Tag: microsoft
-
Neue Zero-Day-Spoofing-Schwachstelle in Windows – Microsofts Patch für CVE-2024-21320 ist nutzlos
First seen on security-insider.de Jump to article: www.security-insider.de/sicherheitsluecke-cve-2024-21320-patch-leaking-ntlm-anmeldedaten-a-3b0ef2b5c786558a92ef33c2da2f4997/
-
Microsoft repairs 2 zero-days on October Patch Tuesday
First seen on techtarget.com Jump to article: www.techtarget.com/searchwindowsserver/news/366613059/Microsoft-repairs-2-zero-days-on-October-Patch-Tuesday
-
Microsoft services exploited for stealthy malware deployment
First seen on scworld.com Jump to article: www.scworld.com/brief/microsoft-services-exploited-for-stealthy-malware-deployment
-
Microsoft Reports 600 Million Cyberattacks per Day
Findings From the Tech Giant’s Defense Report 2024 Flag Expanding Threat Landscape. Microsoft’s latest Digital Defense Report exposed an increasingly complex cyber battlefield in which nation-state actors team up with cybercriminals to launch sophisticated attacks, while organizations continue to struggle to defend against these evolving threats. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/microsoft-reports-600-million-cyberattacks-per-day-a-26747
-
Google Chrome’s uBlock Origin Purge Has Begun
Plus: The alleged SEC X account hacker gets charged, Kroger wriggles out of a face recognition scandal, and Microsoft deals with missing customer secu… First seen on wired.com Jump to article: www.wired.com/story/google-chrome-ublock-origin-extension/
-
Google Cloud to mandate MFA for all users in 2025
The policy change puts the three largest cloud providers — AWS, Microsoft Azure and Google Cloud — in position to have MFA mandates for some or all customers next year. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/google-cloud-mandate-multifactor-authentication/732141/
-
Insider Research im Gespräch – Schutz für KI: Sichere Einführung von Microsoft Copilot
First seen on security-insider.de Jump to article: www.security-insider.de/schutz-von-ki-tools-gegen-cyber-bedrohungen-a-5f630ca309626814d06384cdc768d304/
-
ADN Microsoft CSP Security Week zeigt umfassende Sicherheitsstrategien
Tags: microsoftADN und Microsoft zeigen während der ADN Microsoft CSP Security Week vom 02.12. bis 05.12.2024, wie Partner ihre Unternehmenskunden mit den richtigen Sicherheitslösungen bestmöglich schützen und eine nachhaltige Sicherheitsstrategie erarbeiten können. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/adn-microsoft-csp-security-week-zeigt-umfassende-sicherheitsstrategien/a38865/
-
Researchers Uncover OS Downgrade Vulnerability Targeting Microsoft Windows Kernel
A new attack technique could be used to bypass Microsoft’s Driver Signature Enforcement (DSE) on fully patched Windows systems, leading to operating s… First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/researchers-uncover-os-downgrade.html
-
Microsoft SFI progress report elicits cautious optimism
Infosec experts say the Secure Future Initiative progress report shows Microsoft has made important changes to its policies, practices and accountabil… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366612727/Microsoft-SFI-progress-report-elicits-cautious-optimism
-
VEILDrive: A Novel Attack Exploits Microsoft Services for Command Control
The cybersecurity team at Hunters, AXON, recently uncovered an ongoing threat campaign called VEILDrive that leverages Microsoft services for command and control (C2). Utilizing Microsoft’s SaaS suite”, including Teams, OneDrive, SharePoint,... First seen on securityonline.info Jump to article: securityonline.info/veildrive-a-novel-attack-exploits-microsoft-services-for-command-control/
-
Sysadmin shock as Windows Server 2025 installs itself after update labeling error
Screens sprayed with coffee after techies find Microsoft’s latest OS in unexpected places First seen on theregister.com Jump to article: www.theregister.com/2024/11/06/windows_server_2025_surprise/
-
CVE-2024-38094 Exploited: Attackers Gain Domain Access via Microsoft SharePoint Server
A recent report from Rapid7’s Incident Response team reveals a serious compromise of a Microsoft SharePoint server that enabled an attacker to gain en… First seen on securityonline.info Jump to article: securityonline.info/cve-2024-38094-exploited-attackers-gain-domain-access-via-microsoft-sharepoint-server/
-
Microsoft Notepad to get AI-powered rewriting tool on Windows 11
