| Date | Title | Description |
| Sign up to see | Sign up to see | Sign up to see |
| Oct 28, 2022 | Inside Microsoft’s security threat landscape (and how you can protect your company) | Register now for your free virtual pass to the Low-Code/No-Code Summit this November 9. Hear from executives from Service Now, Credit Karma, Stitch Fix, Appian, and more. Learn more.
Throughout the past few years, Microsoft has faced a slew... |
| Oct 21, 2022 | Microsoft Under Fire After Leaking 2.4TB of Data From Customers Including Contracts, Emails, and More | Joseph Henry, Tech Times 21 October 2022, 08:10 am
Microsoft has reportedly leaked a massive amount of sensitive customer data which was traced from 2017. Critics said that the tech giant has failed to notify the affected users about this c... |
| Oct 21, 2022 | ТОП-3 ИБ-событий недели по версии Jet CSIRT | Новый бэкдор PowerShell маскируется под обновления Windows
Исследовательская группа SafeBreach Labs обнаружила бэкдор PowerShell, который скрывается как часть процесса обновления Windows. Атака начинается с вредоносного документа Word «Appl... |
| Oct 20, 2022 | Утечка в Microsoft затронула 65 тысяч компаний по всему миру | Отдел новостей 20 октября 2022, 16:58 Утечка в Microsoft затронула 65 тысяч компаний по всему миру
Microsoft сообщила об утечке конфиденциальных данных некоторых клиентов. Из-за неправильно настроенного сервера компании информация некоторое... |
| Oct 20, 2022 | Microsoft leaked 2.4TB of data belonging to sensitive customer. Critics are furious | Enlarge
Getty Images reader comments 38 with 35 posters participating
Share this story
Share on Facebook
Share on Twitter
Share on Reddit
Microsoft is facing criticism for the way it disclosed a recent security lapse that exposed what a sec... |
| Oct 20, 2022 | Microsoft подтвердила инцидент с утечкой данных клиентов из-за неправильно сконфигурированных у себя серверов Azure | Microsoft подтвердила инцидент с утечкой данных клиентов из-за неправильно сконфигурированных на своей стороне серверов облачной системы Azure. Проблема затронула 65 тыс. организаций из 111 стран мира. В открытом доступе оказались данные 54... |
| Oct 20, 2022 | Microsoft is annoyed with security firm that discovered misconfigured server exposing sensitive customer data | Microsoft has admitted that the sensitive data of thousands of customers was exposed last month because of a "misconfigured Microsoft endpoint". The data includes names, email addresses, the content of emails and attachments relat... |
| Oct 20, 2022 | Microsoft server misconfiguration makes customer emails and contact information public | Microsoft on Wednesday disclosed details of a server misconfiguration that may have compromised some potential customers' data in September.
The Microsoft Security Response Center (MSRC) revealed in an online post that security researc... |
| Oct 20, 2022 | Microsoft Admits Data Breach but Blasts Group That Reported It | Microsoft has confirmed that sensitive information pertaining to customers may have been exposed due to a misconfigured server. However, it has strongly disputed the claims made by the group that reported it.
While weak account credentials ... |
| Oct 14, 2022 | April is the end of Exchange 2013: Here’s what you need to know | Image: PhotoGranary/Adobe Stock
When it came out, Exchange Server 2013 removed a lot of deployment complexity. It could scale from a single server to the millions of mailboxes in Office 365.
It also had better administration tools, includin... |
| Oct 13, 2022 | Microsoft launches new security update notification RSS feed | RSS feeds may not be as popular as they used to be, but for some things they are one of the most efficient and useful means of keeping updated.
Microsoft is aware of this and, having listened to feedback from customers, has launched a new R... |
| Oct 7, 2022 | ТОП-3 ИБ-событий недели по версии Jet CSIRT | Компания Microsoft обновила меры защиты от эксплуатации уязвимости ProxyNotShell
Microsoft опубликовала защитные меры от двух новых уязвимостей нулевого дня Microsoft Exchange — CVE-2022-41040 и CVE-2022-41082. Одним из вариантов защиты ста... |
| Oct 4, 2022 | Microsoft's mitigation for preventing Exchange Server zero-day exploits can be bypassed | Microsoft announced last week that it was aware of limited targeted attacks that exploited two zero-day vulnerabilities affecting its Exchange Server software.
