Tag: microsoft
-
Ivanti warns critical RCE flaw in Connect Secure exploited as zero-day
Tags: advisory, apt, attack, authentication, cve, cvss, cybersecurity, data-breach, exploit, flaw, google, government, group, intelligence, Internet, ivanti, law, mandiant, microsoft, network, rce, remote-code-execution, risk, software, threat, tool, vpn, vulnerability, zero-dayIT software provider Ivanti released patches Wednesday for its Connect Secure SSL VPN appliances to address two memory corruption vulnerabilities, one of which has already been exploited in the wild as a zero-day to compromise devices.The exploited vulnerability, tracked as CVE-2025-0282, is a stack-based buffer overflow rated as critical with a CVSS score of 9.0.…
-
The unlicensed OneDrive free ride ends this month
Kind old Microsoft is worried about security and compliance … nothing to do with a free storage loophole First seen on theregister.com Jump to article: www.theregister.com/2025/01/07/unlicensed_onedrive_fun_ends/
-
Unconventional Cyberattacks Aim to Take Over PayPal Accounts
Attackers are abusing a Microsoft 365 feature to send payment requests to users, tricking them into logging in to their accounts so attackers can seize control over them. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/unconventional-cyberattacks-take-over-paypal-accounts
-
Microsoft moves to disrupt hacking-as-a-service scheme that’s bypassing AI safety measures
The defendants used stolen API keys to gain access to devices and accounts with Microsoft’s Azure OpenAI service, which they then used to generate “thousands” of images that violated content restrictions. First seen on cyberscoop.com Jump to article: cyberscoop.com/microsoft-generative-ai-lawsuit-hacking/
-
Microsoft moves to disrupt hacking-as-a-service scheme that’s bypassing AI safety measures
The defendants used stolen API keys to gain access to devices and accounts with Microsoft’s Azure OpenAI service, which they then used to generate “thousands” of images that violated content restrictions. First seen on cyberscoop.com Jump to article: cyberscoop.com/microsoft-generative-ai-lawsuit-hacking/
-
Scammers Exploit Microsoft 365 to Target PayPal Users
A new PayPal phishing scam used genuine money requests, bypassing security checks to deceive recipients First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/scammers-exploit-microsoft365/
-
Tired of begging, Microsoft now trying to trick users into thinking Bing is Google
If you can’t beat ’em, just imitate their branding, hide yours and hope they don’t notice First seen on theregister.com Jump to article: www.theregister.com/2025/01/06/microsoft_bing_spoof_google/
-
The biggest data breach fines, penalties, and settlements so far
Tags: access, apache, attack, breach, business, china, ciso, communications, compliance, control, credentials, credit-card, cyberattack, cybercrime, cybersecurity, data, data-breach, email, finance, flaw, framework, GDPR, google, hacker, Hardware, identity, Internet, law, leak, linkedin, microsoft, mobile, monitoring, network, office, phone, privacy, regulation, risk, service, software, technology, tool, training, update, vulnerabilitySizable fines assessed for data breaches in recent years suggest that regulators are getting more serious about cracking down on organizations that don’t properly protect consumer data.Hit with a $ 1.3 billion fine for unlawfully transferring personal data from the European Union to the US, Meta tops the list of recent big-ticket sanctions, with one…
-
News Alert: Security Risk Advisors joins Microsoft Intelligent Security Association (MISA)
Philadelphia, Pa., Jan. 7, 2025, CyberNewswire, Security Risk Advisors today announced it has become a member of the Microsoft Intelligent Security Association (MISA), an ecosystem of independent software vendors (ISVs) and managed security service providers (MSSPs) that have integrated… (more”¦) First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/01/news-alert-security-risk-advisors-joins-microsoft-intelligent-security-association-misa/
-
Part 15: Function Type Categories
