Tag: microsoft
-
Microsoft issues outband fix for Windows Server 2022 NUMA glitch
Update addresses boot failures on multi-node systems First seen on theregister.com Jump to article: www.theregister.com/2025/01/22/windows_server_numa_glitch/
-
Windows 11 24H2 now also offered to all eligible Windows 10 PCs
Microsoft says Windows 11 24H2 has entered the broad deployment phase and is now available to all seekers via Windows Update. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-expands-windows-11-24h2-rollout-to-eligible-windows-10-pcs/
-
Star Blizzard: WhatsApp-Kontoübernahme durch Phishing-Kampagne
Microsoft berichtet von einer Phishing-Kampagne der kriminellen Gruppe Star Blizzard. Sie versucht, WhatsApp-Konten zu übernehmen. First seen on heise.de Jump to article: www.heise.de/news/Star-Blizzard-WhatsApp-Kontouebernahme-durch-Phishing-Kampagne-10252402.html
-
Großflächige Brute-Force-Angriffe auf M365 vorsichtshalber Log-ins checken
In den vergangenen Wochen gab es großflächige Angriffe auf Zugangsdaten zur Microsoft-Cloud. IT-Admins sollten prüfen, ob diese eventuell erfolgreich waren. First seen on heise.de Jump to article: www.heise.de/news/Grossflaechige-Brute-Force-Angriffe-auf-M365-vorsichtshalber-Log-ins-checken-10252167.html
-
Microsoft to force Windows 11 24H2 on Home and Pro users
Ready or not, here I come First seen on theregister.com Jump to article: www.theregister.com/2025/01/20/microsoft_to_force_windows_11/
-
Golem Karrierewelt: Live-Webinar – Microsoft-365-Sicherheitslücke TokenSmith
Microsoft-365-Experte Andreas Hähnel zeigt am Donnerstag, 23. Januar, um 16 Uhr auf Youtube, wie Systeme vor Angriffen durch TokenSmith geschützt werden können. First seen on golem.de Jump to article: www.golem.de/news/golem-karrierewelt-live-webinar-microsoft-365-sicherheitsluecke-tokensmith-2501-192614.html
-
Gezielte Cyberangriffe: Bedrohungsakteure missbrauchen Microsoft 365
Sophos X-Ops hat eine raffinierte Angriffskampagne entdeckt, bei der Cyberkriminelle gezielt Unternehmen infiltrieren. Dabei nutzen sie Schwachstellen innerhalb der Office-365-Plattform aus, um entweder sensible Daten zu stehlen oder Ransomware zu platzieren. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/gezielte-cyberangriffe-bedrohungsakteure-missbrauchen-microsoft-365
-
Beko Technologies bestätigt Ransomware-Angriff
srcset=”https://b2b-contenthub.com/wp-content/uploads/2024/12/shutterstock_2491655697.jpg?quality=50&strip=all 7360w, b2b-contenthub.com/wp-content/uploads/2024/12/shutterstock_2491655697.jpg?resize=300%2C168&quality=50&strip=all 300w, b2b-contenthub.com/wp-content/uploads/2024/12/shutterstock_2491655697.jpg?resize=768%2C432&quality=50&strip=all 768w, b2b-contenthub.com/wp-content/uploads/2024/12/shutterstock_2491655697.jpg?resize=1024%2C576&quality=50&strip=all 1024w, b2b-contenthub.com/wp-content/uploads/2024/12/shutterstock_2491655697.jpg?resize=1536%2C864&quality=50&strip=all 1536w, b2b-contenthub.com/wp-content/uploads/2024/12/shutterstock_2491655697.jpg?resize=2048%2C1152&quality=50&strip=all 2048w, b2b-contenthub.com/wp-content/uploads/2024/12/shutterstock_2491655697.jpg?resize=1240%2C697&quality=50&strip=all 1240w, b2b-contenthub.com/wp-content/uploads/2024/12/shutterstock_2491655697.jpg?resize=150%2C84&quality=50&strip=all 150w, b2b-contenthub.com/wp-content/uploads/2024/12/shutterstock_2491655697.jpg?resize=854%2C480&quality=50&strip=all 854w, b2b-contenthub.com/wp-content/uploads/2024/12/shutterstock_2491655697.jpg?resize=640%2C360&quality=50&strip=all 640w, b2b-contenthub.com/wp-content/uploads/2024/12/shutterstock_2491655697.jpg?resize=444%2C250&quality=50&strip=all 444w” width=”1024″ height=”576″ sizes=”(max-width: 1024px) 100vw, 1024px”>Die Ransomware-Bande Black Basta hat gestohlene Daten von Beko Technologies im Darknet veröffentlicht. PeopleImages.com Yuri A Shutterstock.comBeko Technologies wurde im Dezember 2024 von Cyberkriminellen erpresst. Die Ransomware-Gruppe Black…
-
Threat actors abusing Microsoft Teams in ransomware attacks
Sophos researchers observed two separate threat campaigns in which attackers used Microsoft Teams to pose as IT support personnel and gain access to victims’ systems. First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366618294/Threat-actors-abusing-Microsoft-Teams-in-ransomware-attacks
