Tag: microsoft
-
Golem Karrierewelt: Kostenloses Live-Webinar heute über Microsoft 365 Copilot
Was kann Copilot eigentlich, was ChatGPT nicht kann? Wer mehr darüber erfahren möchte, wie sich mit KI Effizienzgewinne realisieren lassen: Heute um 16:00 kostenloses Live-Webinar auf YouTube! First seen on golem.de Jump to article: www.golem.de/news/golem-karrierewelt-kostenloses-live-webinar-heute-ueber-microsoft-365-copilot-2411-190799.html
-
Microsoft Patches Multiple Vulnerabilities Allow Attackers to Elevate Privileges
Microsoft has recently released patches addressing multiple vulnerabilities that could enable attackers to elevate privileges across various Microsoft products. The patches are part of Microsoft’s continuous efforts to enhance security and protect its users from threats. The Microsoft Security Response Center (MSRC) has been actively investigating these vulnerabilities to provide timely and effective security updates.…
-
Microsoft Exchange Server Nov. Updates Re-Release (27.11.2024)
Microsoft hat zum 27. November die zurückgezogenen Sicherheitsupdates für Microsoft Exchange Server 2016- und 2019 erneut freigegeben. Beim ersten Release stellte sich heraus, dass die Transportregeln im Anschluss an die Update-Installation nicht mehr funktionieren. Nun glaubt Microsoft die Probleme behoben … First seen on borncity.com Jump to article: www.borncity.com/blog/2024/11/28/microsoft-exchange-server-nov-updates-re-release-27-11-2024/
-
Achtung: CoPilot in Office-Apps standardmäßig aktiviert
Microsoft hat wohl Updates der Office-Apps in Microsoft 365 ausgerollt, bei denen standardmäßig ein Opt-In in CoPilot aktiviert ist. Damit werten Word oder Excel Dokumente standardmäßig aus, um die AI-Modelle zu trainieren. Nutzer tun gut daran, sofern möglich, diese Option … First seen on borncity.com Jump to article: www.borncity.com/blog/2024/11/28/achtung-copilot-in-office-apps-standardmaessig-aktiviert-abschalten/
-
Microsoft re-releases Exchange updates after fixing mail delivery
Microsoft has re-released the November 2024 security updates for Exchange Server after pulling them earlier this month due to email delivery issues on servers using custom mail flow rules. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-re-releases-exchange-updates-after-fixing-mail-delivery/
-
Microsoft launches $4M bug bounty challenge to secure AI, cloud
First seen on scworld.com Jump to article: www.scworld.com/brief/microsoft-launches-4m-bug-bounty-challenge-to-secure-ai-cloud
-
Russian APT RomCom combines Firefox and Windows zero-day flaws in drive-by exploit
Tags: access, antivirus, apt, attack, backdoor, browser, business, computer, cve, cybercrime, cyberespionage, defense, endpoint, exploit, flaw, germany, government, group, insurance, intelligence, malicious, microsoft, msp, password, powershell, russia, software, threat, ukraine, vulnerability, windows, zero-dayA Russia-aligned group that engages in both cybercrime and cyberespionage operations used a zero-click exploit chain last month that combined previously unknown and unpatched vulnerabilities in Firefox and Windows.The campaign, whose goal was to deploy the group’s RomCom backdoor on computers, targeted users from Europe and North America. The APT group, also known as Storm-0978,…
-
Microsoft says it’s not using your Word, Excel data for AI training
Microsoft has denied claims that it uses Microsoft 365 apps (including Word, Excel, and PowerPoint) to collect data to train the company’s artificial intelligence (AI) models. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-says-its-not-using-your-word-excel-data-for-ai-training/
-
Barings Law plans to sue Microsoft and Google over AI training data
Microsoft and Google are using people’s personal data without proper consent to train artificial intelligence models, alleges Barings Law, as it prepares to launch a legal challenge against the tech giants First seen on Jump to article: /www.computerweekly.com/news/366616407/Barings-Law-plans-to-sue-Microsoft-and-Google-over-AI-training-data
-
