Tag: microsoft
-
Microsoft fixes 4 exploited zero-days and a code defect that nixed earlier security fixes
September 2024 Patch Tuesday is here and Microsoft has delivered 79 fixes, including those for a handful of zero-days (CVE-2024-38217, CVE-2024-38226,… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/09/10/cve-2024-38217-cve-2024-43491/
-
Microsoft Fixes Four 0-Days, One Exploited for SIX YEARS
First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/09/patch-tuesday-september-2024-richixbw/
-
New Flaws in Microsoft macOS Apps Could Allow Hackers to Gain Unrestricted Access
Eight vulnerabilities have been uncovered in Microsoft applications for macOS that an adversary could exploit to gain elevated privileges or access se… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/new-flaws-in-microsoft-macos-apps-could.html
-
Microsoft and CrowdStrike hit back at Delta’s legal threats
Microsoft and CrowdStrike have rejected claims by Delta Air Lines that it was left high and dry amid thousands of flight cancellations during July’s s… First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366601558/Microsoft-and-CrowdStrike-hit-back-at-Deltas-legal-threats
-
The Supercar Phishing Kit: A Luxurious Trap for Your Microsoft 365 Credentials
In August 2024, Fortgale’s cybersecurity researchers uncovered a phishing campaign targeting Microsoft 365 users. This discovery, dubbed the Supercar … First seen on securityonline.info Jump to article: securityonline.info/the-supercar-phishing-kit-a-luxurious-trap-for-your-microsoft-365-credentials/
-
Hackers have sights set on four Microsoft vulnerabilities, CISA warns
First seen on therecord.media Jump to article: therecord.media/hackers-four-microsoft-vulnerabilities-cisa
-
SpecterOps Extends Reach of BloodHound Tool for Mapping Microsoft AD Attacks
SpecterOps has added the ability to track attack paths across instances of Microsoft Azure Directory (AD) running in both on-premises and on the Micro… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/09/specterops-extends-reach-of-bloodhound-tool-for-mapping-microsoft-ad-attacks/
-
Bashing Windows Bugs, Take 2: Microsoft Restores Nixed Fixes
A Confused Update Process Reinstalled Old, Exploitable Windows 10 Components. Microsoft has issued a slew of software updates to patch numerous flaws,… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/bashing-windows-bugs-take-2-microsoft-restores-nixed-fixes-a-26262
-
Microsoft to start force-upgrading Windows 22H2 systems next month
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-to-start-force-upgrading-windows-22h2-systems-next-month/
-
Microsoft Says Windows Update Zero-Day Being Exploited to Undo Security Fixes
Patch Tuesday: Microsoft raises an alarm for in-the-wild exploitation of a critical flaw in Windows Update. The post Microsoft Says Windows Update Zer… First seen on securityweek.com Jump to article: www.securityweek.com/microsoft-says-windows-update-zero-day-being-exploited-to-undo-security-fixes/
-
6 Best Enterprise Antivirus Software Choices in 2024
SentinelOne, Microsoft Defender for Endpoint, and CrowdStrike Falcon are among my top recommendations for businesses looking for an enterprise antivir… First seen on techrepublic.com Jump to article: www.techrepublic.com/article/best-antivirus-software/
-
Defender Update-Seite mit fehlerhaften Daten; App-Governance in Microsoft Defender for Cloud Apps
Zum Wochenende noch zwei kurze Meldungen für Nutzer, die den Microsoft Defender im Einsatz haben. Microsoft hat seine Update-Seite für den Windows Def… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/09/07/defender-update-seite-mit-fehlerhaften-daten-app-governance-in-microsoft-defender-for-cloud-apps/
-
Exchange Online: Microsoft 365 stuft harmlose E-Mails als Malware ein
First seen on golem.de Jump to article: www.golem.de/news/exchange-online-microsoft-365-stuft-harmlose-e-mails-als-malware-ein-2408-188426.html
-
How multiple vulnerabilities in Microsoft apps for macOS pave the way to stealing permissions
An adversary could exploit these vulnerabilities by injecting malicious libraries into Microsoft’s applications to gain their entitlements and user-gr… First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/how-multiple-vulnerabilities-in-microsoft-apps-for-macos-pave-the-way-to-stealing-permissions/
