Tag: microsoft
-
Another Chinese cyberspy crew targeting US critical orgs ‘as of yesterday’
Redmond threat intel maven talks explains this persistent pain to The Reg First seen on theregister.com Jump to article: www.theregister.com/2024/12/06/chinese_cyberspy_us_data/
-
Russian APT Hackers Co-Opt Pakistani Infrastructure
FSB Hackers Have Hijacked Others’ Command and Control Before. A Russian state hacking group hijacked the command and control infrastructure of a Pakistan-based espionage network as part of an ongoing intelligence-gathering operation targeting victims in Asia, finds a report from Microsoft and Black Lotus Labs. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/russian-apt-hackers-co-opt-pakistani-infrastructure-a-26982
-
Nicht verhandelbar: Microsoft beharrt auf TPM-2.0-Pflicht für Windows 11
Die Hardwareanforderungen für Windows 11 werden nicht gelockert. Microsoft setzt auch in Zukunft auf TPM 2.0, aber nicht für alle Windows-Versionen. First seen on heise.de Jump to article: www.heise.de/news/Microsoft-haelt-an-Systemanforderungen-fuer-Windows-11-fest-10189393.html
-
Russian Hackers Exploit Rival Attackers’ Infrastructure for Espionage
Tags: apt, blizzard, cyber, cybercrime, espionage, exploit, hacker, infrastructure, microsoft, russiaMicrosoft has found that Russian APT Secret Blizzard piggybacks on other cybercriminals’ infr4asytructure to conduct cyber espionage First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/russia-hackers-exploit-rival/
-
Russia-linked APT Secret Blizzard spotted using infrastructure of other threat actors
Russia-linked APT group Secret Blizzard has used the tools and infrastructure of at least 6 other threat actors during the past 7 years. Researchers from Microsoft Threat Intelligence collected evidence that the Russia-linked ATP group Secret Blizzard (aka Turla,Snake,Uroburos,Waterbug,Venomous BearandKRYPTON) has used the tools and infrastructure of at least 6 other threat actors during the…
-
Windows 11: TPM-2.0-Zwang ist für Microsoft nicht verhandelbar
Der Konzern macht klar, dass TPM 2.0 zur Zukunft von Windows gehört. Dies sei ein nicht verhandelbarer Standard und werde sich nicht ändern. First seen on golem.de Jump to article: www.golem.de/news/windows-11-tpm-2-0-zwang-ist-fuer-microsoft-nicht-verhandelbar-2412-191439.html
-
Microsoft says having a TPM is “non-negotiable” for Windows 11
Microsoft made it abundantly clear this week that Windows 10 users won’t be able to upgrade to Windows 11 unless their systems come with TPM 2.0 support, stating it’s a “non-negotiable” requirement. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-says-having-a-tpm-is-non-negotiable-for-windows-11/
-
Microsoft Announces Security Update with Windows Resiliency Initiative
Microsoft has unveiled the Windows Resiliency Initiative, a new strategy to bolster security and system reliability, set to roll out in early 2025. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/trends/microsoft-announces-security-update-with-windows-resiliency-initiative/
-
Security teams should act now to counter Chinese threat, says CISA
Tags: 5G, access, apple, at&t, attack, authentication, china, cisa, cisco, communications, control, cyber, cybersecurity, data, encryption, espionage, exploit, google, government, hacker, infrastructure, linux, microsoft, mitigation, mobile, monitoring, network, nist, password, risk, service, siem, technology, theft, threat, vpn, vulnerabilitySecurity teams and individuals across the US need to take immediate precautions to counter the surveillance threat posed by Chinese ‘Salt Typhoon’ hackers, who have burrowed deep into telecoms infrastructure, according to the US Cybersecurity and Infrastructure Security Agency (CISA).CISA issued an official alert recommending defensive measures on December 3, as federal officials briefed journalists…
-
Russian-linked Turla caught using Pakistani APT infrastructure for espionage
Both Microsoft and Lumen’s BlackLotus Labs found Turla spying on Afghanistan and India via Pakistani infrastructure. First seen on cyberscoop.com Jump to article: cyberscoop.com/turla-infiltrates-pakistani-apt-networks-microsoft-lumen/
-
Microsoft says premature patch could make Windows Recall forget how to work
Installed the final non-security preview update of 2024? Best not hop onto the Dev Channel First seen on theregister.com Jump to article: www.theregister.com/2024/12/04/microsoft_update_recall_bug/
-
GitHub’s boast that Copilot produces high-quality code challenged
We’re shocked shocked that Microsoft’s study of its own tools might not be super-rigorous First seen on theregister.com Jump to article: www.theregister.com/2024/12/03/github_copilot_code_quality_claims/
-
Veeam stellt neue Enterprise-Funktionalitäten und Microsoft Entra ID-Schutz vor
Die neueste Version bietet neue Tools zur Stärkung der Cyber-Resilienz, verbessertes Reporting durch Generative KI, vollständigen Schutz für Nutanix AHV und Zugang zu Veeam Data Cloud Vault v2 First seen on infopoint-security.de Jump to article: www.infopoint-security.de/veeam-stellt-neue-enterprise-funktionalitaeten-und-microsoft-entra-id-schutz-vor/a39139/