Microsoft has started testing AI-powered Notepad text rewriting and Paint image generation tools four decades after the two programs were released in the 1980s. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-notepad-to-get-ai-powered-rewriting-tool-on-windows-11/
-
Cyberattacks hit 1 in 3 SMBs last year
Cyber woes for SMBs are exacerbated by a lack of resources to enact advanced security measures, Microsoft Security said in a report. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/smb-cyberattacks/731986/
-
VEILDrive Attack Exploits Microsoft Services to Evade Detection and Distribute Malware
An ongoing threat campaign dubbed VEILDrive has been observed taking advantage of legitimate services from Microsoft, including Teams, SharePoint, Quick Assist, and OneDrive, as part of its modus operandi.”Leveraging Microsoft SaaS services, including Teams, SharePoint, Quick Assist, and OneDrive, the attacker exploited the trusted infrastructures of previously compromised organizations to First seen on thehackernews.com Jump…
-
Windows Server 2025 released, here are the new features
Microsoft has announced that Windows Server 2025, the latest version of its server operating system, is generally available starting Friday, November … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-server-2025-released-here-are-the-new-features/
-
Microsoft modernisiert Windows Hello
First seen on heise.de Jump to article: www.heise.de/news/Microsoft-modernisiert-Windows-Hello-10002830.html
-
Azure AI Vulnerabilities Allowed Attacks to Bypass Moderation Safeguards
Mindgard researchers uncovered critical vulnerabilities in Microsoft’s Azure AI Content Safety service, allowing attackers to bypass its safeguards…… First seen on hackread.com Jump to article: hackread.com/azure-ai-vulnerabilities-bypass-moderation-safeguards/
-
Chinese Hackers Attacking Microsoft Customers With Sophisticated Password Spray Attacks
Researchers have identified a network of compromised devices, CovertNetwork-1658, used by Chinese threat actors to launch highly evasive password spra… First seen on gbhackers.com Jump to article: gbhackers.com/chinese-password-attacks-microsoft/
-
Microsoft files lawsuit to seize domains used by Russian spooks
Microsoft has been given permission to seize multiple domains used by the Russian state threat actor Star Blizzard as part of a coordinated disruption… First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366612872/Microsoft-files-lawsuit-to-seize-domains-used-by-Russian-spooks
-
Golem Karrierewelt: Heute kostenloses Live-Webinar: Microsoft AI Tour Q&A
Der M365-Experte Ragnar Heil unterzieht die KI-Strategie von Microsoft einem Realitätscheck. Am heutigen Donnerstag, dem 24. Oktober um 16 Uhr auf You… First seen on golem.de Jump to article: www.golem.de/news/golem-karrierewelt-heute-kostenloses-live-webinar-microsoft-ai-tour-q-a-2410-190128.html
-
Firewall, Malware-Schutz, LAPS und Updates zentral in Netzwerken steuern – Microsoft kündigt WSUS ab Zeit für den Umstieg auf Intune?
First seen on security-insider.de Jump to article: www.security-insider.de/microsoft-intune-windows-server-2025-verwaltung-arbeitsstationen-server-a-c110499a4dfaca2ab20d9cd2267f5f79/
-
Supportverlängerung für Windows 10 auch für Privatanwender
First seen on heise.de Jump to article: www.heise.de/news/Microsoft-Supportverlaengerung-fuer-Windows-10-auch-fuer-Privatanwender-10001194.html
-
Week in review: Windows Themes spoofing bug >>returns<<, employees phished via Microsoft Teams
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Patching problems: The return of a Windows Themes sp… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/11/03/week-in-review-windows-themes-spoofing-bug-returns-employees-phished-via-microsoft-teams/
-
China’s ‘Evasive Panda’ APT Debuts High-End Cloud Hijacking
A professional-grade tool set, appropriately dubbed CloudScout, is infiltrating cloud apps like Microsoft Outlook and Google Drive, targeting sensitiv… First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/china-evasive-panda-apt-cloud-hijacking
-
Microsoft confirms Windows Server 2025 blue screen, install issues
Microsoft has confirmed several bugs causing install and Blue Screen of Death (BSOD) issues impacting Windows Server 2025 systems with more than 256 l… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-confirms-windows-server-2025-blue-screen-install-issues/