat actors are abusing Microsoft 365 infrastructure in a BEC campaign, and target its users in two brand impersonation campaigns. The post Microsoft 365 Targeted in New Phishing, Account Takeover Attacks appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/microsoft-365-targeted-in-new-phishing-account-takeover-attacks/
-
FCC creates national security council to counter cyber threats from China
Tags: 5G, access, ai, attack, breach, china, communications, computing, cyber, cyberattack, cybersecurity, data, espionage, government, group, hacking, incident, infrastructure, Internet, microsoft, office, strategy, supply-chain, technology, threat, vulnerabilityThree-pronged strategy: The council will pursue a tripartite strategy focusing on reducing dependency, mitigating vulnerabilities, and ensuring American technological leadership.First, it aims to reduce American technology and telecommunications sectors’ trade and supply chain dependencies on foreign adversaries. This goal aligns with broader government efforts to “friend-shore” critical technology supply chains and decrease reliance on potentially…
-
Microsoft wouldn’t look at a bug report without a video. Researcher maliciously complied
Tags: microsoftMaddening techno loop, Zoolander reference, and 14 minutes of time wasted First seen on theregister.com Jump to article: www.theregister.com/2025/03/17/microsoft_bug_report_troll/
-
Windows 10 und 11: Microsoft löscht versehentlich Copilot-App per Update
Einige werden sie vermissen, anderen wird sie kaum fehlen: Die Copilot-App ist auf manchen Windows-Systemen verschwunden. Schuld sind die März-Updates. First seen on golem.de Jump to article: www.golem.de/news/windows-10-und-11-microsoft-loescht-versehentlich-copilot-app-per-update-2503-194356.html
-
Motherboard Mishaps Undermine Trust, Security
MSI and Microsoft warn about new Windows Preview blue screens on some motherboards, the latest mishap to raise questions over the reliability of hardware and firmware. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/motherboard-mishaps-undermine-trust-security
-
PowerShell Gallery Prone to Typosquatting, Other Supply Chain Attacks
Microsoft is aware of the issue, but so far its attempts to address it don’t appear to have worked, researchers say. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/powershell-gallery-prone-to-typosquatting-other-supply-chain-attacks
-
Malicious Adobe, DocuSign OAuth apps target Microsoft 365 accounts
Cybercriminals are promoting malicious Microsoft OAuth apps that masquerade as Adobe and DocuSign apps to deliver malware and steal Microsoft 365 accounts credentials. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/malicious-adobe-docusign-oauth-apps-target-microsoft-365-accounts/
-
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 37
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Undercover miner: how YouTubers get pressed into distributing SilentCryptoMiner as a restriction bypass tool Ragnar Loader Desert Dexter. Attacks on Middle Eastern countries Ballista New IoT Botnet Targeting Thousands of TP-Link Archer Routers Microsoft patches […]…
-
Exchange Online- und MS365-Probleme durch Schwachstelle? (März 2025)
Microsoft kämpft seit Februar 2025 mit Störungen seiner Microsoft 365-Dienste und Exchange Online, hält sich aber bezüglich der Ursache bedeckt. Mir liegen Informationen vor, dass ein Bug bzw. eine Schwachstelle in Microsoft Exchange Online dazu führte, dass ein Eingriff eines … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/03/15/exchange-online-und-ms365-probleme-durch-schwachstelle-maerz-2025/
-
Microsoft Update Catalog: Sicherheitsrisiko durch Rechteerweiterungen (CVE-2024-49147)
Ich stelle noch eine Sicherheitsmeldung hier im Blog ein, die mir bereits seit Mitte Dezember 2024 vorliegt, aber “hängen geblieben ist”. Im Microsoft Update-Katalog gab es eine kritische Schwachstelle CVE-2024-49147, die im Microsoft Update Catalog Rechteerweiterungen ermöglichte. Diese Schwachstelle wurde … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/03/15/microsoft-update-catalog-sicherheitsrisiko-durch-rechteerweiterungen-cve-2024-49147/
-
Exchange Online- und MS365-Probleme durch Schwachstelle? (März 2025
Microsoft kämpft seit Februar 2025 mit Störungen seiner Microsoft 365-Dienste und Exchange Online, hält sich aber bezüglich der Ursache bedeckt. Mir liegen Informationen vor, dass ein Bug bzw. eine Schwachstelle in Microsoft Exchange Online dazu führte, dass ein Eingriff eines … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/03/15/exchange-online-und-ms365-probleme-durch-schwachstelle-maerz-2025/
-
Microsoft restores VS Code theme flagged as malicious: We messed up
First seen on scworld.com Jump to article: www.scworld.com/news/microsoft-restores-vs-code-theme-flagged-as-malicious-we-messed-up
-
Week-long Exchange Online outage causes email failures, delays
Microsoft says it partially mitigated a week-long Exchange Online outage causing delays or failures when sending or receiving email messages. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/week-long-exchange-online-outage-causes-email-failures-delays/
-
Tech giants seek data standards amid AI push
Microsoft, IBM and Cisco are among the vendors backing the OASIS Data Provenance Standards Technical Committee announced last week. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ai-data-quality-ibm-microsoft-red-hat-cisco/742581/
-
Tech industry alliance rallies around data quality
Microsoft, IBM and Cisco are among the vendors backing the OASIS Data Provenance Standards Technical Committee announced last week. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ai-data-quality-ibm-microsoft-red-hat-cisco/742581/
-
Microsoft Windows: Kritische Sicherheitslücke entdeckt
First seen on datensicherheit.de Jump to article: www.datensicherheit.de/microsoft-windows-kritische-sicherheitsluecke-2025
-
New Microsoft 365 Phishing Scam Tricks Users Into Calling Fake Support
New Microsoft 365 phishing scam exploits fake support numbers to steal credentials. Learn how attackers bypass security and how to stay protected. First seen on hackread.com Jump to article: hackread.com/new-microsoft-365-phishing-scam-calling-fake-support/
-
New Context Compliance Exploit Jailbreaks Major AI Models
Microsoft researchers have uncovered a surprisingly straightforward method that can bypass safety guardrails in most leading AI systems. In a technical blog post published on March 13, 2025, Microsoft’s Mark Russinovich detailed the >>Context Compliance Attack
-
New CCA Jailbreak Method Works Against Most AI Models
Two Microsoft researchers have devised a new jailbreak method that bypasses the safety mechanisms of most AI systems. The post New CCA Jailbreak Method Works Against Most AI Models appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/new-cca-jailbreak-method-works-against-most-ai-models/
-
Fast 1 Million Geschäfts- und Privat-PCs kompromittiert
Tags: ciso, control, cyersecurity, github, mail, malware, microsoft, powershell, ransomware, softwareEin Bericht von Microsoft zeigt, wie wichtig es für CISOs ist, das Sicherheitsbewusstsein ihrer Mitarbeiter zu schulen.Malware ist und bleibt ein massives Problem, welches CISOs zunehmend Kopfzerbrechen bereitet. Insbesondere wenn Mitarbeitende durch unvorsichtiges Online-Surfen ihre Geräte und ganze IT-Netzwerke mit Schadsoftware infizieren. Sind Systeme kompromittiert, kann das schwerwiegende Konsequenzen wie Ransomware-Attacken nach sich ziehen. Zu…