Tag: microsoft
-
Microsoft’s Sway Serves as Launchpad for ‘Quishing’ Campaign
First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/microsofts-sway-serves-as-launchpad-for-quishing-campaign
-
Microsoft to Host Windows Security Summit in CrowdStrike Outage Aftermath
The tech giant seeks to work with endpoint security partners, including CrowdStrike, on how to prevent an outage event of such gravity from happening … First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/microsoft-to-host-windows-security-summit-post-crowdstrike-outage
-
Vulnerabilities in Microsoft apps for macOS allow stealing permissions
Vulnerabilities in Microsoft apps for macOS could allow attackers to steal permissions and access sensitive data. Cisco Talos researchers discovered e… First seen on securityaffairs.com Jump to article: securityaffairs.com/167973/hacking/microsoft-apps-for-macos-flaws.html
-
Cybercriminals Tap Greasy Opal to Create 750M Fake Microsoft Accounts
First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/cybercriminals-tap-greasy-opal-to-create-750m-fake-microsoft-accounts
-
Microsoft Sway für Quishing-Angriffe missbraucht
First seen on csoonline.com Jump to article: www.csoonline.com/de/a/microsoft-sway-fuer-quishing-angriffe-missbraucht
-
PoC Exploit Released For 0-Day Windows Kernel Privilege Escalation Vulnerability
Microsoft released several patches for multiple vulnerabilities during the Patch Tuesday for August 2024. One of the vulnerabilities listed by Microso… First seen on gbhackers.com Jump to article: gbhackers.com/windows-0-day-poc-exploit/
-
News Desk 2024: Hacking Microsoft Copilot Is Scary Easy
As enterprises in the world embrace Microsoft’s AI assistant, researcher Michael Bargury warns its security is lacking. Check out his News Desk interv… First seen on darkreading.com Jump to article: www.darkreading.com/application-security/hacking-microsoft-copilot-is-scary-easy-news-desk-black-hat-2024
-
CVE-2024-7971: North Korean APT Citrine Sleet Exploits Chromium Zero-Day
In a recent cybersecurity report, Microsoft Threat Intelligence has revealed that a North Korean threat actor, believed to be Citrine Sleet, has been … First seen on securityonline.info Jump to article: securityonline.info/cve-2024-7971-north-korean-apt-citrine-sleet-exploits-chromium-zero-day/
-
Microsoft Defender Schutz mit Bordmitteln auf Windows-Servern
First seen on security-insider.de Jump to article: www.security-insider.de/malware-schutz-windows-server-2022-2025-a-3e6565fecfeeed7f6baccb241d25e3f5/
-
Meta Exposes Iranian Hacker Group Targeting Global Political Figures on WhatsApp
Meta Platforms on Friday became the latest company after Microsoft, Google, and OpenAI to expose the activities of an Iranian state-sponsored threat a… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/meta-exposes-iranian-hacker-group.html
-
North Korean Hackers Actively Exploiting Chromium RCE Zero-Day In The Wild
Tags: exploit, hacker, microsoft, north-korea, rce, remote-code-execution, threat, vulnerability, zero-dayMicrosoft has identified a North Korean threat actor, Citrine Sleet, exploiting a zero-day vulnerability in Chromium (CVE-2024-7971) to gain remote co… First seen on gbhackers.com Jump to article: gbhackers.com/chromium-rce-zero-day-in-the-wild/
-
From Copilot To Copirate: How Data Thieves Could Hijack Microsoft’s Chatbot
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36268/From-Copilot-To-Copirate-How-Data-Thieves-Could-Hijack-Microsofts-Chatbot.html
-
Microsoft Says North Korean Cryptocurrency Thieves Behind Chrome Zero-Day
Redmond’s threat intel team said exploitation of CVE-2024-7971 can be attributed to a North Korean APT targeting the cryptocurrency sector for financi… First seen on securityweek.com Jump to article: www.securityweek.com/microsoft-says-north-korean-cryptocurrency-thieves-behind-chrome-zero-day/
