Tag: microsoft
-
GitHub Comments Abused to Spread Malware in Fake Microsoft Repositories
First seen on hackread.com Jump to article: www.hackread.com/github-comment-malware-fake-microsoft-repositories/
-
Rubrik files to go public following alliance with Microsoft
Tags: microsoftFirst seen on theregister.com Jump to article: www.theregister.com/2024/04/02/rubrik_files_for_ipo/
-
Microsoft pulls fix for Outlook bug behind ICS security alerts
Tags: microsoftFirst seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-pulls-fix-for-outlook-bug-unexpected-ICS-warnings-after-December-security-updates/
-
Microsoft releases Exchange hotfixes for security update issues
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-releases-exchange-hotfixes-for-security-update-issues/
-
Russia-linked APT28 used post-compromise tool GooseEgg to exploit CVE-2022-38028 Windows flaw
Russia-linked APT28 group used a previously unknown tool, dubbed GooseEgg, to exploit Windows Print Spooler service flaw. Microsoft reported that the … First seen on securityaffairs.com Jump to article: securityaffairs.com/162154/apt/apt28-gooseegg-tool-win-bug.html
-
Zentraler Spam-Schutz als Richtlinie in Microsoft 365 Defender – Antispam-Richtlinie in Microsoft 365 definieren
First seen on security-insider.de Jump to article: www.security-insider.de/microsoft-365-defender-richtlinien-spamschutz-a-1a50f8cda059904f2c13ff77b523ca13/
-
Golem Karrierewelt: Kostenloses Webinar: Power Automate? Power Apps? Power was?
Tags: microsoftAm Donnerstag, dem 18. April um 16 Uhr auf Youtube: Die IT-Trainerin Heike Hofert verrät, wie der Einstieg in Microsoft Power Plattform erleichtert we… First seen on golem.de Jump to article: www.golem.de/news/golem-karrierewelt-kostenloses-webinar-power-automate-power-apps-power-was-2404-184124.html
-
Microsoft-Mitarbeiter veröffentlichen versehentlich heikle Daten – Datenpanne mit Veröffentlichung von Code und Passwörtern
Tags: microsoftFirst seen on security-insider.de Jump to article: www.security-insider.de/microsoft-datenpanne-code-und-passworte-ungeschuetzt-a-55b2363aa80a25ea3472de1201b22c51/
-
CISA Warns of Windows Print Spooler Flaw After Microsoft Sees Russian Exploitation
CISA warns organizations of a two-year-old Windows Print Spooler vulnerability being exploited in the wild. The post ns organizations of a two-year-ol… First seen on securityweek.com Jump to article: www.securityweek.com/cisa-warns-of-windows-print-spooler-flaw-after-microsoft-sees-russian-exploitation/
-
US House of Reps tells staff: No Microsoft Copilot for you!
Tags: microsoftFirst seen on theregister.com Jump to article: www.theregister.com/2024/04/01/us_house_copilot_ban/
-
Russian Hackers Exploiting Windows Print Spooler Vuln
Tags: credentials, exploit, hacker, intelligence, microsoft, military, russia, tool, vulnerability, windowsMicrosoft Warns APT28’s GooseEgg Tool Enables Credential Theft. Russian military intelligence hackers are using an 18 month-old vulnerability in the W… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/russian-hackers-exploiting-windows-print-spooler-vuln-a-24929
-
APT28 hackers exploit Windows flaw reported by NSA
‹Microsoft warns that the Russian APT28 threat group exploits a Windows Print Spooler vulnerability to escalate privileges and steal credentials and d… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-apt28-hackers-exploit-windows-flaw-reported-by-nsa/
-
Microsoft DRM Hack Could Allow Movie Downloads From Popular Streaming Services
Microsoft PlayReady vulnerabilities that could allow rogue subscribers to illegally download movies from popular streaming services. The post t PlayRe… First seen on securityweek.com Jump to article: www.securityweek.com/microsoft-drm-hacking-could-allow-movie-downloads-from-popular-streaming-services/
-
Microsoft Uncovers GooseEgg Malware: A New Weapon in Russian State Hackers’ Arsenal
Microsoft researchers uncovered a new tool in the Russian state hackers’ arsenal that helped them gain elevated access, pilfer credentials and allowed… First seen on thecyberexpress.com Jump to article: thecyberexpress.com/russian-hackers-adds-new-gooseegg-malware/
-
US says Russian hackers stole federal government emails during Microsoft cyberattack
CISA said the latest theft of government email , blamed on Russian government hackers , presents a grave and unacceptable risk to U.S. federal agencie… First seen on techcrunch.com Jump to article: techcrunch.com/2024/04/11/us-cisa-russia-apt-29-government-email-theft-microsoft/
