Tag: microsoft
-
Windows 11: Microsoft schränkt Umgehung des TPM-Zwangs ein
Durch einen einfachen Trick lässt sich Windows 11 auch auf inkompatibler Hardware installieren. Microsoft arbeitet jedoch daran, das künftig zu unterb… First seen on golem.de Jump to article: www.golem.de/news/windows-11-microsoft-schraenkt-umgehung-des-tpm-zwangs-ein-2408-188126.html
-
Secure Boot: Microsoft erweitert Workaround für parallele Linux-Installationen
Die unausgereifte Linux-Erkennung im Windows-Update verursacht Probleme bei Parallelinstallationen. Microsofts Workaround soll das beheben, greift abe… First seen on heise.de Jump to article: www.heise.de/news/Microsoft-erweitert-Workaround-fuer-Windows-SBAT-Update-9847760.html
-
Recent CrowdStrike outage: What you should know
On Friday, July 19, 2024, nearly 8.5 million Microsoft devices were affected by a faulty system update, causing a major outage of businesses and servi… First seen on securityintelligence.com Jump to article: securityintelligence.com/news/recent-crowdstrike-outage-what-you-should-know/
-
Microsoft Copilot Prompt Injection Vulnerability Let Hackers Exfiltrate Sensitive Data
A security researcher revealed a critical vulnerability in Microsoft Copilot, a tool integrated into Microsoft 365, which allowed hackers to exfiltrat… First seen on gbhackers.com Jump to article: gbhackers.com/microsoft-copilot-prompt-vulnerability/
-
Exchange Online mistakenly tags emails as malware
Microsoft is investigating an Exchange Online false positive issue causing emails containing images to be wrongly tagged as malicious and sent to quar… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-exchange-online-mistakenly-tags-emails-as-malware/
-
Microsoft Copilot Studio Vuln Led To Information Disclosure
Tags: microsoftFirst seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36239/Microsoft-Copilot-Studio-Vuln-Led-To-Information-Disclosure.html
-
Microsoft Convenes Endpoint Security Firms Following CrowdStrike Incident
Microsoft has called together cybersecurity firms and government representatives for its Windows Endpoint Security Ecosystem Summit. The post Microsof… First seen on securityweek.com Jump to article: www.securityweek.com/microsoft-convenes-endpoint-security-firms-following-crowdstrike-incident/
-
0-day-Schwachstelle CVE-2024-38193 wurde durch Lazarus angegriffen
Zum 13. August 2024 hat Microsoft die 0-day-Schwachstelle CVE-2024-38193 im Treiber afd.sys mit einem Sicherheitsupdate geschlossen. Dort hieß es vage… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/08/20/windows-0-day-schwachstelle-cve-2024-38193-wurde-durch-lazarus-angegriffen/
-
Datenschutzfunktionen von Microsoft-365 reichen nicht aus
Nach Angaben von Microsoft nutzen weltweit mehr als 85 Millionen Menschen Microsoft-365 . Die bekannte Office-Suite bietet seinen Anwendern wichtige S… First seen on netzpalaver.de Jump to article: netzpalaver.de/2024/08/20/datenschutzfunktionen-von-microsoft-365-reichen-nicht-aus/
-
Microsoft Discovers Critical OpenVPN Vulnerabilities
First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/trends/microsoft-openvpn-vulnerabilities/
-
Microsoft Patches Zero-Day Flaw Exploited by North Korea’s Lazarus Group
A newly patched security flaw in Microsoft Windows was exploited as a zero-day by Lazarus Group, a prolific state-sponsored actor affiliated with Nort… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/microsoft-patches-zero-day-flaw.html
-
Axiad Takes a Leading Role in Microsoft’s FIDO Provisioning API Upgrade
First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/08/axiad-takes-a-leading-role-in-microsofts-fido-provisioning-api-upgrade/
-
97% of CrowdStrike systems are back online; Microsoft suggests Windows changes
First seen on arstechnica.com Jump to article: arstechnica.com/
-
Kommentar zur Microsoft Authenticator-App: Einzigartig und zerstörerisch
Tags: microsoftMicrosoft hebt sich deutlich von der Masse der Authentifizierer ab. Dies liegt aber nicht etwa daran, dass die App kostenlos ist oder besonders gut wä… First seen on csoonline.com Jump to article: www.csoonline.com/de/a/einzigartig-und-zerstoererisch
