Tag: microsoft
-
0-Click Outlook RCE Vulnerability Triggered When Email is Clicked Technical Analysis
NetSPI discovered that Microsoft Outlook is vulnerable to authenticated remote code execution (CVE-2024-21378) due to improper validation of synchroni… First seen on gbhackers.com Jump to article: gbhackers.com/0-click-outlook-rce-vulnerability/
-
Windows 11 KB5041585 cumulative update released with fixes, new features
Microsoft has released the KB5041585 cumulative update for Windows 11 23H2, which includes many improvements and changes, including the ability to dir… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-11-kb5041585-cumulative-update-released-with-fixes-new-features/
-
Microsoft August 2024 Patch Tuesday fixes 9 zero-days, 6 exploited
Today is Microsoft’s August 2024 Patch Tuesday, which includes security updates for 89 flaws, including six actively exploited and three publicly disc… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-august-2024-patch-tuesday-fixes-9-zero-days-6-exploited/
-
Microsoft fixes issue that sent PCs into BitLocker recovery
Microsoft has fixed a known issue causing some Windows devices to boot into BitLocker recovery after installing last month’s Windows security updates…. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-fixes-issue-that-sent-pcs-into-bitlocker-recovery/
-
Windows Server August updates fix Microsoft 365 Defender issue
The August 2024 Windows Server updates fix a known issue that breaks multiple Microsoft 365 Defender features after installing last month’s security u… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-server-august-updates-fix-microsoft-365-defender-issue/
-
August Patch Pileup: Microsoft’s Zero-Day Doozy Dump
First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/08/august-2024-patch-tuesday-richixbw/
-
US Hands Over Russian Cybercriminals in WSJ Reporter Prisoner Swap
Plus: Meta pays $1.4 million in a historic privacy settlement, Microsoft blames a cyberattack for a major Azure outage, and an artist creates a face r… First seen on wired.com Jump to article: www.wired.com/story/russia-cybercriminal-us-prisoner-swap/
-
Navigating AI-Based Data Security Risks in Microsoft Copilot
Zenity’s Michael Bargury on AI Prompt Injection and Copilot Security Flaws. AI-powered tools such as Microsoft Copilot can be manipulated by attackers… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/navigating-ai-based-data-security-risks-in-microsoft-copilot-a-26021
-
Neue Schwachstellen in OpenVPN
Microsoft hat in den OpenVPN-Clients von Android, iOS, macOS, BSD und Windows eine Reihe Schwachstellen gefunden. Angreifer könnten einige der entdeck… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/08/10/neue-schwachstellen-in-openvpn/
-
BlackHat 2024: Remote Code Execution-Angriff auf M365 Copilot per E-Mail
Nettes Thema zum Sonntag: Microsoft drückt ja seinen Copilot in Microsoft 365 auf die Anwenderschaft. Da kann jeder Mann und jede Frau etwas in AI mac… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/08/11/blackhat-2024-remote-code-execution-angriff-auf-m365-copilot-per-e-mail/
-
Microsoft Azure Outage Stemmed From DDoS Defense Error
Microsoft said that a global outage of its Azure service on Tuesday was exacerbated by an error in its response to a distributed denial-of-service (DD… First seen on duo.com Jump to article: duo.com/decipher/microsoft-azure-outage-stemmed-from-ddos-defense-error
-
Creating Insecure AI Assistants With Microsoft Copilot Studio Is Easy
Microsoft claims 50,000 organizations are using its new Copilot Creation tool, but researcher Michael Bargury demonstrated at Black Hat USA ways it co… First seen on darkreading.com Jump to article: www.darkreading.com/application-security/creating-insecure-ai-assistants-microsoft-copilot-studio
-
Microsoft found OpenVPN bugs that can be chained to achieve RCE and LPE
Microsoft found four bugs in OpenVPN that could be chained to achieve remote code execution and local privilege escalation. During the Black Hat USA 2… First seen on securityaffairs.com Jump to article: securityaffairs.com/166912/hacking/openvpn-rce-lpe.html
-
Microsoft Warns of Six Windows Zero-Days Being Actively Exploited
Microsoft’s security response team pushed out documentation for almost 90 vulnerabilities across Windows and OS components and marked several flaws in… First seen on securityweek.com Jump to article: www.securityweek.com/microsoft-warns-of-six-windows-zero-days-being-actively-exploited/
