Tag: microsoft
-
SANS Institute bringt eBook zu Cloud-Sicherheit mit AWS, Google Cloud und Microsoft Azure
Das eBook bietet Sicherheitsexperten, Cloud-Architekten und Führungskräften wichtige Einblicke in Schlüsselthemen wie Identitätsmodernisierung, Secure… First seen on infopoint-security.de Jump to article: www.infopoint-security.de/sans-institute-bringt-ebook-zu-cloud-sicherheit-mit-aws-google-cloud-und-microsoft-azure/a38282/
-
Strukturierte Risikoanalyse für die Einführung und Nutzung von Microsoft 365
Wer beim Einsatz von Microsoft 365 höchste Anforderungen an Sicherheit und Compliance stellen muss, sollte eine strukturierte Risikoanalyse für die Ei… First seen on infopoint-security.de Jump to article: www.infopoint-security.de/strukturierte-risikoanalyse-fuer-die-einfuehrung-und-nutzung-von-microsoft-365/a38703/
-
Roadshow: Tanium, Microsoft und Avanade präsentieren zukunftsweisende KI-Lösungen
Die Veranstaltung findet am 5. November 2024 in München statt und bringt führende Experten der Branche zusammen. Ein Höhepunkt der Veranstaltung ist d… First seen on infopoint-security.de Jump to article: www.infopoint-security.de/roadshow-tanium-microsoft-und-avanade-praesentieren-zukunftsweisende-ki-loesungen/a38818/
-
Phishing-Kampagne setzt auf Microsoft Teams
Kriminelle nutzen derzeit Microsoft Teams aus, um Malware zu verbreiten. Die verschickten Phishing-Nachrichten enthalten eine kompromittierte Datei, d… First seen on 8com.de Jump to article: www.8com.de/cyber-security-blog/phishing-kampagne-setzt-auf-microsoft-teams
-
Honeypots: Wenn der Jäger zum Gejagten wird
Sicherheitsforscher bei Microsoft haben Cyberkriminelle mit Honeypots in die Falle gelockt und so Informationen zum Vorgehen der Hacker und ihrer Iden… First seen on 8com.de Jump to article: www.8com.de/cyber-security-blog/honeypots-wenn-der-jager-zum-gejagten-wird
-
Einige MicrosoftDienste nach DDoS-Angriff gestört
First seen on azure.status.microsoft Jump to article: azure.status.microsoft/en-us/status/history/
-
Microsoft – Recall erhält Privatsphäre-Update und die Nutzer mehr Kontrolle
First seen on computerbase.de Jump to article: www.computerbase.de/2024-09/microsoft-recall-erhaelt-privatsphaere-update-und-die-nutzer-mehr-kontrolle
-
How I Accessed Microsoft’s ServiceNow, Exposing ALL Microsoft Employee emails, Chat Support Transcripts & Attachments
First seen on thesecurityblogger.com Jump to article: www.thesecurityblogger.com/how-i-accessed-microsofts-servicenow-exposing-all-microsoft-employee-emails-chat-support-transcripts-attachments/
-
Cyber-Attacke – Russische Gruppe hackt Microsofts Top-Manager
Microsoft ist laut eigenen Angaben von einer russischen, staatlich gesponserten Gruppe gehackt worden. Dabei seien E-Mails von Top-Managern und angehä… First seen on welt.de Jump to article: www.welt.de/vermischtes/article249639816/Russische-Gruppe-hackt-Microsoft-und-verschafft-sich-Zugang-zu-E-Mails.html
-
Laut Medien – VW jahrelang im Visier von Hackern Tausende Dateien gestohlen
Über Jahre hinweg sind bei Volkswagen offenbar im großen Stil Dokumente gestohlen worden Microsoft soll gar vom größten Hackerangriff aller Zeiten ges… First seen on welt.de Jump to article: www.welt.de/wirtschaft/article251128328/VW-jahrelang-im-Visier-von-Hackern-Tausende-Dateien-gestohlen.html
-
WinRM Penetration Testing
Windows Remote Management (WinRM) is a protocol developed by Microsoft for remotely managing hardware and operating systems on Windows machines. It is… First seen on hackingarticles.in Jump to article: www.hackingarticles.in/winrm-penetration-testing/
-
CredManifest: Azure AD Information Disclosure Leading to Privilege Escalation Free Tool Released
