Tag: office
-
WatchGuard patches ‘critical’ VPN flaw in firewalls that could lead to compromise
Who is affected?: A list of the nearly three dozen firewall models affected by CVE-2025-9242 is available from WatchGuard’s website. The vulnerable versions of the Fireware OS are 2025.1, 12.x, 12.5.x (T15 & T35 models), 12.3.1 (FIPS-certified release), and 11.x (end of life). These are addressed (in the same order) by updating to versions 2025.1.1,…
-
Supportende für Windows 10 und Office 2016/2019 im Oktober 2025 Teil 1
Kurzer Hinweis für Benutzer von Windows 10 22H2 und Microsoft Office 2016 sowie Microsoft Office 2019. Microsoft hat kürzlich daran erinnert, dass der Support dieser Produkte zum 14. Oktober 2025 endet. An diesem Datum wird es letztmalig Sicherheitsupdates für Windows … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/09/18/supportende-fuer-windows-10-und-office-2016-2019-im-oktober-2025/
-
Office 2016 and 2019 face October 14 execution date
The Microsoft Axman Cometh First seen on theregister.com Jump to article: www.theregister.com/2025/09/16/office_2019_2016_support/
-
What’s Old Is New Again as Iranian Hackers Exploit Macros
MuddyWater Also Embraces Bulletproof Hosts and Custom Malware. The Iranian nation-state cyberespionage group MuddyWater is going back to the future with attacks featuring Microsoft Office documents with malicious macros. It is also shifting to homegrown malware in place of commercial remote monitoring and management tools, said researchers. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/whats-old-new-again-as-iranian-hackers-exploit-macros-a-29465
-
Insider Threats in Remote Work
Nisos Insider Threats in Remote Work Insider threat teams know the ground has shifted. The tools and assumptions designed for an office-centric world don’t translate to a workforce spread across homes… First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/insider-threats-in-remote-work/
-
Microsoft scores win against Office 365 credential thieves
Microsoft’s Digital Crimes Unit disrupts a major phishing-as-a-service operation that targeted and stole Office 365 usernames and credentials First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366631473/Microsoft-scores-win-against-Office-365-credential-thieves
-
Office 2016 and Office 2019 reach end of support next month
Microsoft reminded customers again this week that Office 2016 and Office 2019 will reach the end of extended support in less than 30 days, on October 14, 2025. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-office-2016-and-office-2019-reach-end-of-support-next-month/
-
Rethinking AI Data Security: A Buyer’s Guide
Generative AI has gone from a curiosity to a cornerstone of enterprise productivity in just a few short years. From copilots embedded in office suites to dedicated large language model (LLM) platforms, employees now rely on these tools to code, analyze, draft, and decide. But for CISOs and security architects, the very speed of adoption…
-
Industrie 4.0: Wie OT-Segmentierung kritische Produktionsinfrastrukturen vor Cyberangriffen schützt
Die zunehmende Digitalisierung und Vernetzung von Produktionsanlagen erweitert die Angriffsfläche für Cyberkriminelle: Einmal im System, kann sich ein Hacker durch das gesamte Netzwerk arbeiten mit verheerenden Folgen für die Produktion. OT-Segmentierung schafft Abhilfe. Ein Cyberangriff, eine kompromittierte Office-IT und kurz darauf steht die Produktion still. Dieser Ketteneffekt wird für Industrieunternehmen zunehmend zur… First seen on…
-
Microsoft rolls out Copilot Chat to Microsoft 365 Office apps
Microsoft is rolling out Copilot Chat to Word, Excel, PowerPoint, Outlook, and OneNote for paying Microsoft 365 business customers. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-rolls-out-copilot-chat-to-microsoft-365-office-apps/
-
Borncity als bösartig eingestuft false Alarm?
Kurze Information in eigener Sache. Mich erreichte die Information eines Blog-Lesers, dass borncity.com/blog/ vom Microsoft Defender for Office “als bösartig” eingestuft werde. Nach meinem bisherige Wissen und durchgeführten Scans ist das schlicht ein falscher Alarm. Gut, aus Microsofts Sicht könnten … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/09/15/borncity-als-boesartig-eingestuft-false-alarm/
-
UK ICO finds students behind majority of school data breaches
UK ICO reports students caused over half of school data breaches, showing kids are shaping cybersecurity in unexpected ways. The UK Information Commissioner’s Office (ICO), students were responsible for most of the data breaches suffered by the schools in the country. The U.K.’s independent regulator for data protection and information rights also reported that nearly…
-
GAO Report Spotlights Unaddressed HHS Cyber, IT Concerns
82 Longstanding Recommendations on Data Protection, Security Still Not Acted Upon. The U.S. Department of Health and Human Services has still not implemented 82 recommendations made in recent years involving high risk cybersecurity and IT management issues, said the Government Accountability Office in a new report directed at HHS’ CIO and its various agency CIOs.…
-
Cybersecurity Snapshot: Security Lags Cloud and AI Adoption, Tenable Report Finds, as CISA Lays Out Vision for CVE Program’s Future
Tags: access, ai, api, attack, automation, best-practice, breach, bug-bounty, business, cisa, cloud, communications, computer, control, cve, cyber, cybersecurity, data, data-breach, defense, encryption, exploit, framework, google, governance, government, identity, infrastructure, intelligence, international, Internet, linkedin, mitre, network, nist, office, open-source, privacy, programming, RedTeam, resilience, risk, risk-management, service, skills, software, strategy, tactics, technology, threat, tool, update, vulnerabilityCheck out Tenable’s report detailing challenges and best practices for cloud and AI security. Plus, CISA rolled out a roadmap for the CVE Program, while NIST updated its guidelines for secure software patches. And get the latest on TLS/SSL security and AI attack disclosures! Here are five things you need to know for the week…