Microsoft Finally Releases Recall as Part of Windows Insider Preview
The preview version now includes multiple security-focused additions Microsoft had promised to include, such as SecureBoot, BitLocker, and Windows Hello. First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/microsoft-releases-recall-windows-insider-preview
-
Microsoft patcht teils kritische Lücken außer der Reihe
Microsoft hat Sicherheitslecks in mehreren Produkten geschlossen. Einige Updates müssen Nutzer installieren. First seen on heise.de Jump to article: www.heise.de/news/Microsoft-patcht-teils-kritische-Luecken-ausser-der-Reihe-10178400.html
-
Hackers Exploit Firefox and Windows Flaws: RomCom’s Advanced Attack Unveiled
A Russia-aligned hacking group, known as RomCom (also identified as Storm-0978, Tropical Scorpius, or UNC2596), has successfully exploited two zero-day vulnerabilities”, one in Mozilla Firefox and another in Microsoft Windows Task Scheduler. These vulnerabilities, identified as CVE-2024-9680 and CVE-2024-49039, were chained together to allow the group to execute arbitrary code and install malicious backdoors on…
-
AWS bends to Broadcom’s will with VMware Cloud Foundation asservice
Microsoft, Oracle, and IBM are all doing it. Andy Jassy’s rent-a-server shop may have felt it was leaving money on the table First seen on theregister.com Jump to article: www.theregister.com/2024/11/26/amazon_elastic_vmware_service_preview/
-
Nicht nur Microsoft kann das: Cloudflare verliert Logging-Daten seiner Kunden
Tags: microsoftMehrere Stunden an Protokolldaten eines Großteils der Cloudflare-Kundschaft sind verschwunden. Dabei wollte der Konzern nur eine kleine Änderung einführen. First seen on golem.de Jump to article: www.golem.de/news/nicht-nur-microsoft-kann-das-cloudflare-verliert-logging-daten-seiner-kunden-2411-191180.html
-
Hotpatching kommt auch in Windows 11
Windows 11 kommt auch in den Genuss von Neustart-losen Updates. Microsoft beginnt den Probebetrieb für verwaltetes Windows 11 24H2 Enterprise. First seen on heise.de Jump to article: www.heise.de/news/Microsoft-Hotpatching-kommt-auch-in-Windows-11-10177968.html
-
Microsoft 365: Nutzen Word und Excel Kundendaten für KI-Trainings?
Auf X wird die Annahme verbreitet, dass Microsoft Dokumenteninhalte für KI-Trainings sammeln soll. Das Unternehmen hat das offiziell verneint. First seen on golem.de Jump to article: www.golem.de/news/microsoft-365-nutzen-word-und-excel-kundendaten-fuer-ki-trainings-2411-191177.html
-
MSSQL for Pentester: Command Execution with xp_cmdshell
Transact-SQL (T-SQL) is an extension of the SQL language used primarily in Microsoft SQL Server. T-SQL expands the functionality of SQL by adding proc… First seen on hackingarticles.in Jump to article: www.hackingarticles.in/mssql-for-pentester-command-execution-with-xp_cmdshell/
-
RomCom Exploits Zero-Days in Firefox (CVE-2024-9680) Windows (CVE-2024-49039) with No User Interaction
Tags: attack, browser, cybersecurity, exploit, microsoft, russia, threat, vulnerability, windows, zero-dayIn a recent cybersecurity report, ESET researchers have unveiled a coordinated attack by the Russia-aligned threat actor RomCom, exploiting zero-day vulnerabilities in both Mozilla Firefox and Microsoft Windows. These vulnerabilities”, previously... First seen on securityonline.info Jump to article: securityonline.info/romcom-exploits-zero-days-in-firefox-cve-2024-9680-windows-cve-2024-49039-with-no-user-interaction/
-
Microsoft’s Cloud Defender integrates SCA tool by Endor Labs
First seen on scworld.com Jump to article: www.scworld.com/brief/microsofts-cloud-defender-integrates-sca-tool-by-endor-labs
-
Dell unveils new AI, cybersecurity tools at Microsoft Ignite event
First seen on scworld.com Jump to article: www.scworld.com/brief/dell-unveils-new-ai-cybersecurity-tools-at-microsoft-ignite-event
-
RomCom Hackers Exploits Windows Firefox Zero-Day in Advanced Cyberattacks
