Tag: microsoft
-
APT47 Uses Hajj-Themed Lures to Deliver Advanced Asyncshell Malware
The threat actor known as Mysterious Elephant has been observed using an advanced version of malware called Asynshell.The attack campaign is said to have used Hajj-themed lures to trick victims into executing a malicious payload under the guise of a Microsoft Compiled HTML Help (CHM) file, the Knownsec 404 team said in an analysis published…
-
Microsoft unveils resiliency, security enhancements following July global IT outage
The updates are;part of a larger effort at the company to overhaul its internal security culture. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/microsoft-resiliency-security-updates/733605/
-
Cybersecurity Snapshot: Prompt Injection and Data Disclosure Top OWASP’s List of Cyber Risks for GenAI LLM Apps
Tags: access, advisory, ai, application-security, attack, backup, best-practice, breach, cisa, cloud, computer, cve, cyber, cyberattack, cybercrime, cybersecurity, data, exploit, extortion, firewall, framework, governance, government, group, guide, Hardware, incident, incident response, infrastructure, injection, intelligence, Internet, LLM, malicious, microsoft, mitigation, mitre, monitoring, network, nist, office, open-source, powershell, privacy, ransomware, regulation, risk, risk-management, russia, service, skills, software, sql, strategy, supply-chain, tactics, technology, theft, threat, tool, update, vulnerability, vulnerability-management, windowsDon’t miss OWASP’s update to its “Top 10 Risks for LLMs” list. Plus, the ranking of the most harmful software weaknesses is out. Meanwhile, critical infrastructure orgs have a new framework for using AI securely. And get the latest on the BianLian ransomware gang and on the challenges of protecting water and transportation systems against…
-
240+ Domains Used By PhaaS Platform ONNX Seized by Microsoft
Microsoft’s Digital Crimes Unit (DCU) has disrupted a significant phishing-as-a-service (PhaaS) operation run by Egypt-based cybercriminal Abanoub Nady, known online as >>MRxC0DER.>do-it-yourself>ONNX
-
Microsoft Highlights Security Exposure Management at Ignite
Tags: microsoftBuilding on its broad security portfolio, Microsoft’s new exposure management is now available in the Microsoft Defender portal, with third-party-connectors on the way. First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/microsoft-highlights-security-exposure-management-ignite
-
Microsoft Seizes 240 Websites to Disrupt Global Distribution of Phish Kits
Microsoft has seized 240 websites associated with the “ONXX” phishing-as-a-service operation, and has sued the developer of this service First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/microsoft-seizes-websites-phish/
-
Malware Bypasses Microsoft Defender and 2FA to Steal $24K in Crypto
Malware bypasses Microsoft Defender and 2FA, stealing $24K in cryptocurrency via a fake NFT game app. Learn how… First seen on hackread.com Jump to article: hackread.com/malware-bypasses-microsoft-defender-2fa-crypto/
-
Microsoft Flight Simulator 2024 struggles to take off
If only the company in the title knew how to scale servers in the cloud First seen on theregister.com Jump to article: www.theregister.com/2024/11/20/microsoft_flight_simulator_2024_launch/
-
Microsoft Disrupts ONNX Phishing Service, Names Its Operator
Microsoft has seized 240 phishing-related websites and has disrupted the ONNX service, which the company says is run by an Egyptian man. The post Microsoft Disrupts ONNX Phishing Service, Names Its Operator appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/microsoft-disrupts-onnx-phishing-service-names-its-operator/
-
Microsoft, Meta, and DOJ Disrupt Global Cybercrime and Fraudulent Networks
Meta Platforms, Microsoft, and the U.S. Department of Justice (DoJ) have announced independent actions to tackle cybercrime and disrupt services that enable scams, fraud, and phishing attacks.To that end, Microsoft’s Digital Crimes Unit (DCU) said it seized 240 fraudulent websites associated with an Egypt-based cybercrime facilitator named Abanoub Nady (aka MRxC0DER and mrxc0derii), who First…
-
Microsoft Takes Action Against Phishing-as-a-Service Platform
The ONNX infrastructure has been servicing criminal actors as far back as 2017. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/microsoft-takes-action-against-phishing-service-platform
-
Microsoft seizes 240 websites used by Egyptian phishing-as-a-service operation ‘ONNX’
First seen on therecord.media Jump to article: therecord.media/microsoft-seizes-websites-onnx-phishing
-
Breach Roundup: Russia Suspected of Severing Undersea Cables
Also: VPN Vulnerabilities Attract Hackers, Hackers Use Swiss Mail to Send Malware. This week, Russia suspected in Balctic Sea cable sabotage, VPNs draw ransomware attackers and Swiss snail mail malware. An AI training company reported a cybertheft of $250,000 and a U.S. space firm reported a breach. Microsoft said it will pay $$$ for AI…
-
Windows 11 KB5046740 update released with 14 changes and fixes
Microsoft has released the November 2024 preview cumulative update for Windows 11 24H2, with 14 improvements and fixes for multiple issues, including some affecting File Explorer, the Clipboard history, and secondary displays. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-11-kb5046740-update-released-with-14-changes-and-fixes/
-
Five Cyber Agencies Sound Alarm About Active Directory Attacks: Beyond the Basics