-
GitHub comments abused to push malware via Microsoft repo URLs
A GitHub flaw, or possibly a design decision, is being abused by threat actors to distribute malware using URLs associated with a Microsoft repository… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/github-comments-abused-to-push-malware-via-microsoft-repo-urls/
-
Kommentar: Microsoft sollte endlich aufhören, beim Thema Sicherheit auszuweichen
Tags: microsoftDie Kritik des Prüfungsausschusses der US-Homeland Security an den Sicherheitspraktiken von Microsoft ist vernichten. Es ist höchste Zeit, dass Micros… First seen on crn.de Jump to article: www.crn.de/news/4194610/kommentar-microsoft-sollte-endlich-aufhoren-beim-thema-sicherheit-auszuweichen
-
U.S. Federal Agencies Ordered to Hunt for Signs of Microsoft Breach and Mitigate Risks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday issued an emergency directive (ED 24-02) urging federal agencies to hunt … First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/us-federal-agencies-ordered-to-hunt-for.html
-
Edge 123.0.2420.65-Update vom März 2024 bringt ungewollt Copilot-App; keine ‘Spionage-Funktion’
Ein verunglücktes Update des Microsoft Edge-Browser von Ende März 2024 führte dazu, dass die Copilot-App unter Windows 10/11 und Server installiert wu… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/04/18/windows-edge-123-0-2420-65-update-vom-mrz-2024-bringt-ungewollt-copilot-app-keine-spionage-funktion/
-
10 Essentials Every Anti-Phishing Course Must Have
In August 2023, Russian threat actors targeted several government agencies worldwide with Microsoft Teams phishing attacks. Many of these attacks were… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/04/10-essentials-every-anti-phishing-course-must-have/
-
Microsoft teases deepfake AI that’s too powerful to release
First seen on theregister.com Jump to article: www.theregister.com/2024/04/20/microsoft_deepfake_vasa/
-
These 17,000 unpatched Microsoft Exchange servers are a ticking time bomb
Tags: microsoftFirst seen on theregister.com Jump to article: www.theregister.com/2024/03/28/germany_microsoft_exchange_patch/
-
OpenMetadata Vulnerabilities Exploited to Abuse Kubernetes Clusters for Cryptomining
Microsoft warns that several OpenMetadata vulnerabilities are being exploited to deploy cryptomining malware to Kubernetes environments. The post t wa… First seen on securityweek.com Jump to article: www.securityweek.com/openmetadata-vulnerabilities-exploited-to-abuse-kubernetes-clusters-for-cryptomining/
-
Edge-Update kann ungewollt Copilot-App installieren
First seen on heise.de Jump to article: www.heise.de/news/Microsoft-Edge-Update-kann-ungewollt-Copilot-App-installieren-9689780.html
-
Microsoft bietet Optionen für Support-Verlängerung für Windows 10 – Extended Security Updates für Windows 10 werden teuer
First seen on security-insider.de Jump to article: www.security-insider.de/microsoft-windows-10-esu-programm-preise-und-details-a-a31f2b0068104e196ff1d52e4dee20d7/
-
Das Data Privacy Framework allein reicht nicht! – Was Datenschützer bei Microsoft 365 kritisch sehen
First seen on security-insider.de Jump to article: www.security-insider.de/eu-kommission-verstoss-datenschutz-microsoft-365-a-91a5761878506a02d5d421b768084acb/
-
Microsoft finds Kubernetes clusters targeted by OpenMetadata exploits
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/microsoft-finds-kubernetes-clusters-targeted-by-openmetadata-exploits
-
Microsoft teases deepfake AI that’s too good to release
First seen on theregister.com Jump to article: www.theregister.com/2024/04/20/microsoft_deepfake_vasa/
-
US-Behörde CISA verdonnert Admins zur ‘Entschärfung der Cyberrisiken’ der Microsoft Cloud
Die US-Cybersicherheitsbehörde CISA hat die Administratoren von US-Behörden zum 2. April 2024 mittels einer Direktive ultimativ aufgefordert, die Cybe… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/04/12/us-behrde-cisa-verdonnert-admins-zur-entschrfung-der-cyberrisiken-der-microsoft-cloud/
-
Neue Insights zum ungesicherten Microsoft Azure Server mit Bing-Secrets (Code, Scripte, Passwörter)
Kleiner Nachtrag zum aktuellen Sicherheitsvorfall bei Microsoft, wo ein Azure-Server aus dem Bing-Produktbereich wohl ungeschützt per Internet erreich… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/04/12/neue-insights-zum-ungesicherten-microsoft-azure-server-mit-bing-secrets-code-scripte-passwrter/