Tag: microsoft
-
Microsoft, working with security partners, pledges better deployment, testing collaboration
Tags: microsoftFollowing a summit with U.S. and European partners, the company is working to build additional resiliency features to prevent a repeat of the historic… First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/microsoft-security-deployment-testing/726958/
-
Microsoft Windows Kernel Vulnerability Exploited in the Wild
Microsoft has confirmed the exploitation of a Windows Kernel vulnerability, identified as CVE-2024-37985, in the wild. This vulnerability, first relea… First seen on gbhackers.com Jump to article: gbhackers.com/microsoft-windows-kernel-vulnerability/
-
Microsoft Office Updates (10. September 2024)
Am 10. September 2024 (zweiter Dienstag im Monat, Microsoft Patchday) hat Microsoft mehrere sicherheitsrelevante Updates für Microsoft Office 2016, so… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/09/12/microsoft-office-updates-10-september-2024/
-
Vanilla Tempest hit healthcare with INC ransomware
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-vanilla-tempest-hit-healthcare-with-inc-ransomware/
-
Recently patched Windows flaw CVE-2024-43461 was actively exploited as a zero-day before July 2024
Microsoft warns that a recently patched Windows flaw, tracked as CVE-2024-43461, was actively exploited as a zero-day before July 2024. Microsoft warn… First seen on securityaffairs.com Jump to article: securityaffairs.com/168467/hacking/windows-cve-2024-43461-actively-exploited-before-july-2024.html
-
Ransomware gangs now abuse Microsoft Azure tool for data theft
Ransomware gangs like BianLian and Rhysida increasingly use Microsoft’s Azure Storage Explorer and AzCopy to steal data from breached networks and sto… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ransomware-gangs-now-abuse-microsoft-azure-tool-for-data-theft/
-
Microsoft Mulls Out of Kernel Security Capabilities
Tags: microsoftFirst seen on scmagazine.com Jump to article: www.scmagazine.com/brief/microsoft-mulls-out-of-kernel-security-capabilities
-
Microsoft Mulls OutKernel Security Capabilities
Tags: microsoftFirst seen on scmagazine.com Jump to article: www.scmagazine.com/brief/microsoft-mulls-out-of-kernel-security-capabilities
-
Microsoft Vows to Prevent Future CrowdStrike-Like Outages
Microsoft will introduce new security capabilities for solution providers outside of kernel mode, preventing events like the CrowdStrike global outage… First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/microsoft-prevent-crowdstrike/
-
Microsoft rolls out Office LTSC 2024 for Windows and Mac
Microsoft has announced that Office LTSC (Long Term Servicing Channel) 2024, a volume-licensed and perpetual version of Office for Windows and macOS u… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-rolls-out-office-ltsc-2024-for-windows-and-mac/
-
Microsoft fixes bug crashing Microsoft 365 apps when typing
Tags: microsoftMicrosoft has fixed a known issue that causes Microsoft 365 apps like Outlook, Word, Excel, and OneNote to crash while typing or spell-checking a text… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-fixes-bug-crashing-microsoft-365-apps-when-typing/
-
CISA Warns of Windows MSHTML Progress WhatsUp Gold Flaw Exploited Widely
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding two critical vulnerabilities affecting Microsoft Wi… First seen on gbhackers.com Jump to article: gbhackers.com/cisa-warns-windows-mshtml-progress-whatsup-gold/
-
Patchday Microsoft: Angreifer attackieren vier Lücken in Windows & Co.