At the time, the company also published mitigations for the two vulnerabilities ... |
| Oct 3, 2022 | Security Week 2240: новая уязвимость zero-day в Microsoft Exchange | На прошлой неделе стало известно о кибератаке, в которой используется новая уязвимость в почтовом сервере Microsoft Exchange. Через два дня после публикации вьетнамской компании GTSC корпорация Microsoft признала наличие проблемы. По факту ... |
| Oct 1, 2022 | New Microsoft Security Alert: State-Sponsored 0Day Exchange Server Attacks Confirmed | Microsoft Exchange Server users should apply mitigations as attacks beginGetty Images |
| Sep 30, 2022 | High-severity Microsoft Exchange 0-day under attack threatens 220,000 servers | Enlarge
Getty Images reader comments 37 with 31 posters participating
Share this story
Share on Facebook
Share on Twitter
Share on Reddit
Microsoft late Thursday confirmed the existence of two critical vulnerabilities in its Exchange applic... |
| Sep 30, 2022 | Microsoft says two new Exchange zero-day bugs under active attack, but no immediate fix | Microsoft has confirmed two unpatched Exchange Server zero-day vulnerabilities are being exploited by cybercriminals in real-world attacks.
Vietnamese cybersecurity company GTSC, which first discovered the flaws as part of its response to a... |
| Sep 30, 2022 | Microsoft confirms two actively exploited zero-day vulnerabilities in Exchange Server | Microsoft has issued a security notice about two zero-day vulnerabilities with its own Microsoft Exchange Server. Versions 2013, 2016 and 2019 of the software are affected.
One vulnerability (CVE-2022-41082) allows for remote code execution... |
| Aug 15, 2022 | За обнаруженные уязвимости Microsoft за год выплатила $13,7 млн 335 белым хакерам | В рамках 17 программ по поиску уязвимостей в программных продуктах и сервисах Microsoft выплатила $13,7 млн. Программы вознаграждений стимулируют исследования в сфере информационной безопасности, а также позволяют противодействовать новым т... |
| Aug 10, 2022 | Patch Wednesday fixes two-year-old Dogwalk vulnerability | Microsoft has fixed a remote code execution vulnerability in its MSDT diagnostics tool for Windows, first reported to the company two years ago and rediscovered in May this year.
The fix is part of this month's Patch Wednesday, and was... |
| Jun 15, 2022 | Botched and silent patches from Microsoft put customers at risk, critics say | Enlarge
Drew Angerer | Getty Images reader comments 80 with 55 posters participating
Share this story
Share on Facebook
Share on Twitter
Share on Reddit
Blame is mounting on Microsoft for what critics say is a lack of transparency and adequ... |
| Jun 15, 2022 | Microsoft выпустила патч для Windows 10 и 11 против критической уязвимости нулевого дня в MS Office | В рамках июньского вторника патчей безопасности Microsoft выпустила обновления для Windows 10 и 11 против критической уязвимости нулевого дня в MS Office CVE-2022-30190.
Microsoft настоятельно советует всем корпоративным пользователям устан... |
| Jun 14, 2022 | Follina flaw being exploited by Russian hackers, info stealers | The Ukrainian Computer Emergency Response Team (CERT-UA) has warned of threat actors exploiting the Follina vulnerability in Microsoft Office to attack media organisations in the country.
