Collecting Cyber-News from over 60 sources

Tag: microsoft

CISA Warns Microsoft Internet Key Exchange RCE Flaw Is Actively Exploited

Aug 19, 2026 4:12 PM

Tags: cisa, cve, cyber, cybersecurity, exploit, flaw, infrastructure, Internet, kev, microsoft, rce, remote-code-execution, service, vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in Microsoft Internet Key Exchange (IKE) Service Extensions to its Known Exploited Vulnerabilities (KEV) Catalog. This vulnerability, tracked as CVE-2026-33824, is currently being actively exploited. The issue is classified as a double-free vulnerability, which means it affects the memory management of Microsoft…
Windows 11 24H2 Home and Pro Support Ends in October 2026

Aug 19, 2026 2:55 PM

Tags: cyber, microsoft, update, windows

Microsoft has issued a 60-day reminder that the Windows 11 version 24H2 Home and Pro editions will reach the end of updates on October 13, 2026. This date also marks the end of servicing for Windows 10 Enterprise LTSB 2016. As a result, both organizations and individual users must plan their upgrade or migration activities…
Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation

Aug 19, 2026 1:55 PM

Tags: apple, authentication, cve, cybersecurity, exploit, flaw, infrastructure, kev, macOS, microsoft, vcenter, vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, stating they are being exploited in the wild.The shortcomings added to the KEV catalog are listed below – CVE-2026-65400 (CVSS score: 9.8) – An improper authentication vulnerability impacting Apple macOS that could allow an…
Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation

Aug 19, 2026 1:55 PM

Tags: apple, authentication, cve, cybersecurity, exploit, flaw, infrastructure, kev, macOS, microsoft, vcenter, vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, stating they are being exploited in the wild.The shortcomings added to the KEV catalog are listed below – CVE-2026-65400 (CVSS score: 9.8) – An improper authentication vulnerability impacting Apple macOS that could allow an…
Microsoft fixes known issue causing Windows Defender crashes

Aug 19, 2026 1:55 PM

Tags: access, microsoft, update, windows

Microsoft has resolved a bug that caused Windows Defender to crash after a recent security update, resulting in 0xc0000005 access violation errors on some affected systems. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-fixes-known-issue-causing-windows-defender-crashes/
Thunderbird 154 – Update bringt Microsoft Graph und neue Mac-Vorschau

Aug 19, 2026 12:56 PM

Tags: browser, microsoft, update

Neben Firefox hat Mozilla nun auch Thunderbird in Version 154 veröffentlicht, zum Update gehören zahlreiche Verbesserungen und Korrekturen. First seen on computerbase.de Jump to article: www.computerbase.de/news/apps/thunderbird-154-update-bringt-microsoft-graph-und-neue-mac-vorschau.98914
Microsoft Tracks MacSync Stealer by Its Behavior, Not Its Domains

Aug 19, 2026 12:56 PM

Tags: microsoft, password

Microsoft tracked over 30 MacSync Stealer domains by focusing on behavioral patterns, revealing a campaign targeting passwords, keys, wallets and other data. Domain blocking is a losing game when the thing you’re blocking can register a new domain faster than you can add it to a list. That’s the exact problem Microsoft Defender Experts ran…
Microsoft Links 30+ Rotating Domains to MacSync Stealer Infrastructure

Aug 19, 2026 11:56 AM

Tags: data, endpoint, infrastructure, macOS, malware, microsoft, network

Microsoft Defender Experts have linked more than 30 web domains to MacSync Stealer, a macOS-focused information stealer, after correlating recurring endpoint and network behaviors across changing infrastructure, tracing the malware from payload retrieval through data collection, staging, and exfiltration.The tech giant said it required multiple endpoint and network behaviors to align before First seen on…
Windows 11 24H2 Home and Pro reach end of support in 2 months

