Tag: microsoft
-
1.1 Million UK NHS Employee Records Exposed From Microsoft Power Pages Misconfiguration
Security researchers from AppOmni have uncovered millions of business records that are accessible to anyone through low-code website builder Microsoft Power Pages. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/uk-nhs-employee-records-exposed/
-
Here’s how misconfigurations in Microsoft Power Pages could lead to data breaches
AppOmni researchers found that a misunderstanding of access controls can lead to PII being taken from these low-code websites. First seen on cyberscoop.com Jump to article: cyberscoop.com/microsoft-power-pages-misconfiguration-appomni/
-
Complete Guide to Microsoft Copilot for Security: Empower and Protect the Security Operations Center (SOC) (Video)
First seen on thesecurityblogger.com Jump to article: www.thesecurityblogger.com/complete-guide-to-microsoft-copilot-for-security-empower-and-protect-the-security-operations-center-soc-video/
-
How a Windows zero-day was exploited in the wild for months (CVE-2024-43451)
CVE-2024-43451, a Windows zero-day vulnerability for which Microsoft released a fix on November 2024 Patch Tuesday, has been exploited since at least April 2024, ClearSky … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/11/14/cve-2024-43451-exploited/
-
Gratis-Tool: Sicherheitsforscher knacken ShrinkLocker-Verschlüsselung
Der Erpressungstrojaner ShrinkLocker nutzt Microsofts Bitlocker, um Windows-Systeme zu verschlüsseln. Ein Entschlüsselungstool hilft. First seen on heise.de Jump to article: www.heise.de/news/Gratis-Tool-Sicherheitsforscher-knacken-ShrinkLocker-Verschluesselung-10034933.html
-
Windows 10 ESU: Microsoft will 30 USD für ein Jahr Sicherheitsupdates
First seen on golem.de Jump to article: www.golem.de/news/windows-10-esu-microsoft-will-30-usd-fuer-ein-jahr-sicherheitsupdates-2411-190379.html
-
Russian Hackers Exploit New NTLM Flaw to Deploy RAT Malware via Phishing Emails
A newly patched security flaw impacting Windows NT LAN Manager (NTLM) was exploited as a zero-day by a suspected Russia-linked actor as part of cyber attacks targeting Ukraine.The vulnerability in question, CVE-2024-43451 (CVSS score: 6.5), refers to an NTLM hash disclosure spoofing vulnerability that could be exploited to steal a user’s NTLMv2 hash. It was…
-
Microsoft Warns Foreign Disinformation Is Hitting the US Election From All Directions
First seen on wired.com Jump to article: www.wired.com/story/microsoft-russia-china-iran-election-disinformation/
-
Patchday: Microsoft Office Updates (12. November 2024)
Am 12. November 2024 (zweiter Dienstag im Monat, Microsoft Patchday) hat Microsoft mehrere sicherheitsrelevante Updates für Microsoft Office 2016, sowie die C2R-Varianten (Office 2016-2021 und 365) und andere Produkte veröffentlicht. Nachfolgend finden Sie eine Übersicht über die verfügbaren Updates. Eine … First seen on borncity.com Jump to article: www.borncity.com/blog/2024/11/14/patchday-microsoft-office-updates-12-november-2024/
-
Patch Tuesday: Four Critical Vulnerabilities Paved Over
The November 2024 Microsoft updates let Windows 11 users remap the Copilot button. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/patch-tuesday-nov-24/
-
Microsoft patches Windows zero-day exploited in attacks on Ukraine
Suspected Russian hackers were caught exploiting a recently patched Windows vulnerability as a zero-day in ongoing attacks targeting Ukrainian entities. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-patches-windows-zero-day-exploited-in-attacks-on-ukraine/
-
Impersonation attacks possible with novel Microsoft Bookings bug
First seen on scworld.com Jump to article: www.scworld.com/brief/impersonation-attacks-possible-with-novel-microsoft-bookings-bug
-
Microsoft slips Task Manager and processor count fixes into Patch Tuesday
Sore about cores no more First seen on theregister.com Jump to article: www.theregister.com/2024/11/13/microsoft_task_manager_patch_tuesday/
-
Microsoft November 2024 Patch Tuesday fixes 4 zero-days, 89 flaws
Today is Microsoft’s November 2024 Patch Tuesday, which includes security updates for 89 flaws, including four zero-days, two of which are actively exploited. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-november-2024-patch-tuesday-fixes-4-zero-days-89-flaws/
-
Cloud-Storage von Veeam mit Zero-TrustResilience
Neues Cloud-Speicherangebot von Veeam Software, bietet erweiterte Verfügbarkeit, vorhersehbare Cloud-Speicherpreise über zwei neue Editionen sowie eine nahtlose Integration in die Veeam-Data-Platform auf Basis von Zero-Trust-Data-Resilience-Prinzipien. Veeam kündigt wichtige Updates für an, einen vollständig gemanagten, sicheren Cloud-Storage-Service, der die Möglichkeiten von Microsoft-Azure nutzt, um die Offsite-Backup-Speicherung von geschäftskritischen Daten und Anwendungen zu […] First seen on…
-
Microsoft Exchange Server Updates 12. November 2024
Microsoft hat zum 12. November 2024 Sicherheits-Updates (SU) für Exchange Server 2016 und 2019 veröffentlicht. Diese Updates schließen Schwachstellen, die durch Microsoft oder Sicherheitspartner in Exchange Server gefunden wurden. Nachfolgend gebe ich einen Überblick, welche Updates für Exchange Server (On-Premises) … First seen on borncity.com Jump to article: www.borncity.com/blog/2024/11/13/microsoft-exchange-server-updates-12-november-2024/