-
SQL Injection Vulnerability in Microsoft’s DevBlogs Lets Hackers Injecting Malicious SQL
In a recent discovery, a security researcher uncovered a critical SQL injection vulnerability on Microsoft’s DevBlogs website (accessible at https://devblogs.microsoft.com). This vulnerability could allow attackers to manipulate the site’s underlying database by injecting malicious SQL queries, posing a significant risk to the platform and its data integrity. Identifying the Vulnerability The vulnerability was found in the…
-
Email Bombing, ‘Vishing’ Tactics Abound in Microsoft 365 Attacks
Sophos noted more than 15 attacks have been reported during the past three months. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/email-bombing-vishing-tactics-abound-microsoft-365-attacks
-
‘Sneaky Log’ Microsoft Spoofing Scheme Sidesteps Two-Factor Security
The phishing-as-a-service kit from Sneaky Log creates fake authentication pages to farm account information, including two-factor security codes. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/sneaky-log-microsoft-phishing-2fa/
-
Microsoft Sets End of Extended Support for Exchange Server 2016, 2019
Tags: microsoftFirst seen on scworld.com Jump to article: www.scworld.com/brief/microsoft-sets-end-of-extended-support-for-exchange-server-2016-2019
-
Microsoft previews Game Assist in-game browser in Edge Stable
Tags: microsoftMicrosoft has announced that Game Assist, its recently unveiled in-game browser, is now also available in preview for Microsoft Edge Stable users. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-previews-game-assist-in-game-browser-in-edge-stable/
-
Ransomware gangs pose as IT support in Microsoft Teams phishing attacks
Ransomware gangs are increasingly adopting email bombing followed by posing as tech support in Microsoft Teams calls to trick employees into allowing remote control and install malware that provides access to the company network. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ransomware-gangs-pose-as-it-support-in-microsoft-teams-phishing-attacks/
-
Microsoft Teams im Visier: Cyberkriminelle nutzen EBombing und Vishing für Angriffe
Nach dem Versand der Spam-Nachrichten geben sich die Angreifer als IT-Support des Unternehmens aus und kontaktieren Mitarbeitende per Sprach- oder Videoanruf über Teams. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/microsoft-teams-im-visier-cyberkriminelle-nutzen-e-mail-bombing-und-vishing-fuer-angriffe/a39522/
-
ChatGPT-Lücke ermöglicht DDoS-Attacken
srcset=”https://b2b-contenthub.com/wp-content/uploads/2025/01/shutterstock_2560810077.jpg?quality=50&strip=all 3696w, b2b-contenthub.com/wp-content/uploads/2025/01/shutterstock_2560810077.jpg?resize=300%2C168&quality=50&strip=all 300w, b2b-contenthub.com/wp-content/uploads/2025/01/shutterstock_2560810077.jpg?resize=768%2C432&quality=50&strip=all 768w, b2b-contenthub.com/wp-content/uploads/2025/01/shutterstock_2560810077.jpg?resize=1024%2C576&quality=50&strip=all 1024w, b2b-contenthub.com/wp-content/uploads/2025/01/shutterstock_2560810077.jpg?resize=1536%2C864&quality=50&strip=all 1536w, b2b-contenthub.com/wp-content/uploads/2025/01/shutterstock_2560810077.jpg?resize=2048%2C1152&quality=50&strip=all 2048w, b2b-contenthub.com/wp-content/uploads/2025/01/shutterstock_2560810077.jpg?resize=1240%2C697&quality=50&strip=all 1240w, b2b-contenthub.com/wp-content/uploads/2025/01/shutterstock_2560810077.jpg?resize=150%2C84&quality=50&strip=all 150w, b2b-contenthub.com/wp-content/uploads/2025/01/shutterstock_2560810077.jpg?resize=854%2C480&quality=50&strip=all 854w, b2b-contenthub.com/wp-content/uploads/2025/01/shutterstock_2560810077.jpg?resize=640%2C360&quality=50&strip=all 640w, b2b-contenthub.com/wp-content/uploads/2025/01/shutterstock_2560810077.jpg?resize=444%2C250&quality=50&strip=all 444w” width=”1024″ height=”576″ sizes=”(max-width: 1024px) 100vw, 1024px”>Über eine HTTP-Anfrage an die ChatGPT-API können Angreifer eine Zielwebseite mit Tausenden Netzwerkanfragen bombardieren. miss.cabul Shutterstock.comDer Sicherheitsforscher Benjamin Flesch hat kürzlich herausgefunden, dass eine Lücke im ChatGPT-Crawler für…
-
Cyberkriminelle missbrauchen Microsoft-Teams als Einfallstor mit E-Mail-Bombing und Voice-Phishing