Aug 19, 2026 11:56 AM

Tags: microsoft, update, windows

Microsoft has reminded customers that systems running Home and Pro editions of Windows 11 24H2 will stop receiving updates in two months. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-11-24h2-home-and-pro-reach-end-of-support-in-2-months/
U.S. CISA adds Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE flaws to its Known Exploited Vulnerabilities catalog

Aug 19, 2026 10:55 AM

Tags: apple, cisa, cve, cybersecurity, exploit, flaw, infrastructure, Internet, kev, macOS, microsoft, remote-code-execution, service, vcenter, vmware, vulnerability, windows

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-33824 is a Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution…
Microsoft Links 30+ Domains to MacSync Stealer’s Credential-Theft and Data-Exfiltration Infrastructure

Aug 19, 2026 10:55 AM

Tags: control, credentials, cyber, data, endpoint, infrastructure, macOS, microsoft, network, theft

More than 30 domains tied to MacSync Stealer, exposing a rotating macOS-focused infrastructure that supports payload delivery, command-and-control, credential theft, staging, and chunked data exfiltration. The investigation shows why defenders should prioritize repeatable endpoint and network behavior over static domain-based detections. Observed executions originate from interactive zsh sessions and use curl to fetch payloads from…
Critical Microsoft Copilot CoSnitch Flaw Lets Hackers Steal Sensitive Data With One Click

Aug 19, 2026 7:55 AM

Tags: access, cve, cyber, data, flaw, hacker, malicious, microsoft, vulnerability

A critical one-click vulnerability in Microsoft Copilot Personal, tracked as CVE-2026-24301 and dubbed CoSnitch. This flaw could enable an attacker to trigger malicious Copilot prompts, access data from connected OAuth applications, and silently transmit that information to an attacker-controlled server. Microsoft addressed this issue on August 18, 2026, following Varonis’s responsible disclosure in December 2025.…
Microsoft’s August Patch Tuesday: 400+ Bugs Fixed, One Zero-Day Under Attack

Aug 18, 2026 11:36 PM

Tags: attack, exploit, flaw, microsoft, rce, remote-code-execution, update, windows, zero-day

Microsoft’s August Patch Tuesday fixes about 400 security flaws, including an actively exploited Windows zero-day and multiple 9.8-rated RCE bugs. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/news/news-microsoft-august-2026-patch-tuesday/
Microsoft Confirms ShieldBreak Defender Flaw, Windows Defender Fix Still Pending

Aug 18, 2026 8:55 PM

Tags: flaw, microsoft, vulnerability, windows

Microsoft is working on a fix for the ShieldBreak Windows Defender vulnerability as a public proof of concept raises privilege-escalation concerns. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/cybersecurity/news-microsoft-shieldbreak-windows-defender-fix/
Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps

Aug 18, 2026 8:55 PM

Tags: data, flaw, microsoft, threat, vulnerability

Varonis Threat Labs has disclosed three vulnerabilities in Microsoft Copilot Personal that it said could allow a single click on a crafted link to silently pull data from connected apps and other information available to the victim’s Copilot session.The flaws, which the researchers collectively named CoSnitch, turn in part on an undocumented URL parameter that…
Hacker Claims Millions of Records Stolen From Azure Tenants

Aug 18, 2026 5:56 PM

Tags: breach, hacker, microsoft, phishing, threat

A threat actor is claiming to have stolen millions of employee records from the Microsoft Azure environments of several major companies, raising concerns that the information could be used to launch targeted phishing, impersonation, and privilege escalation attacks. The threat actor, known as >>TheHatman,<< has reportedly posted internal employee directories belonging to companies including McDonald's,…
Microsoft Copilot reveals secret input that allowed it to be hacked

Aug 18, 2026 3:55 PM

Tags: hacker, microsoft, password

Secret parameter allowed hackers to steal passwords when a target clicked on a link. First seen on arstechnica.com Jump to article: arstechnica.com/security/2026/08/microsoft-copilot-reveals-secret-input-that-allowed-it-to-be-hacked/
TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks

Aug 18, 2026 3:55 PM

Tags: control, credentials, cybersecurity, framework, hacker, infrastructure, microsoft, network, service

Cybersecurity researchers have disclosed details of a previously undocumented Python implant framework dubbed TWINLOOT.”TWINLOOT is a modular, PyArmor-hardened Python implant designed to operate its entire command-and-control infrastructure inside trusted Microsoft services,” Ontinue said in a technical report shared with The Hacker News. “Tasking flows through SharePoint Online file First seen on thehackernews.com Jump to article:…
Silent ‘TwinLoot’ Cyber Threat Operates Entirely From Microsoft’s Cloud

Aug 18, 2026 3:55 PM

Tags: cloud, credentials, cyber, framework, malware, microsoft, tactics, threat

The Python-based malware framework takes living-off-the-land tactics to a new heights of stealth, with a modular implant that steals credentials and achieves persistence. First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/silent-twinloot-threat-operates-microsoft-cloud
Microsoft tests faster Windows File Explorer, new context menu

Aug 18, 2026 1:55 PM

Tags: microsoft, windows

Microsoft has started testing a faster File Explorer and a less cluttered and more customizable context menu in Windows 11 preview builds rolling out to Insiders this week. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-tests-faster-windows-explorer-customizable-context-menu/
8 Best EDR Solutions Software for 2026

Aug 18, 2026 11:55 AM

Tags: crowdstrike, edr, microsoft, software

Compare the 8 best EDR solutions for 2026, including Microsoft, CrowdStrike, SentinelOne, Palo Alto, and more, based on security features and use cases. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/products/edr-solutions/
Microsoft confirms outage affecting search in Microsoft 365 apps

Aug 18, 2026 11:55 AM

Tags: microsoft

Microsoft says some users are experiencing issues searching in Microsoft 365 apps, including Outlook on the web, Outlook desktop, SharePoint Online, and OneDrive. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-working-to-fix-bug-behind-microsoft-365-search-issues/
Microsoft Adds Customizable Context Menu to Windows 11 File Explorer

Aug 18, 2026 11:55 AM

Tags: cyber, microsoft, update, windows

Microsoft has introduced a redesigned and customizable context menu for the Windows 11 File Explorer, along with significant improvements in reliability and responsiveness. Announced for Windows Insiders on August 17, this update addresses a common issue in Windows 11: slow and cluttered right-click menus that can be affected by various application extensions and shell integrations.…
Microsoft starts removing WMIC tool used by cybercriminals

Aug 18, 2026 10:56 AM

Tags: cybercrime, microsoft, tool, windows

Microsoft announced that it removed the Windows Management Instrumentation Command-line (WMIC) tool from Windows 11 24H2 and 25H2, as well as from Windows 11 beta builds released this week. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-removes-wmic-lolbin-tool-in-windows-11-beta-builds/
PoC Exploit Released for Microsoft SCCM Vulnerability Enabling SYSTEM-Level Code Execution

Aug 18, 2026 7:55 AM

Tags: cve, cyber, exploit, microsoft, vulnerability

A recently disclosed proof-of-concept (PoC) exploit for Microsoft Configuration Manager, previously known as System Center Configuration Manager (SCCM), demonstrates how an authenticated domain user could potentially escalate privileges to SYSTEM on a vulnerable Primary Site Server. This issue, tracked as CVE-2026-47301, was reported by security researcher Omri Baso and is characterized as an exploit chain…
Detecting cloud ransomware in Azure with Tenable One’s cloud detection and response capabilities

Aug 17, 2026 11:55 PM

Tags: access, ai, attack, backup, breach, cloud, control, credentials, cybercrime, data, defense, detection, encryption, endpoint, group, guide, infrastructure, intelligence, malicious, malware, microsoft, mitre, radius, ransom, ransomware, service, software, tactics, threat, tool, unauthorized

