Tag: microsoft
-
Is the UK resilient enough to withstand a major cyber-attack?
Microsoft’s IT outage reveals the fragility of our software systems and the risks of a more serious technology collapse</p><p>¢ <a href… First seen on theguardian.com Jump to article: www.theguardian.com/technology/article/2024/jul/19/uk-resilient-enough-withstand-cyber-attack
-
Cloud Environments of US Organizations Targeted in Ransomware Attacks
A threat actor has been compromising the hybrid cloud environments of US organizations in multiple sectors. The post Microsoft: Cloud Environments of … First seen on securityweek.com Jump to article: www.securityweek.com/microsoft-cloud-environments-of-us-organizations-targeted-in-ransomware-attacks/
-
CrowdStrike Apologizes for IT Outage, Defends Microsoft Kernel Access
Adam Meyers, CrowdStrike VP for counter-adversary operations, appeared before a US congressional committee to answer questions about its July faulty s… First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/crowdstrike-apologizes-outage/
-
Windows Recall now can be removed, is more secure
Microsoft has announced security and privacy upgrades to its AI-powered Windows Recall feature, which now can be removed and has stronger default prot… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-windows-recall-now-can-be-removed-is-more-secure/
-
Embargo ransomware escalates attacks to cloud environments
Microsoft warns that ransomware threat actor Storm-0501 has recently switched tactics and now targets hybrid cloud environments, expanding its strateg… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/embargo-ransomware-escalates-attacks-to-cloud-environments/
-
Windows 11 KB5043145 update released with 13 changes and fixes
Microsoft released the September 2024 preview update (KB5043145) for Windows 11 23H2 and 22H2, with 13 improvements and fixes for multiple issues, inc… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-11-kb5043145-update-released-with-13-changes-and-fixes/
-
Controversial Windows Recall AI Search Tool Returns With ProofPresence Encryption, Data Isolation
Microsoft reboots controversial Windows Recall with proof-of-presence encryption, anti-tampering checks, and secure enclave data management. The post … First seen on securityweek.com Jump to article: www.securityweek.com/microsofts-controversial-recall-returns-with-proof-of-presence-encryption-data-isolation-opt-in-model/
-
Microsoft Copilot Studio: Datenleck durch SSRF-Schwachstelle möglich
First seen on tarnkappe.info Jump to article: tarnkappe.info/artikel/it-sicherheit/microsoft-copilot-studio-datenleck-durch-ssrf-schwachstelle-moeglich-300506.html
-
Microsoft Initiative the ‘Largest Cybersecurity Engineering Effort in History’
First seen on techrepublic.com Jump to article: www.techrepublic.com/article/microsoft-secure-future-initiative-report/
-
KB5014754: Änderungen der zertifikatsbasierten Authentifizierung auf Windows-Domänencontrollern
Kleiner Nachtrag für Administratoren von Windows Domain-Controllern (DCs). Microsoft hat zum 10. September 2024 den Artikel KB5014754 aktualisiert. Di… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/09/26/kb5014754-aenderungen-der-zertifikatsbasierten-authentifizierung-auf-windows-domaenencontrollern/
-
Active Directory compromise: Cybersecurity agencies provide guidance
Active Directory (AD), Microsoft’s on-premises directory service for Windows domain networks, is so widely used for enterprise identity and access man… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/09/26/active-directory-compromise/
-
Microsoft 365 Credentials Targeted by TikTok URL-Based Phishing
First seen on scworld.com Jump to article: www.scworld.com/brief/microsoft-365-credentials-targeted-by-tiktok-url-based-phishing
-
Microsoft Warns of New INC Ransomware Targeting U.S. Healthcare Sector
Microsoft has revealed that a financially motivated threat actor has been observed using a ransomware strain called INC for the first time to target t… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/microsoft-warns-of-new-inc-ransomware.html
-
CVE-2024-43491 Windows 10 Security Vulnerability September 2024
Critical vulnerability (CVE-2024-43491) in the Microsoft Windows Update process allows attackers to bypass previous security patches, exposing systems… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/09/cve-2024-43491-windows-10-security-vulnerability-september-2024/
-
Microsoft legt Fortschrittsbericht zur Secure Future Initiative vor
Tags: microsoftMicrosoft hat einen ersten Fortschrittsbericht zu seiner Secure Future Initiative auf Grund der gravierenden Cybervorfälle im Unternehmen veröffentlic… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/09/24/microsoft-legt-fortschrittsbericht-zur-secure-future-initiative-vor/
-
ISMG Editors: Can Microsoft Regain Trust in Its Security?