-
Microsoft is trying to reduce Windows 11’s desktop spotlight clutter
Windows 11’s Spotlight feature is a pretty nice way to jazz up your desktop background with different wallpapers and fun facts when you hover over the… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-is-trying-to-reduce-windows-11s-desktop-spotlight-clutter/
-
CISA officials credit Microsoft security log expansion for improved threat visibility
<figure><div><img src=https://www.cybersecuritydive.com/imgproxy/XdbNnAu7S0PVk6FpgKvovWRzv7dqf_Hnjmw6R-MXzms/g:ce/bG9jYWw6Ly8vZGl2ZWltY… First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/cisa-microsoft-security-log-expansion/725358/
-
Microsoft Security Tools Questioned For Treating Employees As Threats
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36262/Microsoft-Security-Tools-Questioned-For-Treating-Employees-As-Threats.html
-
Iranian hackers ‘tickle’ targets in US, UAE with custom tool, Microsoft says
First seen on cyberscoop.com Jump to article: cyberscoop.com/iranian-hackers-tickle-targets-in-us-uae-with-custom-tool-microsoft-says/
-
Iranian Hackers Using Multi-Stage Malware To Attack Govt And Defense Sectors Via LinkedIn
Microsoft has identified a new Iranian state-sponsored threat actor, Peach Sandstorm, deploying a custom multi-stage backdoor named Tickler. This back… First seen on gbhackers.com Jump to article: gbhackers.com/iranian-hackers-using-multi-stage-malware/
-
Microsoft 365 Copilot Vulnerability Exposes User Data Risks
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/microsoft-365-copilot-flaw-exposes/
-
Microsoft punches back at Delta Air Lines and its legal threats
First seen on theregister.com Jump to article: www.theregister.com/2024/08/07/microsoft_delta_fight/
-
Webcam-Zugriff möglich – Acht Schwachstellen in Microsoft Apps gefährden macOS-Nutzer
First seen on security-insider.de Jump to article: www.security-insider.de/sicherheitsluecken-in-microsoft-anwendungen-fuer-macos-a-8be3149e81c52dd40416bec0c6f989dd/
-
Peach Sandstorm Deploys New Tickler Malware in Persistent Espionage Campaigns
Microsoft Threat Intelligence has identified a sophisticated campaign by the Iranian state-sponsored group known as Peach Sandstorm. Between April and… First seen on securityonline.info Jump to article: securityonline.info/peach-sandstorm-deploys-new-tickler-malware-in-persistent-espionage-campaigns/
-
Microsoft, SecOps pros weigh kernel access post-CrowdStrike
Microsoft will explore alternatives to direct kernel access for partners following the CrowdStrike outage. But some IT pros worry that change could do… First seen on techtarget.com Jump to article: www.techtarget.com/searchitoperations/news/366599066/Microsoft-SecOps-pros-weigh-kernel-access-post-CrowdStrike
-
Frage: BlackLotus-Schwachstelle und ablaufendes UEFI-Zertifikat was droht uns?
Im März 2024 wurde bekannt, dass das BlackLotus UEFI-Bootkit den Secure Boot in Windows 11 überwinden könne. Microsofts Versuch, da etwas per Update z… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/08/27/frage-blacklotus-schwachstelle-und-ablaufendes-uefi-zertifikat-was-droht-uns/
-
Microsoft Authenticator Zwang obwohl MFA bereits eingerichtet
Microsoft hat ja damit begonnen, eine Multifactor-Authentifizierung für seine Cloud-Angebote durchzusetzen. Unter anderem kommt die Microsoft Authenti… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/08/26/microsoft-authenticator-zwang-obwohl-mfa-bereits-eingerichtet/
-
Users call on Microsoft to update Outlook’s friendly name feature
First seen on theregister.com Jump to article: www.theregister.com/2024/08/06/users_call_for_microsoft_to/
-
QR Code Phishing Targets Microsoft 365 Credentials
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/qr-code-phishing-targets-microsoft-365-credentials