Learn how Tenable One Cloud Exposure helps you unmask the sophisticated tactics of cybercrime group Storm-0501, which carries out Azure-based cloud ransomware campaigns. Tenable One Cloud Exposure uses AI-powered threat stories to expose Storm-0501 TTPs, backed by precision-engineered threat detection alerts. Key takeaways Storm-0501 demonstrates that cloud-first ransomware groups have shifted from simple endpoint encryption…
Detecting cloud ransomware in Azure with Tenable One’s cloud detection and response capabilities

Aug 17, 2026 11:55 PM

Tags: access, ai, attack, backup, breach, cloud, control, credentials, cybercrime, data, defense, detection, encryption, endpoint, group, guide, infrastructure, intelligence, malicious, malware, microsoft, mitre, radius, ransom, ransomware, service, software, tactics, threat, tool, unauthorized

Learn how Tenable One Cloud Exposure helps you unmask the sophisticated tactics of cybercrime group Storm-0501, which carries out Azure-based cloud ransomware campaigns. Tenable One Cloud Exposure uses AI-powered threat stories to expose Storm-0501 TTPs, backed by precision-engineered threat detection alerts. Key takeaways Storm-0501 demonstrates that cloud-first ransomware groups have shifted from simple endpoint encryption…
Detecting cloud ransomware in Azure with Tenable One’s cloud detection and response capabilities

Aug 17, 2026 11:55 PM

Tags: access, ai, attack, backup, breach, cloud, control, credentials, cybercrime, data, defense, detection, encryption, endpoint, group, guide, infrastructure, intelligence, malicious, malware, microsoft, mitre, radius, ransom, ransomware, service, software, tactics, threat, tool, unauthorized

Learn how Tenable One Cloud Exposure helps you unmask the sophisticated tactics of cybercrime group Storm-0501, which carries out Azure-based cloud ransomware campaigns. Tenable One Cloud Exposure uses AI-powered threat stories to expose Storm-0501 TTPs, backed by precision-engineered threat detection alerts. Key takeaways Storm-0501 demonstrates that cloud-first ransomware groups have shifted from simple endpoint encryption…
Detecting cloud ransomware in Azure with Tenable One’s cloud detection and response capabilities

Aug 17, 2026 11:55 PM

Tags: access, ai, attack, backup, breach, cloud, control, credentials, cybercrime, data, defense, detection, encryption, endpoint, group, guide, infrastructure, intelligence, malicious, malware, microsoft, mitre, radius, ransom, ransomware, service, software, tactics, threat, tool, unauthorized

Learn how Tenable One Cloud Exposure helps you unmask the sophisticated tactics of cybercrime group Storm-0501, which carries out Azure-based cloud ransomware campaigns. Tenable One Cloud Exposure uses AI-powered threat stories to expose Storm-0501 TTPs, backed by precision-engineered threat detection alerts. Key takeaways Storm-0501 demonstrates that cloud-first ransomware groups have shifted from simple endpoint encryption…
Detecting cloud ransomware in Azure with Tenable One’s cloud detection and response capabilities

Aug 17, 2026 11:55 PM

Tags: access, ai, attack, backup, breach, cloud, control, credentials, cybercrime, data, defense, detection, encryption, endpoint, group, guide, infrastructure, intelligence, malicious, malware, microsoft, mitre, radius, ransom, ransomware, service, software, tactics, threat, tool, unauthorized

Learn how Tenable One Cloud Exposure helps you unmask the sophisticated tactics of cybercrime group Storm-0501, which carries out Azure-based cloud ransomware campaigns. Tenable One Cloud Exposure uses AI-powered threat stories to expose Storm-0501 TTPs, backed by precision-engineered threat detection alerts. Key takeaways Storm-0501 demonstrates that cloud-first ransomware groups have shifted from simple endpoint encryption…