On its website CERT-UA says (translated) it "re... |
| Jun 8, 2022 | Windows Security Alert As 2 Zero-Day Threats Confirmed, 1 With Attacks Underway | Microsoft Windows users are urged to protect themselves against two zero-day threats getty |
| Jun 6, 2022 | Security Week 2223: уязвимости в Windows и Atlassian Confluence | Важной новостью прошлой недели стало обнародование информации об уязвимости нулевого дня в подсистеме Microsoft Support Diagnostic Protocol в ОС Windows. Уязвимость, получившая идентификатор CVE-2022-30190 и неофициальное название Follina, ... |
| Jun 4, 2022 | An actively exploited Microsoft 0-day flaw still doesn’t have a patch | Enlarge
mturhanlar | Getty Images reader comments 18 with 17 posters participating
Share this story
Share on Facebook
Share on Twitter
Share on Reddit
Further ReadingCode execution 0-day in Windows has been under active exploit for 7 weeksR... |
| Jun 2, 2022 | Chinese hackers exploiting a new vulnerability in Microsoft Office | Sohini Bagchi 2 Jun, 2022
A month after a new vulnerability was discovered in Windows and Windows Server, which Microsoft reportedly snubbed as “not a security related issue,” the tech giant has now publicly acknowledged that the vulnerabil... |
| Jun 2, 2022 | Hackers have found a new way to take over your computer using Microsoft Office — here’s what you can do to stay safe | Microsoft Confirms ‘Follina’ vulnerability in Microsoft Office
Researchers suggest that the Follina zero-day vulnerability has also impacted Office 2013 version.
Instead of a security patch, Microsoft has released guidance to cope with Foll... |
| Jun 1, 2022 | Hackers can now take over your computer through Microsoft Word | A new zero-day vulnerability in Microsoft Office could potentially allow hackers to take control of your computer. The vulnerability can be exploited even if you don’t actually open an infected file.
Although we’re still waiting for an offi... |
| Jun 1, 2022 | Suspected Chinese threat group seen attacking Microsoft Office Follina flaw | Suspected Chinese threat actors have been observed by security researchers attacking the Microsoft Office zero-day flaw 'Follina', which was widely publicised this week.
Researchers at security vendor Proofpoint said in a tweet th... |
| Jun 1, 2022 | China-backed hackers are exploiting unpatched Microsoft zero-day | China-backed hackers are exploiting an unpatched Microsoft Office zero-day vulnerability, known as “Follina”, to execute malicious code remotely on Windows systems.
The high-severity vulnerability – tracked as CVE-2022-30190 – is being used... |
| May 31, 2022 | Code execution 0-day in Windows has been under active exploit for 7 weeks | Enlarge
Getty Images reader comments 29 with 25 posters participating, including story author
Share this story
Share on Facebook
Share on Twitter
Share on Reddit
A critical code execution zero-day in all supported versions of Windows has be... |
| May 31, 2022 | Microsoft раскрыла детали уязвимости нулевого дня в MS Office и дала рекомендации IT-специалистам по защите от эксплойта | 30 мая Microsoft раскрыла детали уязвимости нулевого дня во всех версиях локального и облачного офисного пакета MS Office, также дала рекомендации IT-специалистам по защите от эксплойта, который доступен в сети некоторое время.
Microsoft за... |
| May 31, 2022 | Microsoft Office zero-day flaw 'Follina' uncovered by researchers | Cybersecurity researchers have uncovered a new zero-day vulnerability in Microsoft Office.
The flaw allows attackers to execute arbitrary code via the Microsoft Support Diagnostic Tool (MSDT). All it takes to exploit the vulnerability is fo... |
| May 31, 2022 | Microsoft reveals workaround for Office zero-day vulnerability that can be used to launch malicious PowerShell commands | While Microsoft may be quick to point out security vulnerabilities in other companies' products, its own software is far from infallible. A good example of this is the recently discovered 'Follina' security hole that affects ... |
| May 29, 2022 | «Белым» хакерам вышла вольная | 13K 6 мин. --> --> --> --> --> --> --> ...
В США решили облегчить работу так называемым этичным, или «белым» хакерам, которые взламывают системы безопасности исключительно для обнаружения уязвимостей и без злого умысла.... |
| May 26, 2022 | What Is Accounting Pre-Hijacking and How Can You Protect Yourself? | A security research duo has revealed that around half of the world’s most popular websites are vulnerable to a new kind of cyberattack called account pre-hijacking.
A move away from asynchronous verification processes is the suggested remed... |
| May 13, 2022 | ТОП-3 ИБ-событий недели по версии Jet CSIRT | Сегодня в подборке новостей Jet CSIRT — устранение уязвимостей в продуктах Azure и HP, а также новый вредонос NetDooka. ТОП-3 собрала Анна Мельникова, специалист центра мониторинга и реагирования на инциденты ИБ Jet CSIRT компании «Инфосист... |
| May 10, 2022 | Microsoft fixes remote code exec bug in Azure database connector | Microsoft says it has mitigated and remediated three vulnerabilities that could have been used to run commands remotely across the Azure cloud Integration Runtimes (IR) compute infrastructure.