-
Windows 11 market share falls despite Microsoft ad blitz
Only 10 months left until Windows 10 end of support and people still seem to prefer it First seen on theregister.com Jump to article: www.theregister.com/2024/12/02/windows_11_market_share/
-
Phishing-Kampagne nutzt Recovery Feature von Microsoft Word
Eine neue Phishing-Kampagne nutzt beschädigte Word-Dokumente, um die Opfer zu täuschen. Nutzen die Opfer das Recovery Feature von Microsoft Word, öffnen sie damit die kompromittierte Datei. First seen on 8com.de# Jump to article: www.8com.de#
-
Talent overlooked: embracing neurodiversity in cybersecurity
In cybersecurity, diverse perspectives help in addressing complex, emerging threats. Increasingly, there’s a push to recognize that neurodiversity brings significant value to cybersecurity. However, neurodiverse people frequently face systemic barriers that hinder their success in the field.Neurodiversity refers to the way some people’s brains work differently to the neurotypical brain. This includes autism, ADHD (attention…
-
Hackers Use Corrupted ZIPs and Office Docs to Evade Antivirus and Email Defenses
Cybersecurity researchers have called attention to a novel phishing campaign that leverages corrupted Microsoft Office documents and ZIP archives as a way to bypass email defenses.”The ongoing attack evades #antivirus software, prevents uploads to sandboxes, and bypasses Outlook’s spam filters, allowing the malicious emails to reach your inbox,” ANY.RUN said in a series of posts…
-
First-ever Linux UEFI bootkit turns out to be student project
Tags: antivirus, attack, authentication, awareness, computer, conference, cybersecurity, firmware, linux, malicious, malware, microsoft, risk, software, technology, threat, training, update, windowsBootkitty, a recently discovered boot-level UEFI rootkit for Linux, was evidently created by students participating in a cybersecurity training program at the South Korean Information Technology Research Institute (KITRI).The bootkit, found and analyzed by researchers from antivirus vendor ESET last week, showed signs of being a proof of concept rather than production-ready malware. Nevertheless, the…
-
First-ever Linux UEFI bootkit turns out to be research project
Tags: antivirus, attack, authentication, awareness, computer, conference, cybersecurity, firmware, linux, malicious, malware, microsoft, risk, software, technology, threat, training, update, windowsBootkitty, a recently discovered boot-level UEFI rootkit for Linux, was evidently created by students participating in a cybersecurity training program at the South Korean Information Technology Research Institute (KITRI).The bootkit, found and analyzed by researchers from antivirus vendor ESET last week, showed signs of being a proof of concept rather than production-ready malware. Nevertheless, the…
-
Leveraging AI securely: Microsoft’s approach to AI data protection
First seen on scworld.com Jump to article: www.scworld.com/native/leveraging-ai-securely-microsofts-approach-to-ai-data-protection
-
Corrupted Microsoft Office Documents Used In Phishing Campaign
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36662/Corrupted-Microsoft-Office-Documents-Used-In-Phishing-Campaign.html
-
Yubico Enrollment Suite liefert nahtlose Integration mit Microsoft Entra ID
Tags: microsoftMit der Yubico Enrollment Suite erweitert Yubico seine Expertise in der Entwicklung von sicheren, benutzerfreundlichen Authentifizierungslösungen. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/yubico-enrollment-suite-liefert-nahtlose-integration-mit-microsoft-entra-id/a39131/
-
SmokeLoader picks up ancient MS Office bugs to pack fresh credential stealer
Threat actors are using a well-known modular malware loader, SmokeLoader, to exploit known Microsoft Office vulnerabilities and steal sensitive browser credentials.The loader which runs a framework to deploy multiple malware modules, was observed by Fortinet’s FortiGuard Labs in attacks targeting manufacturing, healthcare, and IT companies in Taiwan.”SmokeLoader, known for its ability to deliver other malicious…
-
Nextcloud Talk: Open-source, GDPR-compliant alternative to Microsoft Teams
Nextcloud has unveiled Nextcloud Talk, an open-source alternative to Microsoft Teams. It’s a privacy-compliant collaboration platform for hybrid teams that gives … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/12/03/nextcloud-talk-open-source-microsoft-teams-alternative/
-
New Rockstar 2FA Phishing-as-a-Service Kit Targets Microsoft 365 Accounts
SUMMARY Cybersecurity researchers at Trustwave have discovered >>Rockstar 2FA,
-
Microsoft 365 credentials stolen via adversarythe-middle campaign
First seen on scworld.com Jump to article: www.scworld.com/news/microsoft-365-credentials-stolen-via-adversary-in-the-middle-campaign
-
Actively exploited Partner Network site flaw, others addressed by Microsoft
First seen on scworld.com Jump to article: www.scworld.com/brief/actively-exploited-partner-network-site-flaw-others-addressed-by-microsoft