First seen on heise.de Jump to article: www.heise.de/news/Patchday-Microsoft-Aeltere-Sicherheitsupdates-in-neuer-Luecke-ausgehebelt-9864233.html
-
Microsoft Discloses 4 Zero-Days in September Update
First seen on darkreading.com Jump to article: www.darkreading.com/application-security/microsoft-discloses-4-zero-days-in-september-update
-
Microsoft confirms second 0-day exploited by Void Banshee APT (CVE-2024-43461)
CVE-2024-43461, a spoofing vulnerability affecting Windows MSHTML a software component used by various apps for rendering render web pages on Windows … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/09/16/cve-2024-43461-exploited/
-
Cybercriminals Increasingly Target Google, Microsoft, and Amazon in Sophisticated Phishing Schemes
A recent report by Zscaler ThreatLabz sheds light on the rising wave of phishing campaigns, with threat actors increasingly turning to typosquatting a… First seen on securityonline.info Jump to article: securityonline.info/cybercriminals-increasingly-target-google-microsoft-and-amazon-in-sophisticated-phishing-schemes/
-
Notorious Iranian Hackers Have Been Targeting the Space Industry With a New Backdoor
In addition to its longstanding password spraying attacks, Microsoft says Iran-backed hacker group Peach Sandstorm, or APT 33, has developed custom ma… First seen on wired.com Jump to article: www.wired.com/story/iran-peach-sandworm-tickler-backdoor/
-
Something has gone seriously wrong, dual-boot systems warn after Microsoft update
First seen on arstechnica.com Jump to article: arstechnica.com/
-
Niemand hat die Absicht, eine Mauer um den Windows-Kernel zu errichten
Wie die Windows-Sicherheit verbessern? Microsoft lud Security-Anbieter zum großen Konsens-Summit. Der Elefant im Raum: ein abgeriegelter Windows-Kerne… First seen on heise.de Jump to article: www.heise.de/news/Microsofts-Windows-Kernel-Niemand-hat-die-Absicht-eine-Mauer-zu-errichten-9867222.html
-
Microsoft Hosting Cybersecurity Summit After Global IT Outage
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36318/Microsoft-Hosting-Cybersecurity-Summit-After-Global-IT-Outage.html
-
Microsoft Says Recent Windows Vulnerability Exploited as Zero-Day
Microsoft warns that a recently patched Windows vulnerability was exploited in the wild as a zero-day prior to July 2024. The post Microsoft Says Rece… First seen on securityweek.com Jump to article: www.securityweek.com/microsoft-says-recent-windows-vulnerability-exploited-as-zero-day/
-
Week in review: Veeam Backup Replication RCE could soon be exploited, Microsoft fixes 4 0-days
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Veeam Backup Replication RCE flaw may soon be levera… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/09/15/week-in-review-veeam-backup-replication-rce-could-soon-be-exploited-microsoft-fixes-4-0-days/
-
After CrowdStrike Crash, Microsoft Mulls New Windows Security Tools
Microsoft is looking to add new security platform features to Windows, including allowing security vendors to operate outside of the OS’ kernel to avo… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/09/after-crowdstrike-crash-microsoft-mulls-new-windows-security-tools/
-
Patch Tuesday for September 2024: Microsoft Catches Four Zero-Day Vulnerabilities
First seen on techrepublic.com Jump to article: www.techrepublic.com/article/patch-tuesday-september-24/
-
Microsoft Office: ActiveX wird abgedreht
First seen on heise.de Jump to article: www.heise.de/news/Microsoft-Office-ActiveX-wird-abgedreht-9865690.html
-
Microsoft Entra Permissions Management verstehen und nutzen – Identitäts- und Zugriffsverwaltung in MultiUmgebungen
First seen on security-insider.de Jump to article: www.security-insider.de/microsoft-entra-multi-cloud-berechtigungsverwaltung-a-54e702901d0c493ab632a8a116e6b098/
-
CrowdStrike outage leads Microsoft to plan more ‘security capabilities outside of kernel’
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/crowdstrike-outage-leads-microsoft-to-plan-more-security-capabilities-outside-of-kernel
-
Microsoft Is Disabling Default ActiveX Controls in Office 2024 to Improve Security
First seen on techrepublic.com Jump to article: www.techrepublic.com/article/microsoft-office-activex-disable-default/
-
Post-CrowdStrike Fallout: Microsoft Redesigning EDR Vendor Access to Windows Kernel
Microsoft is revamping how anti-malware tools interact with the Windows kernel to avoid another CrowdStrike faulty update catastrophe. The post Post-… First seen on securityweek.com Jump to article: www.securityweek.com/post-crowdstrike-fallout-microsoft-redesigning-edr-vendor-access-to-windows-kernel/
-
Palantir stellt KI-Produkte auf Microsoft Azure für US-Behörden zur Verfügung
First seen on tarnkappe.info Jump to article: tarnkappe.info/artikel/kuenstliche-intelligenz/palantir-stellt-ki-produkte-auf-microsoft-azure-fuer-us-behoerden-zur-verfuegung-299962.html