-
Connect with Microsoft Security (and Me) at Black Hat USA 2024‹‹
First seen on thesecurityblogger.com Jump to article: www.thesecurityblogger.com/connect-with-microsoft-security-and-me-at-black-hat-usa-2024/
-
Telegram Bot Selling Phishing Tools to Bypass 2FA Hack Microsoft 365 Accounts
A newly discovered phishing marketplace, ONNX Store, empowers cybercriminals to launch sophisticated attacks against Microsoft 365 and Office 365 envi… First seen on gbhackers.com Jump to article: gbhackers.com/telegram-bot-selling-phishing-tools/
-
Microsoft-Sicherheitscontroller Pluton kommt auch in Intel Core
Tags: microsoftFirst seen on heise.de Jump to article: www.heise.de/news/Microsoft-Sicherheitscontroller-Pluton-kommt-auch-in-Intel-Core-9833911.html
-
Microsoft Issues Patches for 90 Flaws, Including 10 Critical Zero-Day Exploits
Microsoft on Tuesday shipped fixes to address a total of 90 security flaws, including 10 zero-days, of which six have come under active exploitation i… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/microsoft-issues-patches-for-90-flaws.html
-
Windows Server durch PoC-Exploit für CVE-2024-38077 gefährdet
Nochmals ein Nachgang zum Juli 2024-Patchday, bei dem Microsoft die Schwachstelle CVE-2024-38077 in Windows Server geschlossen hat. Es handelt sich um… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/08/09/windows-server-durch-poc-exploit-fr-cve-2024-38077-gefhrdet/
-
Unpatched MS Office flaw may leak NTLM hashes to attackers (CVE-2024-38200)
A new MS Office zero-day vulnerability (CVE-2024-38200) can be exploited by attackers to grab users’ NTLM hashes, Microsoft has shared late last week…. First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/08/12/cve-2024-38200/
-
Microsoft is killing the Windows Paint 3D app after 8 years
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-is-killing-the-windows-paint-3d-app-after-8-years/
-
Microsoft shares Outlook workaround for Gmail sign-in issues
Tags: microsoft‹‹Microsoft has shared a temporary fix for a known issue preventing Microsoft 365 customers from signing in or adding Gmail accounts using classic Out… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-shares-outlook-workaround-for-gmail-sign-in-issues/
-
Microsoft Warns of OpenVPN Vulnerabilities, Potential for Exploit Chains
The vulnerabilities, patched in OpenVPN 2.6.10, expose users on the Windows platform to remote code execution attacks. The post Microsoft Warns of Ope… First seen on securityweek.com Jump to article: www.securityweek.com/microsoft-warns-of-openvpn-vulnerabilities-potential-for-exploit-chains/
-
Achtung: Microsofts UEFI Zertifikat läuft am 19. Okt. 2026 aus Secure Boot betroffen
Tags: microsoftIch stelle mal ein Thema hier im Blog ein, was noch ein paar Tage Zeit hat, aber arg unangenehme Folgen haben könnte. Im Herbst 2026 läuft ein Zertifi… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/08/07/achtung-microsofts-uefi-zertifikat-luft-am-19-okt-2026-aus-secure-boot-betroffen/
-
Windows 11 22H2 reaches end of support in 60 days
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-windows-11-22h2-reaches-end-of-support-in-60-days/
-
Phishing Attacks Can Bypass Microsoft 365 Email Safety Warnings
First seen on hackread.com Jump to article: hackread.com/phishing-bypass-microsoft-365-email-safety-warnings/
-
Cyberangriff: Weltweite Störung bei Microsoft-Diensten
First seen on csoonline.com Jump to article: www.csoonline.com/de/a/weltweite-stoerung-bei-microsoft-diensten
-
Iran Amplifies US Election Influence Campaign
Microsoft Says Tehran Has Stepped Up Activity As November Election Day Approaches. Iranian operatives stepped up influence and hacking operations agai… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/iran-amplifies-us-election-influence-campaign-a-25998
-
Microsoft discloses unpatched Office flaw that exposes NTLM hashes
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-discloses-unpatched-office-flaw-that-exposes-ntlm-hashes/
-
Malware force-installs Chrome extensions on 300,000 browsers, patches DLLs
An ongoing and widespread malware campaign force-installed malicious Google Chrome and Microsoft Edge browser extensions in over 300,000 browsers, mod… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/malware-force-installs-chrome-extensions-on-300-000-browsers-patches-dlls/