-
Microsoft 365: Outlook, Word und Onenote stürzen beim Tippen ab
Tags: microsoftFirst seen on golem.de Jump to article: www.golem.de/news/microsoft-365-outlook-word-und-onenote-stuerzen-beim-tippen-ab-2408-188079.html
-
Privilege Escalation in Azure – Kritische Schwachstellen in Microsofts Azure Health Bot Service
First seen on security-insider.de Jump to article: www.security-insider.de/schwachstellen-azure-health-bot-service-a-da7e0eb413b7f808d96f49cae1f9499c/
-
New Windows 10 22H2 beta fixes memory leaks and crashes
Microsoft has released a new Windows 10 22H2 beta (KB5041582) with memory leak and crash fixes for Insiders in the Beta and Release Preview channels. … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/new-windows-10-22h2-beta-fixes-memory-leaks-and-crashes/
-
Microsoft shares temp fix for Linux boot issues on dual-boot systems
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-shares-temp-fix-for-linux-boot-issues-on-dual-boot-systems/
-
Iranian Hackers Targeted WhatsApp Accounts of Staffers in Biden, Trump Administrations, Meta Says
Meta said it discovered a network of Iranian hackers, who posed as tech support agents for companies including AOL, Microsoft, Yahoo and Google. The p… First seen on securityweek.com Jump to article: www.securityweek.com/iranian-hackers-targeted-whatsapp-accounts-of-staffers-in-biden-trump-administrations-meta-says/
-
Unfixed Microsoft Entra ID Authentication Bypass Threatens Hybrid IDs
First seen on darkreading.com Jump to article: www.darkreading.com/application-security/unfixed-microsoft-entra-id-authentication-bypass-threatens-hybrid-clouds
-
Hackers now use AppDomain Injection to drop CobaltStrike beacons
A wave of attacks that started in July 2024 rely on a less common technique called AppDomain Manager Injection, which can weaponize any Microsoft .NET… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-now-use-appdomain-injection-to-drop-cobaltstrike-beacons/
-
Microsoft sends Windows Control Panel to tech graveyard
First seen on theregister.com Jump to article: www.theregister.com/2024/08/22/windows_control_panel_deprecation/
-
Top companies ground Microsoft Copilot over data governance concerns
First seen on theregister.com Jump to article: www.theregister.com/2024/08/21/microsoft_ai_copilots/
-
Microsoft confirms August updates break Linux boot in dual-boot systems
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-confirms-august-updates-break-linux-boot-in-dual-boot-systems/
-
August updates cause Windows Server boot issues, freezes
Microsoft has confirmed and fixed a known issue causing performance issues, boot problems, and freezes on Windows Server 2019 systems after installing… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-august-updates-cause-windows-server-boot-issues-freezes/
-
Microsoft reagiert auf lahmgelegte Linux-Bootloader durch Windows Update
First seen on heise.de Jump to article: www.heise.de/news/Microsoft-reagiert-auf-lahmgelegte-Linux-Bootloader-durch-Windows-Update-9843516.html
-
U.S. CISA adds Dahua IP Camera, Linux Kernel and Microsoft Exchange Server bugs to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Dahua IP Camera, Linux Kernel and Microsoft Exchange Server bugs to its Known Exploi… First seen on securityaffairs.com Jump to article: securityaffairs.com/167414/uncategorized/u-s-cisa-dahua-ip-camera-linux-kernel-microsoft-exchange-server-bugs-its-known-exploited-vulnerabilities-catalog.html
-
CVE-2024-38178 Vulnerability within Microsoft Edge
High threat level vulnerability CVE-2024-38178 discovered on Microsoft Edge browser : OFFICIAL CVE-2024-38178 PATCHING INFORMATION : A recent discover… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/08/cve-2024-38178-vulnerability-within-microsoft-edge/
-
Laut Microsoft-AGB: KI ist nicht für wichtige Dinge geeignet
First seen on golem.de Jump to article: www.golem.de/news/laut-microsoft-agbs-ki-ist-nicht-fuer-wichtige-dinge-geeignet-2408-188057.html