IR is used by the Azure Data Factory and Synaps... |
| Apr 29, 2022 | Microsoft fixes Azure PostgreSQL cross-account database access bug | Microsoft has addressed a privilege escalation and remote code execution problem affecting its Azure Database for PostgreSQL Flexible Server that potentially could have led to unauthorised database access.
Dubbed "ExtraReplica" by... |
| Mar 22, 2022 | Hackers hit Microsoft, post Cortana and Bing source code | A hacking group has hit Microsoft, getting into Azure DevOps source code repositories and leaking source code for Cortana and several other Microsoft projects. It is the latest round of attacks by the group going by the name of “LAPSUS$,” w... |
| Mar 13, 2022 | Уязвимость в Azure Automation давала доступ к чужим учетным записям Azure | Специалисты Microsoft и Orca Security рассказали об уязвимости в сервисе Azure Automation, которая давала злоумышленникам возможность получать несанкционированный доступ к чужим учетным записям пользователей Azure. В итоге они устанавливали... |
| Mar 8, 2022 | Beware Microsoft Azure Users: AutoWarp Bug Can Allow Unauthorized Access to Your Accounts | Joseph Henry, Tech Times 08 March 2022, 08:03 am
Microsoft has recently fixed a bug on the Azure Automation service, granting attackers unpermitted access to customers' sensitive information. Further details have been disclosed by the ... |
| Mar 8, 2022 | Azure 'AutoWarp' bug allowed unauthorised account access | A critical vulnerability in Microsoft's Azure Automation Service left other cloud tenants open to attacks that could assume full control of their data and resources, security researchers found.
Security vendor Orca Security, which name... |
| Mar 7, 2022 | What Google, Amazon and Microsoft revealed about Ukraine’s cyber situation | Join today's leading executives online at the Data Summit on March 9th. Register here.
With limited information coming out of Ukraine about cyberattacks hitting the country, findings from tech giants Google, Amazon and Microsoft disclo... |
| Mar 7, 2022 | Microsoft Has Closed Azure Bug That Exposed Customer Data | Microsoft Azure users dodged a bullet recently, as the tech giant announced that it has closed a bug in the platform that could've given malicious actors access to customer data.
Protecting the personal information of your customers is... |
| Mar 7, 2022 | What Google, Amazon and Microsoft revealed about Ukraine’s cyber situation | We are excited to bring Transform 2022 back in-person July 19 and virtually July 20 - 28. Join AI and data leaders for insightful talks and exciting networking opportunities. Register today!
With limited information coming out of Ukraine ab... |
| Mar 5, 2022 | The largest cyberwar in history is happening right now: Microsoft warns of ‘HermeticWiper’ malware used to target Ukraine’s infrastructure | The future of cyber warfare is here. While everyone is talking of potential World War 3 due to the ongoing war between Russia and Ukraine, maybe what we should be more worried about is the world-scale cyberwar that could cripple global crit... |
| Mar 2, 2022 | Microsoft: Data wiper cyberattacks continuing in Ukraine | We are excited to bring Transform 2022 back in-person July 19 and virtually July 20 - 28. Join AI and data leaders for insightful talks and exciting networking opportunities. Register today!
Microsoft warned that the group behind the “Herme... |
| Mar 2, 2022 | Microsoft: Data wiper cyberattacks continuing in Ukraine | Join today's leading executives online at the Data Summit on March 9th. Register here.
Microsoft warned that the group behind the “HermeticWiper” cyberattacks — a series of data-wiping malware attacks that struck numerous Ukrainian org... |
| Feb 25, 2022 | Salesforce Paid More Than $2.8 Million in Bug Bounties Last Year | Salesforce paid out a total of more than $2.8 million to ethical hackers who helped them locate bugs in their software across 2021.
