Tag: office
-
Astaroth Phishing Kit Bypasses 2FA Using Reverse Proxy Techniques
Astaroth is an advanced phishing kit using real-time credential and session cookie capture to compromise Gmail, Yahoo and Office 365 accounts First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/astaroth-phishing-kit-bypasses-2fa/
-
Patchday: Microsoft Office Updates (4. und 11. Februar 2025)
Am 11. Februar 2025 (zweiter Dienstag im Monat, Microsoft Patchday) hat Microsoft mehrere sicherheitsrelevante Updates für Microsoft Office 2016, sowie die C2R-Varianten (Office 2016-2021 und 365) und andere Produkte veröffentlicht. Auch zum 4. Februar 2025 wurden Updates freigegeben. Nachfolgend finden … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/02/13/patchday-microsoft-office-updates-11-februar-2025/
-
EFF Leads Fight Against DOGE and Musk’s Access to US Federal Workers’ Data
The Electronic Frontier Foundation has requested a US federal court to block Elon Musk’s DOGE access to US Office of Personnel Management Data First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/eff-lawsuit-us-doge-musk-opm-data/
-
Trump to nominate Sean Cairncross as national cyber director
The president will tap the former RNC insider to lead the White House office that oversees nation’s cybersecurity strategy. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/trump-nominate-cairncross-cyber-director/739940/
-
Trump plans to nominate GOP insider Sean Cairncross as national cyber director
Sean Cairncross, who has held leadership positions in the Republican National Committee and served in the previous Trump administration, is expected to be the president’s nominee to lead the Office of the National Cyber Director (ONCD). First seen on therecord.media Jump to article: therecord.media/sean-cairncross-trump-national-cyber-director-nominee
-
Dringend patchen: Gefährliche Schadcode-Lücken in Excel bedrohen Office-Nutzer
Die Sicherheitslücken betreffen alle gängigen Office-Versionen. Laut Microsoft ist auch das Vorschau-Panel ein möglicher Angriffsvektor. First seen on golem.de Jump to article: www.golem.de/news/microsoft-office-fuenf-excel-luecken-lassen-angreifer-schadcode-ausfuehren-2502-193269.html
-
Microsoft Patch Tuesday security updates for February 2025 ficed 2 actively exploited bugs
Microsoft Patch Tuesday security updates for February 2025 addressed four zero-day flaws, two of which are actively exploited in the wild. Microsoft Patch Tuesday security updates for February 2025 addressed 57 vulnerabilities in Windows and Windows Components, Office and Office Components, Azure, Visual Studio, and Remote Desktop Services. Two of these vulnerabilities are listed as…
-
Microsoft-Patchday: Angreifer attackieren Windows und löschen Daten
Es sind wichtige Sicherheitsupdates für Azure, Office, Windows und Co. erschienen. Es gibt bereits Attacken. Weitere können bevorstehen. First seen on heise.de Jump to article: www.heise.de/news/Patchday-Microsoft-Angreifer-attackieren-Windows-und-loeschen-Daten-10279178.html
-
Microsoft’s February 2025 Patch Tuesday Addresses 55 CVEs (CVE-2025-21418, CVE-2025-21391)
Tags: access, advisory, android, apt, attack, authentication, best-practice, cve, cyber, data, exploit, firmware, flaw, group, Internet, lazarus, linux, malicious, microsoft, network, north-korea, ntlm, office, rce, remote-code-execution, service, technology, tool, update, vulnerability, windows, zero-day3Critical 52Important 0Moderate 0Low Microsoft addresses 55 CVEs with three rated critical and four zero-day vulnerabilities, including two that were exploited in the wild. Microsoft patched 55 CVEs in its February 2025 Patch Tuesday release, with three rated critical and 52 rated as important. Our counts omitted one vulnerability reported by HackerOne. This month’s update…
-
Microsoft Security Update Summary (11. Februar 2025)
Am Microsoft Security Update Summary (11. Februar 2025) hat Microsoft Sicherheitsupdates für Windows-Clients und -Server, für Office sowie für weitere Produkte veröffentlicht. Die Sicherheitsupdates beseitigen 55 Schwachstellen (CVEs), davon drei als kritisch und vier als 0-day klassifiziert. Nachfolgend … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/02/12/microsoft-security-update-summary-11-februar-2025/
-
FBI, Europol, and NCA Take Down 8Base Ransomware Data Leak and Negotiation Sites
Source: The NationA coordinated law enforcement operation has taken down the dark web data leak and negotiation sites associated with the 8Base ransomware gang.Visitors to the data leak site are now greeted with a seizure banner that says: “This hidden site and the criminal content have been seized by the Bavarian State Criminal Police Office…
-
8Base Ransomware Data Leak Sites Seized in International Law Enforcement Operation
Source: The NationA coordinated law enforcement operation has taken down the dark web data leak and negotiation sites associated with the 8Base ransomware gang.Visitors to the data leak site are now greeted with a seizure banner that says: “This hidden site and the criminal content have been seized by the Bavarian State Criminal Police Office…
-
HPE issues breach notifications for 2023 Midnight Blizzard attack
Russian state-sponsored hackers compromised the tech giant’s Office 365 email environment. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/hpe-issues-breach-notifications-for-2023-midnight-blizzard-attack/739674/
-
Experts Dismayed at UK’s Apple Decryption Demands
Security and privacy experts have questioned a new demand from the UK Home Office on Apple’s encrypted iCloud service First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/experts-dismayed-uk-apple/
-
Penetration Testers Arrested During Approved Physical Penetration Testing
Tags: access, breach, control, corporate, cyber, cybersecurity, defense, office, penetration-testingA routine physical penetration test conducted by cybersecurity professionals took an unexpected turn when armed police officers arrested two security experts during a simulated breach of a corporate office in Malta. Physical penetration testing is a critical component of cybersecurity assessments. It evaluates not only technical defenses but also physical access controls and human response…