On Detection: Tactical to Functional Seven Ways to View API Functions Introduction Welcome back to Part 15 of the On Detection: Tactical to Functional blog series. I wrote this article to serve as a resource for those attempting to create tool graphs to describe the capabilities of the attacker tools or malware samples they encounter.…
-
ADFS”Š”, “ŠLiving in the Legacy of DRS
ADFS”Š”, “ŠLiving in the Legacy of DRS It’s no secret that Microsoft have been trying to move customers away from ADFS for a while. Short of slapping a “deprecated” label on it, every bit of documentation I come across eventually explains why Entra ID should now be used in place of ADFS. And yet”¦ we still encounter…
-
Security Risk Advisors joins the Microsoft Intelligent Security Association
Philadelphia, Pennsylvania, 7th January 2025, CyberNewsWire First seen on hackread.com Jump to article: hackread.com/security-risk-advisors-joins-the-microsoft-intelligent-security-association/
-
Windows 10 Support endet: Microsoft erklärt 2025 zum Jahr der PC-Erneuerung
Dabei bewirbt Microsoft mehr Leistung und Sicherheit sowie KI als große Vorteile. Ob sich Anwender davon beeindrucken lassen, bleibt abzuwarten. First seen on golem.de Jump to article: www.golem.de/news/windows-10-support-endet-microsoft-erklaert-2025-zum-jahr-der-pc-erneuerung-2501-192181.html
-
Gen AI is transforming the cyber threat landscape by democratizing vulnerability hunting
Tags: ai, api, apt, attack, bug-bounty, business, chatgpt, cloud, computing, conference, credentials, cve, cyber, cybercrime, cyberespionage, cybersecurity, data, defense, detection, email, exploit, finance, firewall, flaw, framework, github, government, group, guide, hacker, hacking, incident response, injection, LLM, malicious, microsoft, open-source, openai, penetration-testing, programming, rce, RedTeam, remote-code-execution, service, skills, software, sql, tactics, threat, tool, training, update, vulnerability, waf, zero-dayGenerative AI has had a significant impact on a wide variety of business processes, optimizing and accelerating workflows and in some cases reducing baselines for expertise.Add vulnerability hunting to that list, as large language models (LLMs) are proving to be valuable tools in assisting hackers, both good and bad, in discovering software vulnerabilities and writing…
-
US adds web and gaming giant Tencent to list of Chinese military companies
This could be the start of a saga to rival TikTok’s troubles, and embroil Tesla and Microsoft First seen on theregister.com Jump to article: www.theregister.com/2025/01/07/tencent_catl_chinese_military_company_list/
-
Patch Alert: Remotely Exploitable LDAP Flaws in Windows
Proof-of-Concept Exploit ‘LDAP Nightmare’ Crashes ‘Any Unpatched Windows Server’. Security experts are urging all organizations that use Microsoft Windows to ensure they install patches, released last month, to fix Lightweight Directory Access Protocol denial-of-service and remote code execution flaws. Researchers have released a proof-of-concept exploit for the latter flaw. First seen on govinfosecurity.com Jump to…
-
Microsoft Bing shows misleading Google-like page for ‘Google’ searches
Microsoft Bing is displaying what is being categorized as a misleading Google-esque search page when users search for Google, making it look you are on the competing search engine. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-bing-shows-misleading-google-like-page-for-google-searches/
-
More telecom firms were breached by Chinese hackers than previously reported
Tags: access, at&t, attack, breach, china, cisco, communications, cyber, cyberespionage, cybersecurity, data, defense, disinformation, espionage, exploit, finance, fortinet, framework, government, group, hacker, Hardware, infrastructure, intelligence, international, microsoft, mobile, network, phone, regulation, risk, risk-management, router, spy, technology, threat, vulnerabilityChinese hackers linked to the Salt Typhoon cyberespionage operation have breached even more US telecommunications firms than initially reported.New victims, Charter Communications, Consolidated Communications, and Windstream, add to a growing list that already includes AT&T, Verizon, T-Mobile, and Lumen Technologies.Earlier, the US authorities informed that nine telecom firms have been affected by the Chinese espionage…
-
