Tag: microsoft
-
Microsoft fixes actively exploited zero-days (CVE-2024-43451, CVE-2024-49039)
November 2024 Patch Tuesday is here, and Microsoft has dropped fixes for 89 new security issues in its various products, two of which CVE-2024-43451 and CVE-2024-49039 … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/11/12/cve-2024-43451-cve-2024-49039/
-
Microsoft fixes bugs causing Windows Server 2025 blue screens, install issues
Microsoft has fixed several bugs that cause install, upgrade, and Blue Screen of Death (BSOD) issues on Windows Server 2025 devices with a high core count. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-fixes-bugs-causing-windows-server-2025-blue-screens-install-issues/
-
Microsoft Exchange adds warning to emails abusing spoofing flaw
Microsoft has disclosed a high-severity Exchange Server vulnerability that allows attackers to forge legitimate senders on incoming emails and make malicious messages a lot more effective. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/unpatched-microsoft-exchange-server-flaw-enables-spoofing-attacks/
-
Microsoft Confirms Zero-Day Exploitation of Task Scheduler Flaw
Patch Tuesday: Microsoft patches 90 security flaws across the Windows ecosystem warns of zero-day exploitation and code execution risks. The post Microsoft Confirms Zero-Day Exploitation of Task Scheduler Flaw appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/microsoft-confirms-zero-day-exploitation-of-task-scheduler-flaw/
-
Trustwave, Cybereason Merge to Form an MDR Security Stalwart
Merger to Strengthen MDR, EDR, Consulting Services and Threat Intelligence Globally. SoftBank-backed merger between Trustwave and Cybereason brings together leading MDR, EDR, DFIR and threat intelligence capabilities. The combined organization aims to improve AI-driven detection and enhance Microsoft E5 support, targeting enterprise, mid-market, and public sector clients worldwide. First seen on govinfosecurity.com Jump to article:…
-
Windows 10 KB5046613 update released with fixes for printer bugs
Microsoft has released the KB5046613 cumulative update for Windows 10 22H2 and Windows 10 21H2, which includes ten changes and fixes, including the new Microsoft account manager on the Start menu and fixes for multi-function printer issues. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-10-kb5046613-update-released-with-fixes-for-printer-bugs/
-
Microsoft November 2024 Patch Tuesday fixes 4 zero-days, 91 flaws
Today is Microsoft’s November 2024 Patch Tuesday, which includes security updates for 91 flaws, including four zero-days, two of which are actively exploited. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-november-2024-patch-tuesday-fixes-4-zero-days-91-flaws/
-
Trustwave and Cybereason Merge to Form MDR Security Stalwart
Merger to Strengthen MDR, EDR, Consulting Services and Threat Intelligence Globally. SoftBank-backed merger between Trustwave and Cybereason brings together leading MDR, EDR, DFIR, and threat intelligence capabilities. The combined organization aims to improve AI-driven detection and enhance Microsoft E5 support, targeting enterprise, mid-market, and public sector clients worldwide. First seen on govinfosecurity.com Jump to article:…
-
Windows 11 KB5046617 and KB5046633 cumulative updates released
Microsoft has released the Windows 11 KB5046617 and KB5046633 cumulative updates for versions 24H2 and 23H2 to fix security vulnerabilities and issues. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-11-kb5046617-and-kb5046633-cumulative-updates-released/
-
Citrix ‘Recording Manager’ Zero-Day Bug Allows Unauthenticated RCE
The security vulnerability is due to an exposed Microsoft Message Queuing (MSMQ) instance and the use of the insecure BinaryFormatter. First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/citrix-recording-manager-zero-day-bug-unauthenticated-rce
-
Remcos RAT Now Exploiting Microsoft Excel Files
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36584/Remcos-RAT-Now-Exploiting-Microsoft-Excel-Files.html
-
Microsoft Warns of Chinese Botnet Exploiting Router Flaws for Credential Theft
Microsoft has revealed that a Chinese threat actor it tracks as Storm-0940 is leveraging a botnet called Quad7 to orchestrate highly evasive password … First seen on thehackernews.com Jump to article: thehackernews.com/2024/11/microsoft-warns-of-chinese-botnet.html
-
Microsoft says more ransomware stopped before reaching encryption
First seen on theregister.com Jump to article: www.theregister.com/2024/10/15/microsoft_ransomware_attacks/
-
Microsoft Delays Windows Copilot+ Recall Release Over Privacy Concerns
Microsoft is further delaying the release of its controversial Recall feature for Windows Copilot+ PCs, stating it’s taking the time to improve the ex… First seen on thehackernews.com Jump to article: thehackernews.com/2024/11/microsoft-delays-windows-copilot-recall.html
-
KI im Dienste der Sicherheit: Wie Partner mit Microsoft Sentinel ihre Kunden schützen