-
Worker distraction is on the rise. Digital employee experience (DEX) platforms can help
With the dramatic increase in remote work in the last few years, many of us are actually working longer hours, ricocheting between communication platforms, learning new systems on the fly, and struggling to fix our own tech issues.It’s all adding up to a new kind of burnoutIt’s also focusing renewed attention on the digital employee experience…
-
HPE notifies employees of data breach after Russian Office 365 hack
Hewlett Packard Enterprise (HPE) is notifying employees whose data was stolen from the company’s Office 365 email environment by Russian state-sponsored hackers in a May 2023 cyberattack. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hpe-notifies-employees-of-data-breach-after-russian-office-365-hack/
-
UK Home Office silent on alleged Apple backdoor order
Blighty’s latest stab at encryption? A secret order to pry open iCloud, sources claim First seen on theregister.com Jump to article: www.theregister.com/2025/02/07/home_office_apple_backdoor_order/
-
North Korean APT Kimsuky Uses forceCopy Malware to Steal Browser-Stored Credentials
Tags: apt, attack, credentials, email, group, hacking, intelligence, korea, malware, microsoft, north-korea, office, phishing, spear-phishing, windowsThe North Korea-linked nation-state hacking group known as Kimsuky has been observed conducting spear-phishing attacks to deliver an information stealer malware named forceCopy, according to new findings from the AhnLab Security Intelligence Center (ASEC).The attacks commence with phishing emails containing a Windows shortcut (LNK) file that’s disguised as a Microsoft Office or PDF document. First…
-
Top 3 Ransomware Threats Active in 2025
You arrive at the office, power up your system, and panic sets in. Every file is locked, and every system is frozen. A ransom demand flashes on your screen: “Pay $2 million in Bitcoin within 48 hours or lose everything.”And the worst part is that even after paying, there’s no guarantee you’ll get your data…
-
OPM asks judge to dismiss federal workers’ lawsuit, files privacy assessment of email system
The Trump administration’s Office of Personnel Management wants a federal court to drop a lawsuit that alleges the agency illegally set up a new email server to sent government-wide messages. First seen on therecord.media Jump to article: therecord.media/opm-asks-judge-to-dismiss-email-lawsuit-files-pia
-
Youth activists protest Meta over mental health impacts
Protest outside Meta’s London offices marks launch of Mad Youth Campaign, an effort by activists to challenge the ways in which corporate power negatively shapes the conditions young people live under First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366618873/Youth-activists-protest-Meta-over-mental-health-impacts
-
Musk’s DOGE effort could spread malware, expose US systems to threat actors
Tags: access, ai, api, attack, authentication, ceo, cio, computer, computing, control, cyber, cybercrime, cybersecurity, data, defense, email, exploit, governance, government, hacking, infection, infosec, international, jobs, malicious, malware, network, office, privacy, ransomware, risk, service, technology, threat, toolOver the past 10 days, an astonishing series of actions by Elon Musk via his Department of Government Efficiency (DOGE) project has elevated the cybersecurity risk of some of the most sensitive computing systems in the US government. Musk and his team of young, inexperienced engineers, at least one of whom is not a US…
-
What 2025 HIPAA Changes Mean to You
Tags: access, application-security, authentication, breach, business, cloud, compliance, control, cybersecurity, data, encryption, healthcare, HIPAA, identity, incident response, insurance, law, mfa, monitoring, nist, office, penetration-testing, privacy, risk, risk-analysis, service, strategy, threat, tool, vulnerabilityWhat 2025 HIPAA Changes Mean to You madhav Tue, 02/04/2025 – 04:49 Thales comprehensive Data Security Platform helps you be compliant with 2025 HIPAA changes. You are going about your normal day, following routine process at your healthcare organization, following the same business process you’ve followed for the last twelve years. You expect Personal Health…
-
When Checks and Balances Fail: The State’s Role in Preserving Constitutional Order
Today, my Senator, Susan Collins, failed in her oath and duty to uphold the Constitution. She voted for the appointment of a traitor to head national intelligence, and is supporting someone for director of the Office of Management and Budget (OMB) who openly wants to dismantle the foundations of American government. She has… First seen…
-
As DOGE teams plug into federal networks, cybersecurity risks could be huge, experts say
Little is known about how workers on Elon Musk’s federal government technology team are accessing sensitive systems at the Office of Personnel Management, the Treasury Department and elsewhere. Experts are warning of potentially massive cybersecurity risks. First seen on therecord.media Jump to article: therecord.media/doge-opm-treasury-cybersecurity
-
Nach Preiserhöhung: Microsoft entfernt VPN-Feature aus Office
Das Windows-Defender-VPN kann von Microsoft-365-Abonnenten kostenlos genutzt werden. Damit ist in Kürze Schluss. First seen on golem.de Jump to article: www.golem.de/news/nach-preiserhoehung-microsoft-entfernt-vpn-feature-aus-office-2502-192995.html
-
APT37 Hackers Exploit Group Chats to Deliver Malicious LNK Files
In 2024, South Korea witnessed an alarming surge in Advanced Persistent Threat (APT) attacks, with the state-sponsored APT37 group emerging as a significant threat actor. Leveraging sophisticated techniques, the group targeted individuals and organizations through malicious Hancom Office HWP documents and LNK files distributed via K Messenger group chats. These attacks primarily aimed to evade…
-
Dell ends hybrid work policy, demands returnoffice despite remote work pledge
That email chain could have been a 30-second chit-chat, says IT giant First seen on theregister.com Jump to article: www.theregister.com/2025/01/31/dell_ends_hybrid_work_policy/