From $22M in Ransom to +100M Stolen Records: 2025’s All-Star SaaS Threat Actors to Watch
In 2024, cyber threats targeting SaaS surged, with 7,000 password attacks blocked per second (just in Entra ID)”, a 75% increase from last year”, and phishing attempts up by 58%, causing $3.5 billion in losses (source: Microsoft Digital Defense Report 2024). SaaS attacks are increasing, with hackers often evading detection through legitimate usage patterns. The…
-
Windows Registry Privilege Escalation Vulnerability PoC Released
Researchers have released a proof of concept (PoC) exploit for a critical privilege escalation vulnerability affecting Microsoft Windows. This vulnerability, CVE-2024-43452, allows attackers to gain elevated privileges on a compromised system, potentially leading to unchecked access to sensitive data and critical system resources. Vulnerability Details The Windows Registry database stores configuration settings and options for…
-
Balancing proprietary and open-source tools in cyber threat research
In this Help Net Security interview, Thomas Roccia, Senior Security Researcher at Microsoft, discusses how threat research drives faster, better decision-making in … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/01/06/thomas-roccia-microsoft-threat-research/
-
Microsoft may have scrapped Windows 11’s dynamic wallpapers feature
Microsoft has many good ideas for Windows 11 that often do not ship, and one of them was “Dynamic Wallpapers,” which, as the name suggests, could have made the wallpaper dynamic, similar to third-party tools like Lively Wallpaper. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-may-have-scrapped-windows-11s-dynamic-wallpapers-feature/
-
First Foxconn, now Microsoft: Wisconsin town dissed by big tech
Tags: microsoftRedmond’s pause to redesign planned datacenters won’t scuttle this project, say Mount Pleasant officials First seen on theregister.com Jump to article: www.theregister.com/2025/01/03/microsoft_pauses_datacenter_construction/
-
Microsoft pushes identity management feature for Azure via Entra
First seen on scworld.com Jump to article: www.scworld.com/news/microsoft-pushes-identity-management-feature-for-azure-via-entra
-
Critical Windows LDAP flaw could lead to crashed servers, RCE attacks
Researchers have published a proof-of-concept exploit for a pair of Windows Lightweight Directory Access Protocol (LDAP) flaws that could lead to server crashes or remote code execution (RCE) on Windows servers.”Active Directory Domain Controllers (DCs) are considered to be one of the crown jewels in organizational computer networks,” noted researchers at security firm SafeBreach, who…
-
Microsoft, Ping, Okta Dominate Access Management Gartner MQ
Access Management Leaders Remain Unchanged as Customer Identity Cases Proliferate. Advances in customer identity around better user experience, strong authentication, and centralized identity processes have driven rapid growth in the access management market. The space by grew 17.6% to $5.85 billion in 2023 as organizations increasing look to replace homegrown CIAM solutions. First seen on…
-
Patched data exposing Microsoft Dynamics 365, Power Apps Web API bugs detailed
First seen on scworld.com Jump to article: www.scworld.com/brief/patched-data-exposing-microsoft-dynamics-365-power-apps-web-api-bugs-detailed
-
LDAPNightmare PoC Exploit Crashes LSASS and Reboots Windows Domain Controllers
A proof-of-concept (PoC) exploit has been released for a now-patched security flaw impacting Windows Lightweight Directory Access Protocol (LDAP) that could trigger a denial-of-service (DoS) condition.The out-of-bounds reads vulnerability is tracked as CVE-2024-49113 (CVSS score: 7.5). It was addressed by Microsoft as part of Patch Tuesday updates for December 2024, alongside CVE-2024-49112 ( First seen…
-
Critical Deadline: Update Old .NET Domains Before January 7, 2025 to Avoid Service Disruption
Microsoft has announced that it’s making an “unexpected change” to the way .NET installers and archives are distributed, requiring developers to update their production and DevOps infrastructure.”We expect that most users will not be directly affected, however, it is critical that you validate if you are affected and to watch for downtime or other kinds…