Tag: office
-
Microsoft’s May 2025 Patch Tuesday Addresses 71 CVEs (CVE-2025-32701, CVE-2025-32706, CVE-2025-30400)
5Critical 66Important 0Moderate 0Low Microsoft addresses 71 CVEs including seven zero-days, five of which were exploited in the wild. Microsoft patched 71 CVEs in its May 2025 Patch Tuesday release, with five rated critical and 66 rated as important. This month’s update includes patches for: .NET, Visual Studio, and Build Tools for Visual Studio Active…
-
Copyright office criticizes AI ‘fair use’ before director’s dismissal
The register of copyrights cast serious doubt on whether AI companies could legally train their models on copyrighted material. The White House fired her the next day. First seen on cyberscoop.com Jump to article: cyberscoop.com/us-copyright-office-ai-report-firing-fair-use-debate/
-
Microsoft Security Update Summary (13. Mai 2025)
Microsoft hat am 13. Mai Sicherheitsupdates für Windows-Clients und -Server, für Office sowie für weitere Produkte veröffentlicht. Die Sicherheitsupdates beseitigen 71 Schwachstellen (CVEs), sieben davon wurden als 0-day klassifiziert. Fünf Schwachstellen wurde bereits angegriffen. Nachfolgend findet sich ein … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/05/13/microsoft-security-update-summary-13-mai-2025/
-
AI copyright suits to be affected by Copyright Office stance
Federal report findings could weaken GenAI vendors’ fair use positions in copyright suits. First seen on techtarget.com Jump to article: www.techtarget.com/searchenterpriseai/news/366623821/AI-copyright-suits-to-be-affected-by-copyright-office-stance
-
Microsoft Patch Tuesday Release Fixes ‘Unusual’ Number Of Office Bugs: Researcher
While the total number of vulnerabilities addressed in the monthly release of Microsoft security updates is modest, there’s a comparatively high number of Office-related bugs fixed in the release, writes Trend Micro’s Dustin Childs. First seen on crn.com Jump to article: www.crn.com/news/security/2025/microsoft-patch-tuesday-release-fixes-unusual-number-of-office-bugs-researcher
-
Microsoft Patch Tuesday May 2025 Released With the Fixes for 72 Flaws With 5 Actively Exploited 0-Day
Microsoft has released its May 2025 Patch Tuesday updates, addressing 72 security vulnerabilities across its software portfolio, including Windows, Microsoft Office, Azure, and Visual Studio. Microsoft patched a total of 72 vulnerabilities, including 29 related to Remote Code Execution, 18 to Elevation of Privilege, 14 to Information Disclosure, 7 to Denial of Service, and 2…
-
Trump Ousts Copyright Chief Amid AI Fair Use Clash
Perlmutter Out After Draft Report Calls Fair Use Into Question for AI Training. The Trump administration fired Shira Perlmutter as Register of Copyrights a day after her office’s report said that artificial intelligence developers’ use of copyrighted works goes beyond established fair-use boundaries. Whether Perlmutter’s firing by Trump is legal is unsettled. First seen on…
-
Microsoft will update Office apps on Windows 10 until 2028
Microsoft has backtracked on its plan to end support for Office apps on Windows 10 later this year and announced that it will continue providing security updates for three more years, until 2028. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-will-update-office-apps-on-windows-10-until-2028/
-
Wenn der Office 365 Outlook-Client lange Zeit keine E-Mails empfängt
Mit den in diesem detaillierten Leitfaden beschriebenen Lösungen können Sie häufige Probleme bei der Outlook-Synchronisierung beheben, z. B. wenn Office 365 Outlook-Clients über einen längeren Zeitraum keine E-Mails empfangen. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/wenn-der-office-365-outlook-client-lange-zeit-keine-e-mails-empfaengt/a40784/
-
US Copyright Office found AI companies sometimes breach copyright. Next day its boss was fired
Some see an action to benefit Elon. The White House sees an agency obsessed with DEI First seen on theregister.com Jump to article: www.theregister.com/2025/05/12/us_copyright_office_ai_copyright/
-
Microsoft 365: Support für Office-Apps unter Windows 10 plötzlich erweitert
Entgegen früheren Angaben will Microsoft Windows-10-Nutzer nun doch noch weiter mit Sicherheitsupdates für Office-Anwendungen versorgen. First seen on golem.de Jump to article: www.golem.de/news/windows-10-support-fuer-microsoft-365-apps-ueberraschend-erweitert-2505-196095.html
