Tag: microsoft
-
Microsoft SharePoint RCE bug exploited to breach corporate network
Tags: breach, corporate, cve, exploit, microsoft, network, rce, remote-code-execution, vulnerabilityA recently disclosed Microsoft SharePoint remote code execution (RCE) vulnerability tracked as CVE-2024-38094 is being exploited to gain initial acces… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-sharepoint-rce-bug-exploited-to-breach-corporate-network/
-
Chinese threat actors use Quad7 botnet in password-spray attacks
Microsoft warns Chinese threat actors are using the Quad7 botnet to carry out password-spray attacks and steal credentials. Chinese threat actors use … First seen on securityaffairs.com Jump to article: securityaffairs.com/170503/malware/quad7-botnet-used-by-chinese-threat-actors.html
-
Russia, Iran, And China Influence U.S. Elections, Microsoft Warns
The researchers have observed consistent efforts by Russia, Iran, and China to exert foreign influence on democratic processes in the United States. R… First seen on gbhackers.com Jump to article: gbhackers.com/foreign-influence-us-elections/
-
Permiso State of Identity Security 2024: A Shake-up in Identity Security Is Looming Large
Identity security is front, and center given all the recent breaches that include Microsoft, Okta, Cloudflare and Snowflake to name a few. Organizatio… First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/permiso-state-of-identity-security-2024.html
-
Detecting Lateral Movement Risks in Microsoft Entra ID’s Cross-Tenant Synchronization Feature
In a recent blog post, Lina Lau, founder and hacker at @xintraorg, shed light on the potential risks of Microsoft Entra ID’s cross-tenant synchronizat… First seen on securityonline.info Jump to article: securityonline.info/detecting-lateral-movement-risks-in-microsoft-entra-ids-cross-tenant-synchronization-feature/
-
Inoffizieller Fix für 0-day Windows-Themes-Schwachstelle
In Windows (7 bis 11) gibt es eine Windows Themes Spoofing-Schwachstelle, die bisher nicht durch Microsoft geschlossen wurde. Die Entwickler von ACROS… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/10/30/inoffizieller-fix-fuer-0-day-windows-themes-schwachstelle/
-
Microsoft Outlook workaround fixes freezes when copying text
Tags: microsoftFirst seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-outlook-workaround-fixes-freezes-when-copying-text/
-
Chinese Hackers Use Quad7 Botnet for Credential Theft
Hackers Using Password Spraying to Steal User Microsoft Account Credentials. Multiple Chinese hacking groups are using a botnet named for a TCP routin… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/chinese-hackers-use-quad7-botnet-for-credential-theft-a-26709
-
Microsoft Recall launch postponed anew
Tags: microsoftFirst seen on scworld.com Jump to article: www.scworld.com/brief/microsoft-recall-launch-postponed-anew
-
Microsoft credentials pilfered by APT Storm via botnet spraypray router attack
First seen on scworld.com Jump to article: www.scworld.com/news/storm-0940-steals-credentials-of-microsoft-customers-by-leveraging-quad7-botnet
-
Microsoft warns Azure Virtual Desktop users of black screen issues
Tags: microsoftMicrosoft warned customers they might experience up to 30 minutes of black screens when logging into Azure Virtual Desktop (AVD) after installing the … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-warns-azure-virtual-desktop-users-of-black-screen-issues/
-
CISA Warns of Active Exploitation of Microsoft SharePoint Vulnerability (CVE-2024-38094)
A high-severity flaw impacting Microsoft SharePoint has been added to the Known Exploited Vulnerabilities (KEV) catalog by the U.S. Cybersecurity and … First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/cisa-warns-of-active-exploitation-of.html
-
Russian Cozy Bear Hackers Phish Critical Sectors with Microsoft, AWS Lures
First seen on hackread.com Jump to article: hackread.com/russian-cozy-bear-hackers-phish-microsoft-aws-lures/
-
Chinese hackers use Quad7 botnet to steal credentials
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-chinese-hackers-use-quad7-botnet-to-steal-credentials/
-
Golem Karrierewelt: Live-Webinar: Microsoft AI Tour Q&A
First seen on golem.de Jump to article: www.golem.de/news/golem-karrierewelt-live-webinar-microsoft-ai-tour-q-a-2410-189922.html
-
Midnight Blizzard Targets 100+ Organizations in RDP Phishing Attack
