Tag: microsoft
-
Zero-click Windows TCP/IP RCE impacts all systems with IPv6 enabled, patch now
Microsoft warned customers this Tuesday to patch a critical TCP/IP remote code execution (RCE) vulnerability with an increased likelihood of exploitat… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/zero-click-windows-tcp-ip-rce-impacts-all-systems-with-ipv6-enabled-patch-now/
-
Microsoft shares temp fix for Outlook, Word crashes when typing
Tags: microsoft‹Microsoft has shared a temporary fix for a known issue that causes Microsoft 365 apps like Outlook, Word, and OneNote to unexpectedly crash while typ… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-shares-temp-fix-for-outlook-word-crashes-when-typing/
-
Warnung vor Microsoft Office Spoofing-Schwachstelle CVE-2024-38200
Microsoft hat zum 8. August 2024 (mit Update vom 10. August 2024) eine Warnung von einer ungepatchten Spoofing-Schwachstelle CVE-2024-38200 veröffentl… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/08/12/warnung-vor-microsoft-office-spoofing-schwachstelle-cve-2024-38200/
-
2024 US Election Faces Escalating Iranian Cyber Influence, MTAC Warns
As the 2024 US presidential election approaches, the Microsoft Threat Analysis Center (MTAC) has reported a significant escalation in cyber-enabled in… First seen on securityonline.info Jump to article: securityonline.info/2024-us-election-faces-escalating-iranian-cyber-influence-mtac-warns/
-
GitHub Actions artifacts found leaking auth tokens in popular projects
Multiple high-profile open-source projects, including those from Google, Microsoft, AWS, and Red Hat, were found to leak GitHub authentication tokens … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/github-actions-artifacts-found-leaking-auth-tokens-in-popular-projects/
-
CVE-2024-38063: An In-Depth Look at the Critical Remote Code Execution Vulnerability
In a recent security advisory, Microsoft disclosed a high-severity vulnerability identified as CVE-2024-38063. This critical Remote Code Execution (RC… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/08/cve-2024-38063-an-in-depth-look-at-the-critical-remote-code-execution-vulnerability/
-
Breach Roundup: Microsoft’s August Patch Contains 90 Fixes
Also: Azure Health Bot Vulnerabilities Expose Risks in Cloud-Based Chatbots. This week, Microsoft released its August patch of 90 fixes, flaws were di… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/breach-roundup-microsofts-august-patch-contains-90-fixes-a-26041
-
Microsoft Azure AI assistants can be tricked to turn over patient data
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/microsoft-azure-ai-assistants-can-be-tricked-to-turn-over-patient-data
-
Patch Tuesday: Microsoft, Adobe Address Over 150 Vulnerabilities
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/patch-tuesday-microsoft-adobe-address-over-150-vulnerabilities
-
Microsoft patches 9 zero-days, 6 exploited in the wild
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/microsoft-patches-9-zero-days-6-exploited-in-the-wild
-
Over 150 Vulnerabilities Addressed by Microsoft, Adobe
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/over-150-vulnerabilities-addressed-by-microsoft-adobe
-
Global Microsoft outage hits NHS GP IT system
Tags: microsoftFirst seen on computerweekly.com Jump to article: www.computerweekly.com/news/366596241/Global-Microsoft-outage-hits-NHS-GP-IT-system
-
Iran makes late play to meddle in U.S. elections
First seen on cyberscoop.com Jump to article: cyberscoop.com/microsoft-iran-makes-late-play-to-meddle-in-u-s-elections/
-
Microsoft retires Windows updates causing 0x80070643 errors
Microsoft has retired several Windows security updates released during the January 2024 Patch Tuesday that have been causing 0x80070643 errors when in… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-retires-windows-updates-causing-0x80070643-errors/
-
Microsoft 365: AntiFunktionen per CSS ausgetrickst
Die Phishing-Warnung in Microsoft 365 lässt sich austricksen, so dass der Nutzer z.B. bei Microsoft Outlook nicht vor entsprechenden Mails gewarnt wir… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/08/11/microsoft-365-anti-phishing-funktionen-per-css-ausgetrickst/
-
Microsoft Deputy CISO recounts responding to the CrowdStrike outage