-
Windows Server 2025: Microsoft weist Schuld für Auto-Upgrades von sich
Einige Patchmanagement-Lösungen haben ungefragt Serversysteme auf Windows Server 2025 aktualisiert. Microsoft zeigt auf Drittanbieter. First seen on golem.de Jump to article: www.golem.de/news/windows-server-2025-microsoft-weist-schuld-fuer-auto-upgrades-von-sich-2411-190743.html
-
Microsoft Fixes Four More Zero-Days in November Patch Tuesday
Microsoft has addressed four zero-day vulnerabilities this month, two of which have been exploited First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/microsoft-four-zerodays-november/
-
Microsoft Patchday November 2024 – Kritische Sicherheitslücken bekannt und unter Angriff
First seen on security-insider.de Jump to article: www.security-insider.de/microsoft-updates-november-schwachstellen-massnahmen-admins-a-628c3838024ed4d681c917ef2ecbb289/
-
Patchday Microsoft: Internet-Explorer-Komponente ermöglicht Attacken
Microsoft hat wichtige Sicherheitspatches für unter anderem Azure, Exchange Server und Windows veröffentlicht. Es gibt bereits Angriffe. First seen on heise.de Jump to article: www.heise.de/news/Patchday-Microsoft-Internet-Explorer-Komponente-ermoeglicht-Attacken-10029614.html
-
Microsoft ‘resolves’ and ‘mitigates’ Windows Server 2025 update whoopsie
No sign of ‘rollback’ yet First seen on theregister.com Jump to article: www.theregister.com/2024/11/11/microsoft_windows_2025_mitigated/
-
2 Zero-Day Bugs in Microsoft’s Nov. Update Under Active Exploit
The November 2024 Patch Tuesday update contains a substantially high percentage of remote code execution (RCE) vulnerabilities (including a critical issue in Windows Kerberos), and two other zero-day bugs that have been previously disclosed and could soon come under attack. First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/2-zero-day-bugs-microsoft-nov-update-active-exploit
-
Microsoft Fixes 90 New Flaws, Including Actively Exploited NTLM and Task Scheduler Bugs
Microsoft on Tuesday revealed that two security flaws impacting Windows NT LAN Manager (NTLM) and Task Scheduler have come under active exploitation in the wild.The security vulnerabilities are among the 90 security bugs the tech giant addressed as part of its Patch Tuesday update for November 2024. Of the 90 flaws, four are rated Critical,…
-
Microsoft Exchange adds warning to emails abusing spoofing flaw
Microsoft has disclosed a high-severity Exchange Server vulnerability that allows attackers to forge legitimate senders on incoming emails and make malicious messages a lot more effective. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/unpatched-microsoft-exchange-server-flaw-enables-spoofing-attacks/
-
November Patch Tuesday release contains three critical remote code execution vulnerabilities
The Patch Tuesday for November of 2024 includes 91 vulnerabilities, including two that Microsoft marked as “critical.” The remaining 89 vulnerabilities listed are classified as “important.” First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/november-patch-tuesday-release/
-
Microsoft’s November 2024 Patch Tuesday Addresses 91 Vulnerabilities, Including Four Critical Zero-Days
Microsoft rolled out its monthly security updates as part of the Microsoft November 2024 Patch Tuesday cycle. The company addressed a total of 91 vulnerabilities, with four of them being classified as zero-day vulnerabilities that were actively exploited in the wild. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/microsoft-november-2024-patch-tuesday/
-
Patchday: Windows 11/Server 2022-Updates (12. November 2024)
Am 12. November 2024 (zweiter Dienstag im Monat, Patchday bei Microsoft) hat Microsoft auch kumulative Updates für Windows 11 22H2 bis 24H2 veröffentlicht. Zudem erhielten Windows Server 2022 Windows Server 2025 Updates. Hier einige Details zu diesen Updates, die … First seen on borncity.com Jump to article: www.borncity.com/blog/2024/11/13/patchday-windows-11-server-2022-updates-12-november-2024/
-
Microsoft Security Update Summary (12. November 2024)
Am 12. November 2024 hat Microsoft Sicherheitsupdates für Windows-Clients und -Server, für Office sowie für weitere Produkte veröffentlicht. Die Sicherheitsupdates beseitigen 87 Schwachstellen (CVEs), davon vier kritische Sicherheitslücken, davon 4 als 0-day klassifiziert (zwei werden bereits ausgenutzt). Nachfolgend … First seen on borncity.com Jump to article: www.borncity.com/blog/2024/11/13/microsoft-security-update-summary-12-november-2024/
-
‘Top 10’ malware strain, Remcos RAT, now exploiting Microsoft Excel files
First seen on scworld.com Jump to article: www.scworld.com/news/excel-doc-loaded-with-remcos-rat-lets-attackers-gain-backdoor-access
-
Microsoft’s November Patch Tuesday Fixes 91 Vulnerabilities, 4 Zero-Days
Microsoft’s November 2024 Patch Tuesday update fixes 91 security vulnerabilities, including four zero-day vulnerabilities. Critical fixes address actively… First seen on hackread.com Jump to article: hackread.com/microsofts-november-patch-tuesday-fix-91-vulnerabilities/