Tag: microsoft
-
Hackers Weaponize MSI Packages PNG Files to Deliver Multi-stage Malware
Researchers have reported a series of sophisticated cyber attacks aimed at organizations in Chinese-speaking regions, including Hong Kong, Taiwan, and mainland China. These attacks employ a multi-stage loader known as PNGPlug to deliver a malware payload identified as ValleyRAT. The attack chain begins with a phishing webpage that entices victims into downloading a malicious Microsoft…
-
ChatGPT Crawler Vulnerability Abused to Trigger Reflexive DDoS Attacks
Security researchers have uncovered a severe vulnerability in OpenAI’s ChatGPT API, allowing attackers to exploit its architecture for launching Reflective Distributed Denial of Service (DDoS) attacks. This loophole, characterized by a high severity CVSS score of 8.6, raises significant concerns regarding the scalability and security of AI services deployed on cloud platforms, specifically Microsoft’s Azure.…
-
Schwachstelle zur Umgehung von UEFI Secure Boot entdeckt
Eine gravierende Schwachstelle gefährdet die Sicherheit von UEFI Secure Boot: Angreifer könnten die Schutzmechanismen umgehen und unautorisierte Software starten. Microsoft reagiert prompt und stellt Updates bereit, um diese Sicherheitslücke zu schließen. First seen on itsicherheit-online.com Jump to article: www.itsicherheit-online.com/news/security-management/schwachstelle-zur-umgehung-von-uefi-secure-boot-entdeckt/
-
Telegram-Based >>Sneaky 2FA<< Phishing Kit Targets Microsoft 365 Accounts
Sneaky 2FA: New Phishing-as-a-Service targets Microsoft 365, leveraging sophisticated evasion techniques and a Telegram-based platform to steal credentials…. First seen on hackread.com Jump to article: hackread.com/telegram-sneaky-2fa-phishing-kit-microsoft-365-accounts/
-
Microsoft shares temp fix for Outlook crashing when writing emails
Microsoft has shared a temporary fix for a known issue that causes classic Outlook to crash when writing, replying to, or forwarding an email. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-shares-temp-fix-for-outlook-crashing-when-writing-emails/
-
Researchers Accessed Windows BitLocker Encrypted Files Disassembling the Laptop
Cybersecurity researchers have uncovered a major flaw in the Windows BitLocker encryption system, allowing attackers to access encrypted data without requiring physical disassembly of the target laptop. The exploit, named >>bitpixie
-
Black Basta Exploits Microsoft Teams for Phishing Attacks
NVISO Labs has uncovered a sophisticated phishing campaign attributed to the ransomware group Black Basta, leveraging Microsoft Teams First seen on securityonline.info Jump to article: securityonline.info/black-basta-exploits-microsoft-teams-for-phishing-attacks/
-
Star Blizzard Shifts Tactics: Spear-Phishing Campaign Targets WhatsApp Accounts
Microsoft Threat Intelligence has uncovered a new spear-phishing campaign orchestrated by the Russian threat actor known as Star First seen on securityonline.info Jump to article: securityonline.info/star-blizzard-shifts-tactics-spear-phishing-campaign-targets-whatsapp-accounts/
-
Microsoft removes Assassin’s Creed Windows 11 upgrade blocks
Earlier this week, Ubisoft released Assassin’s Creed Valhalla and Assassin’s Creed Origins patches to fix Windows 11 24H2 compatibility issues that caused crashes, freezes, and audio problems. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-removes-assassins-creed-windows-11-upgrade-blocks/
-
‘Sneaky Log’ phishing kits slip by Microsoft 365 accounts
First seen on scworld.com Jump to article: www.scworld.com/news/sneaky-log-phishing-kits-slip-by-microsoft-365-accounts
-
24H2: Microsoft drängt Nutzer zu neuem Windows 11-Update
Systeme mit Windows 11 22H2 und 23H2 werden in den kommenden Tagen automatisch auf 24H2 aktualisiert. Wer das nicht will, muss manuell eingreifen. First seen on golem.de Jump to article: www.golem.de/news/24h2-microsoft-draengt-nutzern-update-auf-neues-windows-11-auf-2501-192542.html
-
24H2: Microsoft drängt Nutzern Update auf neues Windows 11 auf
Systeme mit Windows 11 22H2 und 23H2 werden in den kommenden Tagen automatisch auf 24H2 aktualisiert. Wer das nicht will, muss manuell eingreifen. First seen on golem.de Jump to article: www.golem.de/news/24h2-microsoft-draengt-nutzern-update-auf-neues-windows-11-auf-2501-192542.html
-
Secure AI? Dream on, says AI red team
The group responsible for red teaming of over 100 generative AI products at Microsoft has concluded that the work of building safe and secure AI systems will never be complete.In a paper published this week, the authors, including Microsoft Azure CTO Mark Russinovich, described some of the team’s work and provided eight recommendations designed to…
-
US hits back against China’s Salt Typhoon group
Tags: attack, backdoor, china, cisa, ciso, communications, computer, control, crypto, cve, cyber, cyberattack, cybersecurity, defense, detection, disinformation, espionage, exploit, finance, government, group, infosec, infrastructure, intelligence, ivanti, law, malicious, mandiant, microsoft, network, north-korea, office, tactics, technology, theft, threat, tool, vpn, vulnerabilityThe US is hitting back against the threat group, dubbed Salt Typhoon by Microsoft, which is allegedly behind recent cyber attacks against American telecommunications providers, as part of a wider campaign against Chinese-based hacking.On Friday the Department of the Treasury’s Office of Foreign Assets Control (OFAC) said it is sanctioning Sichuan Juxinhe Network Technology, a…