Sophos-X-Ops hat eine aktive Bedrohungskampagne näher untersucht, bei der zwei verschiedene Gruppen von Bedrohungsakteuren Unternehmen infiltrieren, indem sie die Funktionalität der Office-365-Plattform missbrauchen und anschließend versuchen, Daten abzuziehen oder Ransomware platzieren. Besonders perfide: die Angreifer verwenden eine Kombination aus E-Mail-Bombing mit bis zu 3.000 Nachrichten in weniger als einer Stunde und anschließenden Sprach- bzw. Videoanrufen…
-
ChatGPT API flaws could allow DDoS, prompt injection attacks
OpenAI-owned ChatGPT might have a vulnerability that could allow threat actors to launch distributed denial of service (DDoS) attacks on unsuspecting targets. According to a discovery made by German security researcher Benjamin Flesch, the ChatGPT crawler, which OpenAI uses to collect data from the internet to improve ChatGPT, can be tricked into DDoSing arbitrary websites. “ChatGPT crawler…
-
Russian ransomware hackers increasingly posing as tech support on Microsoft Teams
Researchers at Sophos say they have seen more than 15 incidents in which two separate groups used Microsoft Office 365’s default service settings to socially engineer their way onto a victim’s system.]]> First seen on therecord.media Jump to article: therecord.media/fake-tech-support-russian-hackers-microsoft-teams
-
Ransomware Groups Abuse Microsoft Services for Initial Access
Sophos warns of two ransomware groups abusing Microsoft 365 services and default configurations to contact internal enterprise users. The post Ransomware Groups Abuse Microsoft Services for Initial Access appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/ransomware-groups-abuse-microsoft-services-for-initial-access/
-
Ransomware attackers are >>vishing<< organizations via Microsoft Teams
The >>email bombing + posing as tech support via Microsoft Teams
-
Microsoft Rolls Out New Administrator Protection Feature Under Windows Security
Microsoft has announced the release of Windows 11 Insider Preview Build 27774 to the Canary Channel. This build comes packed with enhancements, including a significant new feature aimed at bolstering system security”, Administrator Protection. The highlight of this update is the newly integrated Administrator Protection, which can now be activated directly from the Windows Security…
-
Exchange 2016 und 2019 erreichen Support-Ende in 9 Monaten
Tags: microsoftMicrosoft erinnert an das dräuende Support-Ende der Exchange-Server 2016 und 2019. In neun Monaten zieht der Hersteller den Stecker. First seen on heise.de Jump to article: www.heise.de/news/Exchange-2016-und-2019-erreichen-Support-Ende-in-9-Monaten-10249853.html
-
Anwendung stürzt ab: Microsoft liefert Workaround für lästigen Outlook-Bug
Outlook stürzt bei einigen Anwendern ab, wenn sie versuchen, eine E-Mail zu schreiben. Ein Update mit einem Fix gibt es erst in einer Woche. First seen on golem.de Jump to article: www.golem.de/news/anwendung-stuerzt-ab-microsoft-liefert-workaround-fuer-laestigen-outlook-bug-2501-192592.html
-
Ridding your network of NTLM
Tags: attack, authentication, cloud, crowdstrike, cve, email, encryption, exploit, group, hacker, ibm, Internet, jobs, malicious, microsoft, network, ntlm, password, service, technology, tool, update, vulnerability, windowsMicrosoft has hinted at a possible end to NTLM a few times, but with quite a few Windows 95 or 98 in use that do not support the alternative, Kerberos, it won’t be an easy job to do. There is the option to disable NTLM when using Azure Active Directory but that may not always…
-
Exchange 2016 and 2019 reach end of support in October
Tags: microsoftMicrosoft has reminded admins that Exchange 2016 and Exchange 2019 will reach the end of extended support in October and shared guidance for those who need to decommission outdated servers. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-exchange-2016-and-2019-reach-end-of-support-in-october/
-
Microsoft fixes Windows Server 2022 bug breaking device boot
Microsoft has fixed a bug that was causing some Windows Server 2022 systems with two or more NUMA nodes to fail to start up. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-fixes-windows-server-2022-bug-breaking-device-boot/