-
Windows 10: Support für Microsoft-365-Apps überraschend erweitert
Entgegen früheren Angaben will Microsoft Windows-10-Nutzer nun doch noch weiter mit Sicherheitsupdates für Office-Anwendungen versorgen. First seen on golem.de Jump to article: www.golem.de/news/windows-10-support-fuer-microsoft-365-apps-ueberraschend-erweitert-2505-196095.html
-
Why CISOs Must Prioritize Cybersecurity Culture in Remote Work
In the era of remote and hybrid work, Chief Information Security Officers (CISOs) are now tasked with cultivating a strong cybersecurity culture in remote work, extending far beyond traditional responsibilities like managing firewalls and monitoring networks. The shift to distributed teams has dissolved the traditional office perimeter, exposing organizations to new vulnerabilities and threats. Employees…
-
Germany Shuts Down eXch Over $1.9B Laundering, Seizes Euro34M in Crypto and 8TB of Data
Germany’s Federal Criminal Police Office (aka Bundeskriminalamt or BKA) has seized the online infrastructure and shutdown linked to the eXch cryptocurrency exchange over allegations of money laundering and operating a criminal trading platform.The operation was carried out on April 30, 2025, authorities said, adding they also confiscated 8 terabytes worth of data and cryptocurrency assets…
-
Government will miss cyber resiliency targets, MPs warn
A Public Accounts Committee report on government cyber resilience finds that the Cabinet Office has been working hard to improve, but is likely to miss targets and needs a fundamentally different approach First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366623627/Government-will-miss-cyber-resiliency-targets-MPs-warn
-
‘CISOs sprechen heute die Sprache des Business”
Nick Godfrey, Leiter des Office of the CISO bei Google Cloud Google CloudAls Senior Director und Leiter des Office of the CISO bei Google Cloud ist es die Aufgabe von Nick Godfrey, das Unternehmen beim Austausch zwischen CISOs rund um die Themen Cloud und Security zu unterstützen. Godfrey, selbst ehemaliger Sicherheitsverantwortlicher bei einem Finanzdienstleister, leitet…
-
From Managing Vulnerabilities to Managing Exposure: The Critical Shift You Can’t Ignore
Tags: ai, attack, best-practice, breach, business, cloud, computing, control, cyber, cybersecurity, data, data-breach, endpoint, identity, infrastructure, intelligence, Internet, office, risk, service, software, strategy, technology, threat, tool, vulnerability, vulnerability-managementVulnerability management remains core to reducing cyber risk, but as the attack surface grows, teams need a risk-driven strategy that looks beyond vulnerabilities to see the bigger picture. Discover how exposure management unifies data and prioritizes real exposures, keeping teams proactive and ahead of cyber threats. The limits of siloed security Over the years, the…
-
Microsoft 365 Copilot and Office Apps Now Protected by SafeLinks at Click Time
Microsoft announced a major update aimed at bolstering the cybersecurity of its flagship AI-powered productivity assistant, Microsoft 365 Copilot, and its suite of Office apps. The integration of SafeLinks protection at time-of-click marks a significant step forward in safeguarding users from modern cyber threats. AI is revolutionizing workflows across industries, and Microsoft Copilot is at…
-
US indicts Yemeni man in Black Kingdom ransomware attacks
The U.S. Attorney’s Office for the Central District of California announced charges against Rami Khaled Ahmed for allegedly helping to develop and deploy Black Kingdom, which infected “approximately 1,500 computer systems.” First seen on therecord.media Jump to article: therecord.media/us-indicts-yemeni-man-black-kingdom-ransomware
-
British Library avoids investigation over ransomware attack, praised again for response
The U.K. Information Commissioner’s Office said it will not investigate the British Library over a 2023 ransomware attack. The institution will not face potential monetary penalties or a reprimand. First seen on therecord.media Jump to article: therecord.media/british-library-no-ico-investigation-ransomware-attack
-
Secure by Design is likely dead at CISA. Will the private sector make good on its pledge?