Tags: access, attack, authentication, cloud, compliance, control, credentials, cyber, cybersecurity, data, defense, detection, exploit, framework, iam, identity, infrastructure, intelligence, least-privilege, login, mfa, microsoft, monitoring, password, risk, service, software, strategy, tactics, threat, tool, update, vulnerabilityA landmark global report emphasizes 17 attack techniques against Microsoft Active Directory and cautions organizations to step up protections. In the second of our two-part series, we take you beyond the basics to highlight three key areas to focus on. The landmark report Detecting and Mitigating Active Directory Compromises, released in September by cybersecurity agencies…
-
Microsoft seizes websites tied to Egypt-based DIY phishing kit-maker
The kits, which the company said were a sophisticated approach to bypassing multifactor authentication, pose a particular threat to the financial services sector. First seen on cyberscoop.com Jump to article: cyberscoop.com/microsoft-seizes-websites-tied-to-egypt-based-diy-phishing-kit-maker/
-
Microsoft pulls WinAppSDK update breaking Windows 10 app uninstalls
Microsoft has confirmed that, since November 12, some Windows 10 users have been unable to update or uninstall packaged applications like Microsoft Teams. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-pulls-winappsdk-update-breaking-windows-10-app-uninstalls/
-
Per Vollbild-Anzeige – Microsoft empfiehlt Windows-10-Nutzern Copilot+ PCs
Microsoft will Windows-10-Nutzer zum Wechsel auf Windows 11 bewegen und empfiehlt in Vollbild-Anzeigen den Kauf eines Copilot+ PCs. First seen on computerbase.de Jump to article: www.computerbase.de/news/betriebssysteme/per-vollbild-anzeige-microsoft-empfiehlt-windows-10-nutzern-copilot-plus-pcs.90375
-
Microsoft disrupts ONNX phishing-as-a-service infrastructure
Microsoft’s Digital Crimes Unit (DCU) has seized 240 domains used by customers of ONNX, a phishing-as-a-service (PhaaS) platform, to target companies and individuals across the United States and worldwide since at least 2017. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-disrupts-onnx-phishing-as-a-service-infrastructure/
-
After CrowdStrike Outage, Microsoft Debuts ‘Quick Machine Recovery’ Tool
Microsoft debuts Quick Machine Recovery tool to apply fixes even when machines are unable to boot, without needing physical access. The post After CrowdStrike Outage, Microsoft Debuts ‘Quick Machine Recovery’ Tool appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/after-crowdstrike-outage-microsoft-debuts-quick-machine-recovery-tool/
-
Microsofts Bing-Wallpaper als Adware? Teil I
Ich kippe mal einen Fundsplitter, der mir gerade untergekommen sind, in einen Beitrag ein zweiter Beitrag zu einem ähnlichen Thema folgt. Microsoft bietet im App-Store eine neue Bing-Wallpaper-App an, die wechselnde Bildschirmhintergründe zeigen soll. Mit der App holt man … First seen on borncity.com Jump to article: www.borncity.com/blog/2024/11/21/windows-microsofts-bing-wallpaper-als-adware/
-
Windows 10: Microsoft nervt Nutzer mit Vollbildwerbung für Copilot+-PCs
Einigen Windows-10-Nutzern hat Microsoft zuletzt wieder Vollbildanzeigen präsentiert. Darin animiert der Konzern zum Kauf neuer PCs mit Windows 11. First seen on golem.de Jump to article: www.golem.de/news/windows-10-microsoft-nervt-nutzer-mit-vollbildwerbung-fuer-copilot-pcs-2411-190989.html
-
Microsofts Bing-Wallpaper als Adware?
Ich kippe mal einen Fundsplitter, der mir gerade untergekommen sind, in einen Beitrag ein zweiter Beitrag zu einem ähnlichen Thema folgt. Microsoft bietet im App-Store eine neue Bing-Wallpaper-App an, die wechselnde Bildschirmhintergründe zeigen soll. Mit der App holt man … First seen on borncity.com Jump to article: www.borncity.com/blog/2024/11/21/windows-microsofts-bing-wallpaper-als-adware/
-
Azure Key Vault Tradecraft with BARK
Tags: access, api, authentication, credentials, data, encryption, microsoft, password, powershell, RedTeam, serviceBrief This post details the existing and new functions in BARK that support adversarial tradecraft research relevant to the Azure Key Vault service. The latter part of the post shows an example of how a red team operator may use these commands during the course of an assessment. Authentication Azure Key Vault is one of…
-
FY25 Changes in Microsoft Partner Benefits and Important Dates for Legacy Partners
Tags: microsoftFirst seen on scworld.com Jump to article: www.scworld.com/native/fy25-changes-in-microsoft-partner-benefits-and-important-dates-for-legacy-partners
-
Microsoft Adds Raft of Zero-Trust Tools and Platforms
Microsoft this week launched a raft of cybersecurity initiatives that address everything from making Windows platforms more secure to adding platforms that are more secure by design. First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/11/microsoft-adds-raft-of-zero-trust-tools-and-platforms/
-
Microsoft Veeps Ignite Fire Under CrowdStrike
BSODs begone! Redmond business leaders line up to say what’s new in Windows security. First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/11/microsoft-ignite-2024-security-crowdstrike-richixbw/
-
Microsoft confirms game audio issues on Windows 11 24H2 PCs
Microsoft says a Windows 24H2 bug causes game audio to unexpectedly increase to full volume when using USB DAC sound systems. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-confirms-game-audio-issues-on-windows-11-24h2-pcs/
-
Microsoft Launches Windows Resiliency Initiative to Boost Security and System Integrity
Microsoft has announced a new Windows Resiliency Initiative as a way to improve security and reliability, as well as ensure that system integrity is not compromised.The idea, the tech giant said, is to avoid incidents like that of CrowdStrike’s earlier this July, enable more apps and users to be run without admin privileges, add controls…