Also: CrowdStrike Grilled by Congress; Coalition Against Spyware Abuse Is Growing. In the latest weekly update, ISMG editors discussed Microsoft’s maj… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/ismg-editors-microsoft-regain-trust-in-its-security-a-26400
-
Recall that Recall recall? Now Microsoft thinks it can make Windows feature palatable
First seen on theregister.com Jump to article: www.theregister.com/2024/09/27/microsoft_has_some_thoughts_about/
-
Active Directory Hardening: Erzwingen der LDAP-Kanalbindung
Tags: microsoftKleiner Nachtrag in Sachen verbesserte Active Directory-Sicherheit. Microsoft hat bereits vor einigen Tagen einen Techcommunity Beitrag in der Reihe A… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/09/23/active-directory-hardening-erzwingen-der-ldap-kanalbindung/
-
Microsoft names deputy CISOs, flushes dead accounts as part of internal security overhaul
First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/microsoft-deputy-cisos-security/727763/
-
Angreifer attackieren Sicherheitslücken in Microsofts MSHTML und Whatsup Gold
Tags: microsoftFirst seen on heise.de Jump to article: www.heise.de/news/Angreifer-attackieren-Sicherheitsluecken-in-Microsofts-MSHTML-und-Whatsup-Gold-9870626.html
-
Initiative für mehr IT-Sicherheit: Microsoft zieht erstes Resümee
In einem Bericht erläutert Microsoft, wie es mit der Secure Future Initiative vorangeht. Mehrere Maßnahmen sollen unter anderem Cyberattacken vorbeuge… First seen on heise.de Jump to article: www.heise.de/news/Initiative-fuer-mehr-IT-Sicherheit-Microsoft-zieht-erstes-Resuemee-9952362.html
-
Active Directory compromise: Cybersecurity agencies provde guidance
Active Directory (AD), Microsoft’s on-premises directory service for Windows domain networks, is so widely used for enterprise identity and access man… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/09/26/active-directory-compromise/
-
‘Vanilla Tempest’ Now Using INC Ransomware in Health Sector
Microsoft: Ransomware-as-a-Service Group Keeps Shifting Malware to Avoid Detection. Threat actors tracked as Vanilla Tempest – and also known as Vice … First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/vanilla-tempest-now-using-inc-ransomware-in-health-sector-a-26389
-
Contractor Software Targeted via Microsoft SQL Server Loophole
First seen on darkreading.com Jump to article: www.darkreading.com/application-security/contractor-software-targeted-mssql-loophole
-
Windows 10 KB5043131 update released with 9 changes and fixes
Microsoft has released the September 2024 non-security preview update for Windows 10, version 22H2, with fixes for bugs causing Edge web browser freez… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-10-kb5043131-update-released-with-9-changes-and-fixes/
-
Over 100 EU Firms Commit to Implementing Key AI Act Provisions
Meta, Apple, Mistral, Nvidia Not Among AI Pact’s Signatories. More than 100 tech companies including OpenAI, Microsoft and Amazon on Wednesday made vo… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/over-100-eu-firms-commit-to-implementing-key-ai-act-provisions-a-26372
-
Microsoft Warns Of Vanilla Tempest Hackers Attacking Healthcare Sector
Microsoft has identified a new attack vector employed by the financially motivated threat actor Vanilla Tempest. This actor has been observed leveragi… First seen on gbhackers.com Jump to article: gbhackers.com/microsoft-vanilla-tempest-healthcare-attack/
-
Microsoft to roll out mandatory MFA for Azure
Following several high-profile attacks across the globe on MFA-less accounts, Microsoft will make the security measure mandatory for Azure sign-ins be… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366605637/Microsoft-to-roll-out-mandatory-MFA-for-Azure
-
Microsoft’s security culture reboot includes cyber governance council, all-staff trainings
First seen on cyberscoop.com Jump to article: cyberscoop.com/2024-microsoft-security-initiative/
-
Copilot for Microsoft 365 might boost productivity if you survive the compliance minefield
First seen on theregister.com Jump to article: www.theregister.com/2024/09/04/copilot_microsoft_365_compliance/