The highest amount paid for one bounty was $30,000, but more than 4,700 suspected vulnerabilities were repor... |
| Feb 14, 2022 | Rapid7 : Dropping Files on a Domain Controller Using CVE-2021-43893 | On December 14, 2021, during the Log4Shell chaos, Microsoft published CVE-2021-43893, a remote privilege escalation vulnerability affecting the Windows Encrypted File System (EFS). The vulnerability was credited to James Forshaw of Google P... |
| Feb 13, 2022 | Explained: What we know of hacking group ModifiedElephant | American cybersecurity firm SentinelOne has released a report on ModifiedElephant—a hacking group that allegedly planted incriminating evidence on the personal devices of Indian journalists, human rights activists, human rights defenders, a... |
| Feb 6, 2022 | Follina abuses Microsoft Office to execute remote code | Image: Adobe Stock
CVE-2022-30190, also known as “Follina”, is a remote code execution (RCE) vulnerability that affects Microsoft Office, reported on May 27, 2022. How can Follina vulnerability be exploited by attackers? Must-read security ... |
| Dec 15, 2021 | Microsoft : Guidance for preventing, detecting and hunting for CVE-2021-44228 Log4j 2 exploitation | Microsoft's unified threat intelligence team, comprising the Microsoft Threat Intelligence Center (MSTIC), Microsoft 365 Defender Threat Intelligence Team, RiskIQ, and the Microsoft Detection and Response Team (DART), among others, hav... |
| Dec 13, 2021 | ‘Log4j flaw can potentially affect 3 out of 10 websites across globe’ | Shouvik Das 13 Dec, 2021
Since last week, word regarding a critical vulnerability that could potentially be massive has hit the ground. The flaw was discovered in Apache Log4j and is called Log4Shell.
Over time, the vulnerability presently ... |
| Dec 12, 2021 | Microsoft: Log4j exploits extend past crypto mining to outright theft | Hear from CIOs, CTOs, and other C-level and senior execs on data and AI strategies at the Future of Work Summit this January 12, 2022. Learn more
Microsoft said Saturday that exploits so far of the critical Apache Log4j vulnerability, known... |
| Dec 12, 2021 | Microsoft: Log4j exploits extend past crypto mining to outright theft | We are excited to bring Transform 2022 back in-person July 19 and virtually July 20 - 28. Join AI and data leaders for insightful talks and exciting networking opportunities. Register today!
Microsoft said Saturday that exploits so far of t... |
| Nov 19, 2021 | Trend Micro Incorporated : Squirrelwaffle Exploits ProxyShell and ProxyLogon to Hijack Email Chains | In September, Squirrelwaffle emerged as a new loader that is spread through spam campaigns. It is known for sending its malicious emails as replies to preexisting email chains, a tactic that lowers a victim's guard against malicious ac... |
| Oct 18, 2021 | Как Rust-разработчики делают Веб безопаснее | ЯЗЫК ПРОГРАММИРОВАНИЯ RUST УПРОЩАЕТ РАЗРАБОТКУ БОЛЕЕ БЕЗОПАСНОГО ПРОГРАММНОГО ОБЕСПЕЧЕНИЯ. ЧТО ЕЩЕ ПРЕДСТОИТ СДЕЛАТЬ?
Допустим, вы пишете почтовый клиент на С++. Ваше новое приложение будет применяться на рабочей станции, ежедневно использу... |
| Sep 17, 2021 | Microsoft переложила закрытие уязвимости OMIGOD в Azure на пользователей | Пользователи Microsoft Azure, использующие виртуальные машины Linux в облаке, должны принять меры, чтобы защитить себя от уязвимостей OMIGOD внутри платформы Open Management Infrastructure (OMI).
Microsoft опубликовала патчи 14 сентября. На... |
| Sep 9, 2021 | Microsoft Azure cloud customers warned of new security flaw | |
| Sep 9, 2021 | Microsoft Azure cloud customers warned of new security flaw | Microsoft has warned some of its Azure cloud computing customers that a flaw discovered by security researchers could have allowed hackers access to their data.