Summary On November 17th, 2021 Microsoft disclosed the existence of a high severity information disclosure vulnerability impacting Azure Active Direct… First seen on research.kudelskisecurity.com Jump to article: research.kudelskisecurity.com/2021/11/30/credmanifest-azure-ad-information-disclosure-leading-to-privilege-escalation-free-tool-released/
-
>>Follina<< (CVE-2022-30190): Microsoft Support Diagnostic Tool 0-Day Vulnerability Being Actively Exploited
This bulletin was written by Michal Nowakowski of the Kudelski Security Threat Detection & Research Team Summary On May 27th, 2022, threat researc… First seen on research.kudelskisecurity.com Jump to article: research.kudelskisecurity.com/2022/05/31/follina-cve-2022-30190-microsoft-support-diagnostic-tool-0-day-vulnerability-being-actively-exploited/
-
>>SynLapse<< Azure Synapse Pipeline and Data Factory Vulnerability (CVE-2022-29972)
This bulletin was written by Eric Dodge of the Kudelski Security Threat Detection & Research Team Summary Microsoft has recently mitigated a vulne… First seen on research.kudelskisecurity.com Jump to article: research.kudelskisecurity.com/2022/06/15/synlapse-azure-synapse-pipeline-and-data-factory-vulnerability-cve-2022-29972/
-
SPNEGO NEGOEX: Critical Pre-Authentication RCE Vulnerability in Modern Microsoft Windows Operating Systems (CVE-2022-37958)
Written by Mark Stueck of the Kudelski Security Threat Detection & Research Team Summary On Tuesday, December 13th, Microsoft reclassified a previ… First seen on research.kudelskisecurity.com Jump to article: research.kudelskisecurity.com/2022/12/14/advisory-spnego-negoex-critical-pre-authentication-rce-vulnerability-in-modern-microsoft-windows-operating-systems-cve-2022-37958/
-
CVE-2023-23397 Microsoft Outlook Privilege Elevation Critical Vulnerability
Written by Lina Jiménez Becerra, Anton Jörgensson and Mark Stueck of the Kudelski Security Threat Detection & Research Team CVE-2023-23397: Abili… First seen on research.kudelskisecurity.com Jump to article: research.kudelskisecurity.com/2023/03/15/cve-2023-23397-microsoft-outlook-privilege-elevation-critical-vulnerability/
-
CVE-2023-36884 Office and Windows HTML Remote Code Execution Vulnerability
Written by Yann Lehmann and Harish Segar of the Kudelski Security Threat Detection & Research Team Summary On July 11th, Microsoft disclosed a rem… First seen on research.kudelskisecurity.com Jump to article: research.kudelskisecurity.com/2023/07/14/cve-2023-36884-office-and-windows-html-remote-code-execution-vulnerability/
-
Escanor Malware delivered in Weaponized Microsoft Office Documents
First seen on resecurity.com Jump to article: www.resecurity.com/blog/article/escanor-malware-delivered-in-weaponized-microsoft-office-documents
-
Copilot: Administratorwissen zum Schutz der Daten
Microsoft hat ja damit begonnen, seine AI-Lösung Copilot in Microsoft Office-Anwendungen mit “Auto-Opt-in” an Kunden mit entsprechender Lizenz auszurollen. Administratoren kommt eine besondere Verantwortung zu, was den Schutz von Daten im Unternehmen betrifft. Microsoft hat dazu kürzlich einen Beitrag mit … First seen on borncity.com Jump to article: www.borncity.com/blog/2024/12/01/copilot-was-administratoren-zum-schutz-der-daten-wissen-sollten/
-
RomCom nutzt Firefox und WindowsDay-Schwachstellen aus
ESET Forscher finden bisher unbekannte Sicherheitslücke in Mozilla-Produkten und eine weitere Schwachstelle in Microsoft Windows, die in einem Zero-Click-Exploit kombiniert wurde First seen on welivesecurity.com Jump to article: www.welivesecurity.com/de/eset-research/romcom-nutzt-firefox-und-windows-zero-day-schwachstellen-aus/
-
CVE-2024-21388 Enables Silent Installation of Malicious Extensions