Tags: cisa, cybersecurity, government, office, risk, risk-management, sbom, software, technology, toolCISA’s Secure by Design effort is ‘tiny’: Not everyone believes in the concept of security by design. Jeff Williams, founder and CTO of Contrast Security and creator of the first OWASP Top 10 list in 2002, told CSO that, in his view, the very first secure-by-design manual was the vaunted August 1983 “Orange Book” produced…
-
Exposure Management Works When the CIO and CSO Are in Sync
Tags: access, ai, attack, business, cio, ciso, cloud, control, cyber, cybersecurity, data, data-breach, endpoint, finance, infrastructure, jobs, office, risk, strategy, technology, threat, tool, update, vulnerability, vulnerability-management, zero-dayEach Monday, the Tenable Exposure Management Academy provides the practical, real-world guidance you need to shift from vulnerability management to exposure management. In this post, Tenable CIO Patricia Grant looks at how the CIO/CSO relationship is key to a successful exposure management program. You can read the entire Exposure Management Academy series here. When I…
-
4 big mistakes you’re probably still making in vulnerability management”¦and how to fix them
Tags: attack, automation, business, cloud, cve, data, endpoint, mitigation, office, risk, software, threat, tool, update, vulnerability, vulnerability-managementWhy is it a problem? Monthly, weekly, or even daily scans used to be adequate. Now? They leave blind spots. Cloud resources, remote endpoints, VMs”¦ can spin up and vanish in minutes, and you’ll never catch those with a scan that runs on a schedule.Fix it! Shift to continuous scanning. Use tools that integrate with…
-
Microsoft Office 365 MFA targeted by ‘SessionShark’ phishing kit
First seen on scworld.com Jump to article: www.scworld.com/news/microsoft-office-365-mfa-targeted-by-sessionshark-phishing-kit
-
6 types of risk every organization must manage, and 4 strategies for doing it
Tags: ai, attack, backup, best-practice, breach, business, compliance, control, cyber, cybersecurity, data, finance, framework, fraud, GDPR, governance, government, grc, hacker, healthcare, infrastructure, insurance, intelligence, law, mitigation, office, phishing, ransom, ransomware, regulation, risk, risk-assessment, risk-management, service, startup, strategy, technology, threat, training, vulnerabilityCybersecurity risks Threats such as data breaches, phishing attacks, system intrusions, and broader digital vulnerabilities fall under the umbrella of security risks. The definition of cybersecurity risk is constantly evolving, now encompassing threats related to artificial intelligence and AI-driven systems.If you’re trying to mitigate risks in this area, you need to think not just about…
-
‘SessionShark’ A New Toolkit Bypasses Microsoft Office 365 MFA Security
Tags: 2fa, authentication, cyber, cybercrime, marketplace, mfa, microsoft, office, phishing, service, threatSecurity researchers have uncovered a new and sophisticated threat to Microsoft Office 365 users: a phishing-as-a-service toolkit dubbed “SessionShark O365 2FA/MFA.” Promoted through cybercriminal marketplaces, SessionShark is designed to bypass Microsoft’s multi-factor authentication (MFA) protections”, an alarming escalation in the ongoing battle between defenders and cyber attackers. A Toolkit Purpose-Built to Evade 2FA and MFA…
-
U.S. Secret Service Reveals Ways to Identify Credit Card Skimmers
With credit card skimming crimes escalating nationwide, the U.S. Secret Service’s Washington Field Office is sharing essential tips for the public to protect themselves from this growing threat, shared by Officials in LinkedIn post. According to the agency, credit card skimming involves criminals installing illicit devices to steal card information, has become a “low-risk, high-reward”…
-
‘SessionShark’ ToolKit Evades Microsoft Office 365 MFA
The creators of the toolkit are advertising it as an educational and ethical resource, but what it promises to provide users if purchased indicates it’s anything but. First seen on darkreading.com Jump to article: www.darkreading.com/remote-workforce/sessionshark-toolkit-microsoft-365-steal-tokens