Tag: office
-
Security Threats Don’t Stop at the Office: Why Executives’ Families Need Training, Too
Those closest to executives must match their security postures because the weakest link in a family can become the entry point for attacks. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/security-threats-don-t-stop-at-the-office-why-executives-families-need-training-too
-
Security Threats Don’t Stop at the Office: Why Executives’ Families Need Training Too
Those closest to executives must match their security postures because the weakest link in a family becomes the entry point for attacks. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/security-threats-don-t-stop-at-the-office-why-executives-families-need-training-too
-
AI model developers have ‘no justification’ for failing to comply with privacy law
Large language models must have lawful basis for processing personal data ‘benefiting humanity’ is not enough, says Information Commissioner’s Office First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366652004/AI-model-developers-have-no-justification-for-failing-to-comply-with-privacy-law
-
Major AI Firms Pledge Data Protection Changes Following UK Privacy Watchdog Push
Ten leading AI firms have committed to make data protection improvements following a call for evidence by the UK’s Information Commissioner’s Office First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ai-firms-pledge-data-protection/
-
October 2026 Patch Tuesday forecast: Time for an Office cleanup
September 2026 Patch Tuesday set an all-time record with 973 CVEs addressed across the Microsoft portfolio. We’re only four months into the Patch Apocalypse and everyone seems … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/09/october-2026-patch-tuesday-forecast/
-
Europol and US Spending Watchdog Sound the Alarm Over Quantum Threats
Europol and US Government Accountability Office urge faster transition to post-quantum cryptography First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/europol-us-gao-alarm-quantum/
-
Europol and US GAO Sound the Alarm Over Quantum Threats
Europol and US Government Accountability Office urge faster transition to post-quantum cryptography First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/europol-us-gao-alarm-quantum/
-
LUNEXSTEALER Gives Hackers Remote Control of Browsers Through Malicious Chrome Extension
A campaign that uses more than 100 compromised websites to distribute LUNEXSTEALER, a Windows infostealer that installs a browser extension giving attackers remote control. The extension, LUNARAXE, masquerades as “Microsoft Office Word Editor” inside Chromium-based browsers. Beyond stealing cookies, browsing history, and credentials entered into forms, it enables operators to execute JavaScript within webpages, manipulate…
-
Tenant isolation becomes a buying criterion as FusionAuth opens UK office
Customer identity and access management (CIAM) provider FusionAuth has established its first dedicated European sales team, based in the UK, as enterprises across the region push for tighter control over where identity data lives and how it is isolated. The Colorado-based company said its European annual recurring revenue (ARR) has grown 72% over the past…
-
Single mother faces removal from UK over eVisa and admin errors
Tags: officeA malfunctioning electronic visa status and administrative errors on the part of the Home Office have left a single mother and her son facing removal from the UK, despite her proactive efforts to legally secure a new visa First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366651524/Single-mother-faces-removal-from-UK-over-eVisa-and-admin-errors
-
Tren de Aragua ATM Jackpotting Network Linked to $40.7 Million in U.S. Losses
The U.S. Treasury Department has sanctioned a Tren de Aragua (TdA)-linked financial network accused of using malware-driven ATM jackpotting attacks to steal an estimated $40.73 million from U.S. financial institutions. The September 30 action adds eight individuals, two Mexico-based companies, and seven TRON cryptocurrency addresses to the Office of Foreign Assets Control’s (OFAC) Specially Designated…
-
US sanctions 10 over ATM malware scheme tied to Tren de Aragua
Treasury’s Office of Foreign Assets Control (OFAC) targeted multiple Venezuelan nationals and several companies they control that are part of the effort to launder the money stolen from dozens of ATMs. First seen on therecord.media Jump to article: therecord.media/us-sanctions-10-atm-jackpotting-tren-de-aragua
-
Claude Sonnet 5.5 gets faster without a price hike
Anthropic has released Claude Sonnet 5.5, an AI model for coding and office work. The company says it responds more than 30% faster than its predecessor and uses fewer tokens … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/09/29/anthropic-claude-sonnet-5-5/
-
Microsoft pauses KB5002907 update after Office license deactivations
Microsoft has paused the rollout of the KB5002907 Microsoft 365 update after users report that it deactivated, or in some cases completely removed, perpetual Office 2016 and Office 2019 installations. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-365-kb5002907-update-paused-after-office-license-deactivations/
-
SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild
Tags: cve, cybersecurity, exploit, flaw, infrastructure, injection, kev, microsoft, office, rce, remote-code-execution, vulnerabilityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Microsoft SharePoint and Mikrotik RouterOS to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.The vulnerabilities in question are as follows – CVE-2026-65660 (CVSS score: 8.8) – A code injection vulnerability in Microsoft Office SharePoint First seen on…
-
Microsoft fixes broken Excel copy and paste for all Office users
Microsoft has fixed a known issue that causes copy-and-paste failures for Excel users after installing the September 2026 security updates. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-fixes-broken-excel-copy-and-paste-for-all-office-users/
-
Home Office challenged on ‘farcical’ secrecy over Apple ‘backdoor’ order