In a blog post from its security response team, Microsoft said it had fixed the... |
| Sep 9, 2021 | Microsoft закрыла уязвимость в службах контейнеров Azure | Microsoft сообщила, что исправила уязвимость в своих службах контейнеров Azure, которая могла быть использована злоумышленником для «доступа к информации клиентов». Неделю назад компания предупредила тысячи компаний о том, что в уязвимость ... |
| Sep 9, 2021 | Microsoft warns Azure customers of flaw that could have permitted hackers access to data | September 9, 202112:18 AM UTCLast Updated ago
TechnologyMicrosoft warns Azure customers of flaw that could have permitted hackers access to data
By Joseph Menn
3 minute read
A Microsoft logo is pictured on a store in the Manhattan borough o... |
| Sep 8, 2021 | «Макдональдс» разослала победителям «Монополии» имена и пароли других участников вместе с поздравлениями | Участвующие в акции сети ресторанов пользователи приложения в Великобритании получили в призовых электронных сообщениях логины и пароли других участников. Франшиза заверила, что утекли данные с прокси-сервера и беспокоиться не о чем.
Bleepi... |
| Sep 6, 2021 | Главной угрозой для общества стали компании, которые «защищают безопасность» | Получив новый телефон, я всегда его разбираю. Не из любопытства и не по политическим причинам, а просто для безопасности. Первый шаг — удаление двух или трёх крошечных микрофонов на плате. Это лишь начало сложного процесса. Но даже после не... |
| Aug 29, 2021 | Microsoft Azure found to have the 'worst cloud vulnerability you can imagine' -- ChaosDB | Security researchers have discovered a serious security vulnerability in Microsoft Azure that could given an attacker unfettered access to any and all of the databases stored on its Cosmos DB service.
Researchers from security firm Wiz foun... |
| Aug 28, 2021 | Microsoft fixes cloud vulnerability after warning from Israel-based company | REDMOND, Washington — Microsoft says it has fixed a flaw in its cloud computing platform that cybersecurity researchers warned could have enabled hackers to take over a cloud-based database product used by many big companies.
The company sa... |
| Aug 19, 2021 | After US FDA alert, BlackBerry admits QNX also affected by critical 'BadAlloc' bug | BlackBerry has issued an alert for a serious vulnerability in its QNX real-time operating system (RTOS), used in hundreds of millions of endpoints including 195 million cars, and says older versions of the software are impacted.
While the f... |
| Aug 18, 2021 | Cars, Medical Devices With BlackBerry QNX Were Vulnerable To Nasty BadAlloc Bug | Way back in March of this year Microsoft Section 52 security researchers discovered a showstopping vulnerability that impacted a staggering number of Internet of Things (IoT) and Operational Technology (OT) devices. It’s now known that nume... |
| Aug 12, 2021 | Microsoft fixes Print Spooler bugs with August Patch Tuesday rollout | Image: iStockphoto/ArtHead-
Microsoft has finally patched the last in a series of security vulnerabilities in its Windows Print Spooler service that could have allowed attackers to remotely control an affected system and install malicious p... |
| Aug 12, 2021 | Microsoft tries again to plug 'PrintNightmare' security hole | This month's Patch Wednesday from Microsoft arrived with another fix for the accidentally published "PrintNightmare" zero-day vulnerability, which allows attackers to abuse the Windows Print Spooler service to remotely execut... |
| Aug 11, 2021 | Microsoft finally fixes PrintNightmare vulnerability with KB5005031 and KB5005033 updates | To help address the ongoing problems with the so-called PrintNightmare vulnerability (CVE-2021-34527), Microsoft has announced a change to the default behavior of the Point and Print feature in Windows.