-
Black Basta’s Evolving Tactics and the Rising Role of LLMs in Cyber Attack
On the latest episode of the Microsoft Threat Intelligence podcast, host Sherrod DeGrippo and her expert guests delved into the cutting-edge technique… First seen on securityonline.info Jump to article: securityonline.info/black-bastas-evolving-tactics-and-the-rising-role-of-llms-in-cyber-attack/
-
Microsoft is training developers on the intricacies of threat intelligence
<figure><div><img src=https://www.cybersecuritydive.com/imgproxy/jOoKcayw029rYOZcGE9_4HFuKs7dL5P-_anTnu9APMg/g:ce/bG9jYWw6Ly8vZGl2ZWltY… First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/microsoft-developers-threat-intel/726037/
-
Chinese cyber attack sparks alert over six-year-old MS vuln
After a proof-of-concept for a six-year-old Microsoft vulnerability emerged in a Chinese APT attack chain, defenders should be on the look-out for exp… First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366599914/Chinese-cyber-attack-sparks-alert-over-six-year-old-MS-vuln
-
Microsoft Office 2024 to disable ActiveX controls by default
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-office-2024-to-disable-activex-controls-by-default/
-
Microsoft removes revenge porn from Bing search using new tool
Microsoft announced today that it has partnered with StopNCII to proactively remove harmful intimate images and videos from Bing using digital hashes … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-removes-revenge-porn-from-bing-search-using-new-tool/
-
Windows 11/Server 2024 SMB Security-Hardening
Microsoft hat im Vorgriff auf die kommenden Releases von Windows 11 24H2 und Windows Server 2025 Ende August 2024 einen Techcommunity-Beitrag zum Them… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/09/05/windows-11-server-2024-smb-security-hardening/
-
Microsoft Touts Mitigation for CLFS Vulnerability
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/microsoft-touts-mitigation-for-clfs-vulnerability
-
Novel CLFS Vulnerability Mitigation Touted by Microsoft
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/novel-clfs-vulnerability-mitigation-touted-by-microsoft
-
Researcher Identifies ToddyCat-Inspired APT Attack Leveraging ICMP Backdoor and Microsoft Exchange Flaws
Cybersecurity researchers at Kaspersky’s Global Emergency Response Team (GERT) have uncovered a sophisticated attack involving an ICMP backdoor, beari… First seen on securityonline.info Jump to article: securityonline.info/researcher-identifies-toddycat-inspired-apt-attack-leveraging-icmp-backdoor-and-microsoft-exchange-flaws/
-
Channel Brief: Microsoft’s ‘Next Phase’ of Copilot, HackerOne Names Kara Sprague CEO
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/channel-brief-microsofts-next-phase-of-copilot-hackerone-names-kara-sprague-ceo
-
Manufacturing Sector Under Fire From Microsoft Credential Thieves
First seen on darkreading.com Jump to article: www.darkreading.com/ics-ot-security/manufacturing-sector-microsoft-credential-thieves
-
New QR Code Phishing Campaign Exploits Microsoft Sway to Steal Credentials
Cybersecurity researchers are calling attention to a new QR code phishing (aka quishing) campaign that leverages Microsoft Sway infrastructure to host… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/new-qr-code-phishing-campaign-exploits.html
-
Talos discovers 11 vulnerabilities between Microsoft, Adobe software disclosed on Patch Tuesday
Eight of the vulnerabilities affect the license update feature for CLIPSP.SYS, a driver used to implement Client License System Policy on Windows 10 a… First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/talos-discovers-11-vulnerabilities-between-microsoft-adobe-software-disclosed-on-patch-tuesday/
-
Fehler in KI-Tool von Microsoft – Kritische Schwachstelle in Microsoft Copilot Studio
First seen on security-insider.de Jump to article: www.security-insider.de/sicherheitsluecke-microsoft-ki-tool-copilot-studio-a-ccc4c7d4c3220440c41c94e60ee0d3f3/
-
Microsoft Fixes ASCII Smuggling Flaw That Enabled Data Theft from Microsoft 365 Copilot
Details have emerged about a now-patched vulnerability in Microsoft 365 Copilot that could enable the theft of sensitive user information using a tech… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/microsoft-fixes-ascii-smuggling-flaw.html