UK government argues that national security would be damaged if it departs from ‘neither confirm nor deny policy’ on Apple ‘backdoor’ notice First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366650612/Home-Office-challenged-on-farcical-secrecy-over-Apple-backdoor-order
-
FBI Seizes NightmareStresser DDoSHire Domains Used in Hundreds of Thousands of Attacks
The FBI has seized internet domains linked to NightmareStresser, a long-standing distributed denial-of-service (DDoS)-for-hire platform allegedly used to launch hundreds of thousands of attacks or attempted attacks worldwide since 2022. The U.S. Attorney’s Office for the District of Alaska announced the action, which targets the infrastructure that allowed paying customers to overwhelm victims’ networks and…
-
New York Seizes a Dozen Celebrity Deepfake Websites
In the biggest-ever legal action against harmful deepfake websites, the Manhattan District Attorney’s Office has seized 12 sites that collectively targeted around 1,200 victims. First seen on wired.com Jump to article: www.wired.com/story/new-york-seizes-a-dozen-celebrity-deepfake-websites/
-
Cybersecurity Leaders to Watch in London: Securing Britain’s Business Capital
London hosts the head offices of insurers, payment providers, publishers, industrial groups, and consumer brands, each operating under a regulatory environment shaped by GDPR, NIS2, FCA supervision, and the UK’s evolving cyber resilience legislation. The security leaders below have built… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/cybersecurity-leaders-to-watch-in-london-securing-britains-business-capital/
-
Microsoft Excel KB5002914 update breaks copy and paste for some users
Microsoft Excel users report that this week’s KB5002914 Office security update is breaking copy-and-paste operations and formula dragging, with affected users saying that removing or rolling back the update restores normal functionality. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-excel-kb5002914-update-breaks-copy-and-paste-for-some-users/
-
Nutzerbeschwerden: Kopierfunktion in Excel nach Office-Update kaputt
Im Netz häufen sich Beschwerden von Nutzern, die in Excel nicht mehr kopieren können. Ursache scheint ein Bug im neuen Microsoft-Office-Update zu sein. First seen on golem.de Jump to article: www.golem.de/news/nutzerbeschwerden-kopierfunktion-in-excel-nach-office-update-kaputt-2609-212865.html
-
Microsoft Fixes 974 CVEs in Record Patch Tuesday Release
Microsoft fixed a record 974 CVEs for September’s Patch Tuesday, including two actively exploited Windows flaws. Most of the vulnerabilities addressed in the September release affect Windows, but the update also covers Office, SQL Server, Exchange Server, SharePoint Server, Azure and developer tools. Microsoft urged customers to apply the updates quickly and specifically called out..…
-
San Francisco Orders Meta to Stop ‘Allowing’ AI Child Abuse Ads
The City Attorney’s Office has asked Meta to explain how the harmful ads repeatedly ran on Facebook and Instagram. The company claims the ads are not under the city’s jurisdiction. First seen on wired.com Jump to article: www.wired.com/story/san-francisco-orders-meta-to-stop-allowing-ai-child-abuse-ads/
-
Switzerland Builds Open-Source Workplace Platform to Operate Alongside Microsoft 365
Switzerland’s Federal Chancellery is advancing a sovereign digital workplace initiative following a feasibility study that demonstrated how open-source collaboration and office software can effectively support essential workflows within the federal administration. This initiative, announced to the Federal Council on September 2, aims to establish an open-source workplace platform that will operate alongside Microsoft 365 without…
-
Microsoft Finds ASCII Smuggling Repurposed for Phishing Campaign
Attackers have adapted a technique popularized in AI prompt injection research for a high-volume phishing campaign, using invisible Unicode characters to evade email filtering, Microsoft researchers reported Thursday. The finding came from Microsoft Defender for Office 365 prompt injection protection research. A hunting signature built to detect ASCII smuggling in email recorded a surge beginning..…
-
Kentucky Appellate Court Data Caught in Multi-State Cyber Data Breach
The Kentucky Administrative Office of the Courts (AOC) has confirmed that Kentucky Appellate Court data was compromised in a cybersecurity breach traced to a third-party vendor. West Publishing Corporation, operating as Thomson Reuters Court Management Solutions (Thomson Reuters CMS), informed the AOC that the incident originated within file systems tied to its C-Track case management…
-
CrowdStrike Falcon Zero-Day Lets Attackers Escalate Privileges on Windows Systems
A recently released proof-of-concept, named FalconFlank, claims to reveal a local privilege escalation vulnerability in the CrowdStrike Falcon Sensor on Windows. CrowdStrike is actively investigating these claims and has advised customers to turn off the Microsoft Office File Suspicious Macro Removal policy while the assessment is ongoing. CrowdStrike Falcon Zero-Day The project was published on…
-
Breach Roundup: FBI Probes Sale of 153 Million Driver’s Licenses
Also, Dropbox Accounts Breached, BGP Hijack Compromises Virtualizor Servers. This week: a massive breach of U.S. driver’s licenses, Dropbox accounts breached, a BGP hijack, Artifactory flaw, Russian national indicted, Aesto health breach, a new U.S. Coast Guard cybersecurity policy office, Morocco denied a security breach and a Brazilian illicit marketplace. First seen on govinfosecurity.com Jump…
-
Breach Roundup: FBI Probes Sale of 153 Million Driver’s Licenses
Also, Dropbox Accounts Breached, BGP Hijack Compromises Virtualizor Servers. This week: a massive breach of U.S. driver’s licenses, Dropbox accounts breached, a BGP hijack, Artifactory flaw, Russian national indicted, Aesto health breach, a new U.S. Coast Guard cybersecurity policy office, Morocco denied a security breach and a Brazilian illicit marketplace. First seen on govinfosecurity.com Jump…