In a new wave of cyberattacks, the Russia-aligned hacking group >>RomCom>The compromise chain is composed of a […] The post RomCom Hackers Exploits Windows & Firefox Zero-Day in Advanced Cyberattacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform. First seen on gbhackers.com Jump to article: gbhackers.com/romcom-hackers-exploits-windows-firefox-zero-day/
-
Data leaks from websites built on Microsoft Power Pages, including 1.1 million NHS records
A security researcher has blamed misconfigured implementations of Microsoft Power Pages for a slew of data breaches from web portals – including the leak of 1.1 million NHS employee records. First seen on bitdefender.com Jump to article: www.bitdefender.com/en-us/blog/hotforsecurity/data-leaks-microsoft-power-pages-nhs-records
-
Bing Wallpaper app, now in Windows Store, accused of cookie shenanigans
Microsoft free tool snooping on users? Surely not! First seen on theregister.com Jump to article: www.theregister.com/2024/11/26/bing_wallpaper_app/
-
Cyberangriff auf Drittanbieter: Starbucks muss Gehälter wohl manuell auszahlen
Neben Starbucks hat das attackierte Unternehmen noch weitere prominente Kunden – darunter Ford, Nissan, Microsoft, Samsung, Lenovo und Coca Cola. First seen on golem.de Jump to article: www.golem.de/news/cyberangriff-auf-drittanbieter-starbucks-muss-gehaelter-wohl-manuell-auszahlen-2411-191147.html
-
RomCom Exploits Zero-Day Firefox and Windows Flaws in Sophisticated Cyberattacks
The Russia-aligned threat actor known as RomCom has been linked to the zero-day exploitation of two security flaws, one in Mozilla Firefox and the other in Microsoft Windows, as part of attacks designed to deliver the eponymous backdoor on victim systems.”In a successful attack, if a victim browses a web page containing the exploit, an…
-
Microsoft-365-Störungen weitgehend behoben
Tags: microsoftSeit Montag gibt es Störungen der Microsoft-365-Dienste, insbesondere für Outlook und Teams. Die sollen weitgehend behoben sein. First seen on heise.de Jump to article: www.heise.de/news/Microsoft-Cloud-Probleme-stoeren-Outlook-und-Teams-10176043.html
-
9 VPN alternatives for securing remote network access
Tags: access, ai, api, attack, authentication, automation, best-practice, business, cloud, compliance, computer, computing, control, corporate, credentials, cve, cybercrime, cybersecurity, data, defense, detection, dns, encryption, endpoint, exploit, firewall, fortinet, group, guide, Hardware, iam, identity, infrastructure, Internet, iot, least-privilege, login, malicious, malware, mfa, microsoft, monitoring, network, office, password, ransomware, risk, router, saas, service, software, strategy, switch, threat, tool, update, vpn, vulnerability, vulnerability-management, waf, zero-trustOnce the staple for securing employees working remotely, VPNs were designed to provide secure access to corporate data and systems for a small percentage of a workforce while the majority worked within traditional office confines. The move to mass remote working brought about by COVID-19 in early 2020 changed things dramatically. Since then, large numbers…
-
Cloud-Probleme stören Outlook und Teams
Seit Montag gibt es Störungen der Microsoft-365-Dienste, insbesondere für Outlook und Teams. Die sollen weitgehend behoben sein. First seen on heise.de Jump to article: www.heise.de/news/Microsoft-Cloud-Probleme-stoeren-Outlook-und-Teams-10176043.html
-
North Korean and Chinese Threat Actors Target Crypto, Aerospace, and Government Agencies
Tags: china, crypto, cyber, government, intelligence, korea, microsoft, north-korea, tactics, threatAt CYBERWARCON 2024, Microsoft Threat Intelligence unveiled groundbreaking research on two major nation-state cyber actors: North Korea and China. These revelations provide a closer look at their tactics, techniques, and... First seen on securityonline.info Jump to article: securityonline.info/north-korean-and-chinese-threat-actors-target-crypto-aerospace-and-government-agencies/
-
Ab Februar 2025 – MFA wird Pflicht im Microsoft 365 Admin Center
First seen on security-insider.de Jump to article: www.security-insider.de/microsoft-365-multifaktor-authentifizierung-pflicht-a-ad49f6b6c4319e4beffcbba3564f8f26/