Die Cybergefahren durch staatliche und andere Akteure nehmen ständig zu. Erschreckenderweise haben Russland und China ihre Cyberangriffe auf NATO-Staaten, Militäreinrichtungen und kritische Infrastrukturen in den vergangenen Jahren deutlich ausgeweitet. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/ki-im-dienste-der-sicherheit-wie-partner-mit-microsoft-sentinel-ihre-kunden-schuetzen/a38869/
-
Revamped Remcos RAT Deployed Against Microsoft Windows Users
Tags: exploit, malicious, microsoft, office, rat, remote-code-execution, risk, tool, vulnerability, windowsWindows users are at risk for full device takeover by an emerging malicious version of the Remcos remote admin tool, which is being used in an ongoing campaign exploiting a known remote code execution (RCE) vulnerability in Microsoft Office and WordPad. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/revamped-remcos-rat-microsoft-windows-users
-
Microsoft Bookings Flaw Enables Account Hijacking and Impersonation
A vulnerability in Microsoft Bookings can expose your organization to serious security risks. Learn how attackers can exploit… First seen on hackread.com Jump to article: hackread.com/microsoft-bookings-flaw-account-hijack-impersonate/
-
Privacy Anxiety Pushes Microsoft Recall AI Release Again
The Recall AI tool will be available to Copilot+ PC subscribers in December, and can be used to record images of every interaction on the device for r… First seen on darkreading.com Jump to article: www.darkreading.com/application-security/privacy-anxiety-pushes-microsoft-recall-release-again
-
Microsoft blames Windows Server 2025 automatic upgrades on 3rd-party tools
Microsoft has finally confirmed that some Windows Server 2019 and 2022 systems were “unexpectedly” upgraded to Windows Server 2025 on devices if updates were managed using third-party patch management tools. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-blames-windows-server-2025-automatic-upgrades-on-third-party-tools/
-
Microsoft Visio Files Used in Sophisticated Phishing Attacks
Researchers have uncovered a surge in phishing attacks using Visio .vsdx files to evade security scans First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/microsoft-visio-files-phishing/
-
November 2024 Patch Tuesday forecast: New servers arrive early
Microsoft followed their October precedent set with Windows 11 24H2 and announced Microsoft Server 2025 on the first of November. We were expecting the official announcement … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/11/11/november-2024-patch-tuesday-forecast/
-
Windows 11 is adding a ‘Share’ button to the Start menu and Taskbar
Microsoft wants you to share content/items more frequently, so it’s now adding the “Share” button everywhere, including the Start menu and even the taskbar. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-11-is-adding-a-share-button-to-the-start-menu-and-taskbar/
-
Angriff auf Cloud-Kunden durch Diebstahl von Anmeldedaten
Die Sicherheitsexperten von Microsoft haben diverse Einbruchsaktivitäten beobachtet, die auf den Diebstahl von Zugangsdaten mehrerer Microsoft-Kunden … First seen on borncity.com Jump to article: www.borncity.com/blog/2024/11/05/microsoft-angriff-auf-cloud-kunden-durch-diebstahl-von-anmeldedaten/
-
Storm-0940 and CovertNetwork-1658: Insights into Chinese Cyberattack Infrastructure
In recent findings, Microsoft Threat Intelligence has identified a concerning escalation in the activity of a Chinese state-affiliated threat actor, S… First seen on securityonline.info Jump to article: securityonline.info/storm-0940-and-covertnetwork-1658-insights-into-chinese-cyberattack-infrastructure/
-
Hands on with AI features in Windows 11 Paint and Notepad
As part of its efforts to add AI everywhere, Microsoft is now bringing AI features to the popular Paint and Notepad apps on Windows 11. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/hands-on-with-ai-features-in-windows-11-paint-and-notepad/
-
Microsoft says recent Windows 11 updates break SSH connections
Microsoft has confirmed that last month’s Windows security updates are breaking SSH connections on some Windows 11 22H2 and 23H2 systems. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-says-recent-windows-11-updates-break-ssh-connections/
-
Microsoft still not said anything about unexpected Windows Server 2025 installs
Affected business calls situation ‘mindbogglingly dangerous’ as sysadmins reminded to check backup and restore strategies First seen on theregister.com Jump to article: www.theregister.com/2024/11/08/windows_2025_surprise_install/
-
Europas und Deutschlands fatale digitale Abhängigkeit von den USA rächt sich
Es ist eine unschöne Zustandsbeschreibung, vor der lange gewarnt wurde. Deutschland und andere europäische Staaten sind durch fehlendes Handeln in eine fatale digitale Abhängigkeit von den USA und Firmen wie Microsoft geraten. Durch die fehlende Digitalsouveränität ist Europa im Hinblick … First seen on borncity.com Jump to article: www.borncity.com/blog/2024/11/09/eingelockt-deutschlands-fatale-digitale-abhaengigkeit-raecht-sich/
-
Neue Zero-Day-Spoofing-Schwachstelle in Windows – Microsofts Patch für CVE-2024-21320 ist nutzlos
First seen on security-insider.de Jump to article: www.security-insider.de/sicherheitsluecke-cve-2024-21320-patch-leaking-ntlm-anmeldedaten-a-3b0ef2b5c786558a92ef33c2da2f4997/