The industry’s collective response to the massive outage underscored for Ann Johnson its;ability to come together and put competitive interests aside…. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/microsoft-ciso-recounts-crowdstrike-response/723954/
-
Microsoft Patch Tuesday security updates for August 2024 addressed six actively exploited bugs
Microsoft’s August 2024 Patch Tuesday addressed 90 vulnerabilities, including six that are actively exploited. Patch Tuesday security updates for Augu… First seen on securityaffairs.com Jump to article: securityaffairs.com/167000/security/microsoft-patch-tuesday-august-2024.html
-
Microsoft’s August 2024 Patch Tuesday Addresses 10 Zero-Days, 6 Exploited
On Aug. 13, 2024, Microsoft released its latest batch of security updates as part of its Patch Tuesday program, addressing a total of 89 vulnerabiliti… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/08/microsofts-august-2024-patch-tuesday-addresses-10-zero-days-6-exploited/
-
Microsoft fixes 6 zero-days under active attack
August 2024 Patch Tuesday is here, and Microsoft has delivered fixes for 90 vulnerabilities, six of which have been exploited in the wild as zero-days… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/08/13/microsoft-zero-days-under-attack/
-
Unfixed Microsoft Entra ID Authentication Bypass Threatens Hybrid Clouds
First seen on darkreading.com Jump to article: www.darkreading.com/application-security/unfixed-microsoft-entra-id-authentication-bypass-threatens-hybrid-clouds
-
New Windows SmartScreen bypass exploited as zero-day since March
Today, Microsoft revealed that a Mark of the Web security bypass vulnerability exploited by attackers as a zero-day to bypass SmartScreen protection w… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/new-windows-smartscreen-bypass-exploited-as-zero-day-since-march/
-
Intel Core erhält Microsofts Sicherheitscontroller Pluton
Tags: microsoftFirst seen on heise.de Jump to article: www.heise.de/news/Microsoft-Sicherheitscontroller-Pluton-kommt-auch-in-Intel-Core-9833911.html
-
Microsoft Tackles 9 Zero-Day Exploits in August 2024 Patch Tuesday Update
Microsoft has released its August 2024 Patch Tuesday update, addressing multiple vulnerabilities across its software ecosystem. This month’s update fe… First seen on thecyberexpress.com Jump to article: thecyberexpress.com/microsoft-august-2024-patch-tuesday/
-
Microsoft Patchday August 2024 – 100+ Updates und 10 bekannte und angegriffene Schwachstellen
First seen on security-insider.de Jump to article: www.security-insider.de/microsoft-patchday-august-2024-sicherheitsluecken-a-a9511cf8c05c02e2023483e4cb277cd3/
-
Microsoft Reveals Iranian US Election Interference Ops
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/microsoft-irans-us-election/
-
Researchers Uncover Flaws in Windows Smart App Control and SmartScreen
Cybersecurity researchers have uncovered design weaknesses in Microsoft’s Windows Smart App Control and SmartScreen that could enable threat actors to… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/researchers-uncover-flaws-in-windows.html
-
Hazy Issue in Entra ID Allows Privileged Users to Become Global Admins
Invisible authentication mechanisms in Microsoft allow any attacker to escalate from privileged to super-duper privileged in cloud environments, pavin… First seen on darkreading.com Jump to article: www.darkreading.com/application-security/hazy-issue-entra-id-privileged-users-become-global-admins
-
How to Weaponize Microsoft Copilot for Cyberattackers
At Black Hat USA, security researcher Michael Bargury released a LOLCopilot ethical hacking module to demonstrate how attackers can exploit Microsoft … First seen on darkreading.com Jump to article: www.darkreading.com/application-security/how-to-weaponize-microsoft-copilot-for-cyberattackers
-
Microsoft on CISOs: Thriving Community Means Stronger Security
First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/microsoft-on-cisos-thriving-community-means-stronger-security
-
Windows 10 KB5041580 update released with 14 fixes, security updates
Microsoft has released the KB5041580 cumulative update for Windows 10 22H2 and Windows 10 21H2, which includes 14 changes and fixes, including BitLock… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-10-kb5041580-update-released-with-14-fixes-security-updates/