-
Updates ohne Neustart durch Anbindung an Microsoft Azure – Windows 11 bekommt Hotpatching
First seen on security-insider.de Jump to article: www.security-insider.de/microsoft-windows-11-server-2025-hotpatching-funktion-a-6924d1b373cda02dc88754e7a6f8c0cd/
-
Microsoft löscht Beitrag: Upgrade auf Windows 11 bleibt doch kostenlos
Das Upgrade von Windows 10 auf Windows 11 ist und bleibt kostenlos. Ein Blogbeitrag von Microsoft hatte etwas anderes suggeriert, doch nun ist er weg. First seen on golem.de Jump to article: www.golem.de/news/microsoft-loescht-beitrag-upgrade-auf-windows-11-bleibt-doch-kostenlos-2501-192504.html
-
Microsoft eggheads say AI can never be made secure after testing Redmond’s own products
If you want a picture of the future, imagine your infosec team stamping on software forever First seen on theregister.com Jump to article: www.theregister.com/2025/01/17/microsoft_ai_redteam_infosec_warning/
-
Microsoft ends support for Office apps on Windows 10 in October
Microsoft says it will drop support for Office apps in Windows 10 after the operating system reaches its end of support on October 14. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-ends-support-for-office-apps-on-windows-10-in-october/
-
Patch Tuesday: January 2025 Security Update Patches Exploited Elevation of Privilege Attacks
Microsoft’s monthly patches cover Hyper-V NT Kernel Integration VSPs, Git in Visual Studio, and more. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/microsoft-patch-tuesday-jan-2025/
-
Windows BitLocker bug triggers warnings on devices with TPMs
Microsoft is investigating a bug triggering security alerts on systems with a Trusted Platform Module (TPM) processor after enabling BitLocker. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-bitlocker-bug-triggers-warnings-on-devices-with-tpms/
-
Microsoft January 2025 Patch Tuesday Comes with Fix for 159 Vulnerabilities
Microsoft’s January 2025 Patch Tuesday has arrived with a significant security update, addressing a total of 159 vulnerabilities. This marks the largest number of CVEs addressed in a single month since at least 2017, more than doubling the usual amount fixed in January. Out of the 159 CVEs, 11 are classified as critical security flaws.…
-
Nahtlose Integration der Omada Identity Cloud mit KI-Funktionen von Microsoft
Die nahtlose Integration der Omada Identity Cloud mit KI-Funktionen von Microsoft sorgt für eine intelligentere, schnellere und benutzerfreundlichere Erfahrung. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/nahtlose-integration-der-omada-identity-cloud-mit-ki-funktionen-von-microsoft/a39462/
-
Support-Ende für Windows 10 – Microsoft-365-Apps werden ebenfalls nicht mehr unterstützt
Wenn der Support für Windows 10 dieses Jahr endet, werden auf dem System installierte Microsoft-365-Apps ebenfalls nicht mehr unterstützt. First seen on computerbase.de Jump to article: www.computerbase.de/news/betriebssysteme/support-ende-fuer-windows-10-microsoft-365-apps-werden-ebenfalls-nicht-mehr-unterstuetzt.91041
-
Intel, AMD engineers rush to save Linux 6.13 after dodgy Microsoft code change
‘Let’s not do this again please’… days before release date First seen on theregister.com Jump to article: www.theregister.com/2025/01/14/microsoft_linux_change_pulled/
-
CVE-2024-44243 macOS flaw allows persistent malware installation
Microsoft disclosed details of a vulnerability in Apple macOS that could have allowed an attacker to bypass the OS’s System Integrity Protection (SIP). Microsoft disclosed details of a now-patched macOS flaw, tracked as CVE-2024-44243 (CVSS score: 5.5), that allows attackers with >>root
-
Microsoft Discovers macOS Flaw CVE-2024-44243, Bypassing SIP
CVE-2024-44243, a critical macOS vulnerability discovered recently by Microsoft, can allow attackers to bypass Apple’s System Integrity Protection… First seen on hackread.com Jump to article: hackread.com/microsoft-macos-flaw-cve-2024-44243-bypassing-sip/
-
Microsoft Patches Eight Zero-Days to Start the Year
Patch Tuesday saw Microsoft fix eight zero-days, three of which are being actively exploited First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/microsoft-patches-eight-zerodays/
-
Microsoft-Patchday: Angreifer nutzen drei Lücken in Hyper-V aus
Microsoft hat wichtige Sicherheitsupdates unter anderem für Azure, Office und Windows veröffentlicht. Es laufen bereits Attacken. First seen on heise.de Jump to article: www.heise.de/news/Microsoft-Patchday-Angreifer-nutzen-drei-Luecken-in-Hyper-V-aus-10242955.html
-
Kostenloses Windows-11-Upgrade angeblich nur für kurze Zeit
Microsoft tischt erneut Argumente auf, um Windows-10-Nutzer zum Upgrade auf Windows 11 zu bewegen. Auch der Support für Microsoft 365 soll wegfallen. First seen on golem.de Jump to article: www.golem.de/news/microsoft-kostenloses-windows-11-upgrade-angeblich-nur-fuer-kurze-zeit-2501-192433.html