Microsoft Threat Intelligence has issued a warning about a new spear-phishing campaign orchestrated by the Russian state-sponsored threat actor Midnig… First seen on securityonline.info Jump to article: securityonline.info/midnight-blizzard-targets-100-organizations-in-rdp-phishing-attack/
-
Microsoft delays Windows Recall again, now by December
Microsoft is again delaying the rollout of its AI-powered Windows Recall feature after announcing in August that it will be available for Insiders wit… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-delays-windows-recall-again-now-by-december/
-
Russia-linked Midnight Blizzard APT targeted 100+ organizations with a spear-phishing campaign using RDP files
Microsoft warns of a new phishing campaign by Russia-linked APT Midnight Blizzard targeting hundreds of organizations. Microsoft warns of a large-scal… First seen on securityaffairs.com Jump to article: securityaffairs.com/170398/apt/midnight-blizzard-apt-targeted-100-organizations.html
-
Microsoft wants $30 if you want to delay Windows 11 switch
Microsoft announced today that Windows 10 home users can delay the switch to Windows 11 for one more year if they’re willing to pay $30 for Extended S… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-wants-30-if-you-want-to-delay-windows-11-switch/
-
Exchange Online: Inbound SMTP DANE mit DNSSEC verfügbar
Tags: microsoftMicrosoft hat das Inbound SMTP DANE mit DNSSEC für Exchange Online allgemein freigegeben, nachdem das Ganze bereits im Juli 2024 als Preview verfügbar… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/10/29/exchange-online-inbound-smtp-dane-mit-dnssec-verfuegbar/
-
Microsoft’s Controversial Recall Feature Release Delayed Again
Microsoft is again delaying the release of its controversial Recall feature for new Windows Copilot+ PCs until December to get new security capabiliti… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/11/microsofts-controversial-recall-feature-release-delayed-again/
-
Microsoft fixes Windows 10 bug causing apps to stop working
Microsoft has fixed a known issue that prevents some apps launched from non-admin accounts from starting on Windows 10 22H2 systems after installing t… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-fixes-windows-10-bug-causing-apps-to-stop-working/
-
Healthcare Sees 300% Surge in Ransomware Attacks
First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/microsoft-healthcare-300-percent-surge-ransomware-attacks
-
CVE-2024-43573 Microsoft Windows Security Vulnerability October 2024
A critical vulnerability (CVE-2024-43573) in Microsoft Windows MSHTML platform allows for spoofing attacks. Affected Platform The vulnerability iden… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/10/cve-2024-43573-microsoft-windows-security-vulnerability-october-2024/
-
Microsoft Warns of Russian Spear-Phishing Attacks Targeting Over 100 Organizations
Microsoft says a new spear-phishing campaign by Russia’s Midnight Blizzard uses RDP files, a new vector for this threat group. The post Microsoft Warn… First seen on securityweek.com Jump to article: www.securityweek.com/microsoft-warns-of-russian-spear-phishing-attacks-targeting-over-100-organizations/
-
Microsoft cleans up hot mess of Patch Tuesday preview
First seen on theregister.com Jump to article: www.theregister.com/2024/10/09/windows_patch_tuesday_fixes/
-
Microsoft Entra security defaults to make MFA setup mandatory
Microsoft says it will improve security across Entra tenants where security defaults are enabled by making multifactor authentication (MFA) registrati… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-entra-security-defaults-to-make-mfa-setup-mandatory/
-
Largest Patch Tuesday since July includes two exploited in the wild, three critical vulnerabilities
The two vulnerabilities that Microsoft reports have been actively exploited in the wild and are publicly known are both rated as only being of moderat… First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/microsoft-patch-tuesday-october-2024/
-
Microsoft CEO asked board to cut pay in connection with security overhaul
First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/microsoft-ceo-nadella-cut-pay-security/731070/
-
Microsoft SharePoint Vuln Is Under Active Exploit
First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/microsoft-sharepoint-vuln-active-exploit