-
Microsoft’s Patch Tuesday: About 80 Vulnerabilities Patched
An elevation of privilege vulnerability in the Windows NTLM authentication protocol and a flaw in Office’s Preview Pain are among the most important to patch. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-microsoft-patch-tuesday-september-2025/
-
Microsoft’s Patch Tuesday: About 80 Vulnerabilities Patched
An elevation of privilege vulnerability in the Windows NTLM authentication protocol and a flaw in Office’s Preview Pain are among the most important to patch. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-microsoft-patch-tuesday-september-2025/
-
Microsoft’s September Security Update High-Risk Vulnerability Notice for Multiple Products
Overview On September 10, NSFOCUS CERT detected that Microsoft released the September Security Update patch, fixing 86 security issues involving widely used products such as Windows, Microsoft Office, Azure, and Microsoft SQL Server, including high-risk vulnerability types such as privilege escalation and remote code execution. Among the vulnerabilities fixed by Microsoft’s monthly update this month,…The…
-
UK Home Office dangles £1.3M prize for algorithm that guesses your age
Tags: officeContract tender follows ‘alarming’ safeguarding failure at border with undocumented kids First seen on theregister.com Jump to article: www.theregister.com/2025/09/09/home_office_age_algorithm/
-
Patchday: Microsoft Office Updates (9. September 2025)
Am 9. September 2025 (zweiter Dienstag im Monat, Microsoft Patchday) hat Microsoft mehrere sicherheitsrelevante Updates für Microsoft Office 2016, sowie die C2R-Varianten (Office 2016-2021 und 365) und andere Produkte veröffentlicht. Diesen Monat wurden gravierende Schwachstellen in Office geschlossen. Nachfolgend finden … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/09/11/patchday-microsoft-office-updates-9-september-2025/
-
Microsoft Security Update Summary (9. September 2025)
Microsoft hat am 9. September 2025 Sicherheitsupdates für Windows-Clients und -Server, für Office sowie für weitere Produkte veröffentlicht. Die Sicherheitsupdates beseitigen 81 Schwachstellen (CVEs), acht kritisch, zwei davon wurden als 0-day klassifiziert und sind öffentlich bekannt. Nachfolgend findet … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/09/10/microsoft-security-update-summary-9-september-2025/
-
Microserfs ordered back to the office, given 10 days to appeal
Tags: officeIf you’re within 50 miles of Redmond, then it’s time to come in First seen on theregister.com Jump to article: www.theregister.com/2025/09/09/microsoft_return_to_work/
-
Microsoft Patch Tuesday security updates for September 2025 fixed two zero-day flaws
Microsoft Patch Tuesday security updates for September 2025 fixed 80 vulnerabilities, including two publicly disclosed zero-day flaws. Microsoft Patch Tuesday security updates for September 2025 addressed 80 vulnerabilities in Windows and Windows Components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, Hyper-V, SQL Server, Defender Firewall Service, and Xbox (yup Xbox!). Eight of the […]…
-
Microsoft Patch Tuesday security updates for September 2025 fixed two zero-day flaws
Microsoft Patch Tuesday security updates for September 2025 fixed 80 vulnerabilities, including two publicly disclosed zero-day flaws. Microsoft Patch Tuesday security updates for September 2025 addressed 80 vulnerabilities in Windows and Windows Components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, Hyper-V, SQL Server, Defender Firewall Service, and Xbox (yup Xbox!). Eight of the […]…
-
U.S. Cracks Down on Scam Networks in Southeast Asia Draining Billions
In a sweeping effort to curb transnational cybercrime and human rights abuses, the U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) today imposed sanctions on a sprawling network of scam centers operating in Southeast Asia. These centers, which exploit forced labor and violence, defrauded Americans of more than $10 billion in 2024.…
-
Red Hat back-office team to be Big and Blue whether they like it or not
Legal, HR, Finance and Accounting moving to IBM from 2026. Engineering and others staying put… for now First seen on theregister.com Jump to article: www.theregister.com/2025/09/08/red_hatters_to_be_big/
-
ICYMI: Exposure Management Academy on Attack Surface Management, Proactive Security and More
Tags: ai, attack, best-practice, business, cio, cloud, cybersecurity, data, data-breach, group, Internet, jobs, office, risk, skills, technology, threat, update, vulnerability, vulnerability-management, zero-dayEach Monday, the Tenable Exposure Management Academy provides the practical, real-world guidance you need to shift from vulnerability management to exposure management. In this post, we look back on the guidance and best practices shared in the past several months. You can read the entire Exposure Management Academy series here. Let’s look back at key…
-
ICYMI: Exposure Management Academy on Attack Surface Management, Proactive Security and More
Tags: ai, attack, best-practice, business, cio, cloud, cybersecurity, data, data-breach, group, Internet, jobs, office, risk, skills, technology, threat, update, vulnerability, vulnerability-management, zero-dayEach Monday, the Tenable Exposure Management Academy provides the practical, real-world guidance you need to shift from vulnerability management to exposure management. In this post, we look back on the guidance and best practices shared in the past several months. You can read the entire Exposure Management Academy series here. Let’s look back at key…
-
Pennsylvania Attorney General’s Office Recovers from Ransomware Attack
The Pennsylvania Attorney General’s Office is actively recovering from a ransomware attack that disrupted its operations nearly two weeks ago. The cyberattack, which first came to light on August 18, targeted the agency’s email systems, phone lines, and even brought down its website. State Attorney General Dave Sunday confirmed the breach and stated that progress…