A recently patched security vulnerability in Microsoft Edge could have allowed malicious actors to stealthily install arbitrary extensions on users’ s… First seen on sensorstechforum.com Jump to article: sensorstechforum.com/cve-2024-21388-edge-flaw/
-
Microsoft Fights Global Outage Developments So Far
Tags: microsoftIn an unexpected and chaotic turn of events, a significant IT outage disrupted major institutions globally. Here’s the latest information: Microsoft A… First seen on sensorstechforum.com Jump to article: sensorstechforum.com/microsoft-global-outage/
-
CVE-2024-38193 Exploited by Lazarus Group in Targeted Attacks
A newly patched security vulnerability in Microsoft Windows has been actively exploited by the Lazarus Group, a notorious state-sponsored hacking grou… First seen on sensorstechforum.com Jump to article: sensorstechforum.com/cve-2024-38193-lazarus-group/
-
New Rockstar 2FA phishing service targets Microsoft 365 accounts
A new phishing-as-a-service (PhaaS) platform named ‘Rockstar 2FA’ has emerged, facilitating large-scale adversary-in-the-middle (AiTM) attacks to steal Microsoft 365 credentials. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-rockstar-2fa-phishing-service-targets-microsoft-365-accounts/
-
Phishing-as-a-Service Rockstar 2FA continues to be prevalent
Tags: 2fa, attack, authentication, credentials, malicious, mfa, microsoft, monitoring, phishing, service, threat, toolPhishing tool Rockstar 2FA targets Microsoft 365 credentials, it uses adversary-in-the-middle (AitM) attacks to bypass multi-factor authentication. Trustwave researchers are monitoring malicious activity associated with Phishing-as-a-Service (PaaS) platforms, their latest report focuses on a toolkit called Rockstar 2FA. Rockstar 2FA targets Microsoft 365 accounts and bypasses multi-factor authentication with adversary-in-the-middle (AitM) attacks. In AiTM phishing, threat…
-
Phishing-as-a-Service “Rockstar 2FA” Targets Microsoft 365 Users with AiTM Attacks
Tags: 2fa, attack, authentication, credentials, cybersecurity, email, malicious, mfa, microsoft, phishing, serviceCybersecurity researchers are warning about malicious email campaigns leveraging a phishing-as-a-service (PhaaS) toolkit called Rockstar 2FA with an aim to steal Microsoft 365 account credentials.”This campaign employs an AitM [adversary-in-the-middle] attack, allowing attackers to intercept user credentials and session cookies, which means that even users with multi-factor authentication (MFA) First seen on thehackernews.com Jump to…
-
Microsoft Fixes AI, Cloud, and ERP Security Flaws; One Exploited in Active Attacks
Microsoft has addressed four security flaws impacting its artificial intelligence (AI), cloud, enterprise resource planning, and Partner Center offerings, including one that it said has been exploited in the wild.The vulnerability that has been tagged with an “Exploitation Detected” assessment is CVE-2024-49035 (CVSS score: 8.7), a privilege escalation flaw in partner.microsoft[.]com.”An First seen on thehackernews.com…
-
Nach Nothalt: Microsoft verteilt korrigierte Exchange-Server-Updates
Das Exchange-Update zum November-Patchday war fehlerhaft, Microsoft zog die Notbremse. Jetzt stehen korrigierte Sicherheitsupdates bereit. First seen on heise.de Jump to article: www.heise.de/news/Nach-Nothalt-Microsoft-verteilt-korrigierte-Exchange-Server-Updates-10181645.html
-
Golem Karrierewelt: Kostenloses Live-Webinar heute über Microsoft 365 Copilot
Was kann Copilot eigentlich, was ChatGPT nicht kann? Wer mehr darüber erfahren möchte, wie sich mit KI Effizienzgewinne realisieren lassen: Heute um 16:00 kostenloses Live-Webinar auf YouTube! First seen on golem.de Jump to article: www.golem.de/news/golem-karrierewelt-kostenloses-live-webinar-heute-ueber-microsoft-365-copilot-2411-190799.html