The change has been delivered via the... |
| Aug 10, 2021 | This crucial Windows update finally fixes the PrintNightmare vulnerability | Microsoft has issued a new security patch for the issues surrounding the PrintNightmare vulnerability in Windows. This time around, Microsoft is changing the default Point and Print driver installation and update behavior to require adminis... |
| Jul 22, 2021 | How cyberattacks exploit known security vulnerabilities | Image: seksan Mongkhonkhamsao/Moment/Getty Images
One key way that cybercriminals compromise organizations and users is by exploiting known security vulnerabilities. As new flaws are discovered all the time, hackers always have plenty of fr... |
| Jul 13, 2021 | Facebook adds a ‘Payout Time Bonus’ to help retain bug bounty hunters | When it comes to bug bounties, Facebook lags behind the likes of Microsoft and Google in terms of overall payouts and volume of tips received: last year, Microsoft and Google respectively paid out $13.6 million and $6.7 million; Facebook me... |
| Jul 7, 2021 | Microsoft’s emergency patch fails to fix critical “PrintNightmare” vulnerability | Enlarge
Getty Images reader comments 95 with 57 posters participating
Share this story
Share on Facebook
Share on Twitter
Share on Reddit
An emergency patch Microsoft issued on Tuesday fails to fully fix a critical security vulnerability in... |
| Jun 30, 2021 | Microsoft : The critical role of Zero Trust in securing our world | We are operating in the most complex cybersecurity landscape that we've ever seen. While our current ability to detect and respond to attacks has matured incredibly quickly in recent years, bad actors haven't been standing still. ... |
| Jun 29, 2021 | Microsoft digitally signs malicious rootkit driver | Enlarge reader comments 79 with 63 posters participating
Share this story
Share on Facebook
Share on Twitter
Share on Reddit
Microsoft gave its digital imprimatur to a rootkit that decrypted encrypted communications and sent them to attacke... |
| Jun 28, 2021 | Хакеры взломали специалиста техподдержки Microsoft и атаковали клиентов | Александра Кукуть 28 июня 2021, 10:56 Хакеры взломали специалиста техподдержки Microsoft и атаковали клиентов
Microsoft рассказала о новой активности хакеров из группировки Nobelium, которые причастны к атаке на SolarWinds.
Оставить коммент... |
| Jun 27, 2021 | Microsoft Confirms Rootkit Malware to Be Allowed on Windows After Signing It Off, Is it Gone Now? | Isaiah Richard, Tech Times 27 June 2021, 09:06 pm
Microsoft has confirmed that it has signed off on the recently discovered "rootkit malware" found on the Windows platform, which is believed to be a potential point of access for t... |
| Jun 26, 2021 | SolarWinds hackers breach new victims, including a Microsoft support agent | Enlarge
Getty Images reader comments 75 with 50 posters participating
Share this story
Share on Facebook
Share on Twitter
Share on Reddit
The nation-state hackers who orchestrated the SolarWinds supply chain attack compromised a Microsoft w... |
| Jun 25, 2021 | Microsoft Reveals Latest SolarWinds Hacker Attack, SEC Probes Companies Victimized | Isabella James, Tech Times 25 June 2021, 11:06 pm
Microsoft has revealed a new cybersecurity attack by the same group responsible for the SolarWinds Hack.
According to a statement posted on the Microsoft Security Response Center website, th... |
| Jun 9, 2021 | Sophos unearths involvement of Lemon Duck crypto-mining malware in ProxyLogon attacks | By Nick Forrester
Senior News Editor
Wed, 9th Jun 2021
#
Breach Prevention
#
Cybersecurity
#
Firewall
#
Malware
#
Microsoft
#
Network Management
FYI, this story is more than a year old
On 2 March 2021, Microsoft released security patches fo... |
| Apr 14, 2021 | Microsoft fixes a mass of serious flaws with the latest Windows 10 updates -- but what has it broken this time? | Another Patch Tuesday has rolled around, and this month sees Microsoft releasing a bumper crop of update for Windows 10. In all, April's updates address a total of 108 flaws, 19 of which are considered Critical.
Four of the critical fl... |
| Apr 14, 2021 | New Microsoft Exchange vulnerabilities require urgent patching: ACSC | New critical remote code execution vulnerabilities in Microsoft's enterprise Exchange Server have been discovered, and the Australian Cyber Security Centre (ACSC) is urging users to apply the patches for them as soon as possible to pre... |
| Mar 26, 2021 | Microsoft Teams Bounty Program Offers up to $30,000: How to Join? | Isaiah Alonzo, Tech Times 26 March 2021, 09:03 pm
Microsoft is offering massive monetary rewards for people who can hack Teams and other applications from Microsoft's suite under its Bounty Program that aims to determine app weaknesses... |
| Mar 24, 2021 | Microsoft Exchange Servers Get Hacked--Company Publishes Mitigation Technique to Stop Chained Attack | Joen Coronel, Tech Times 24 March 2021, 08:03 am
Microsoft Exchange Servers have faced another series of attacks conducted by a gang of hackers who used ransomware. The attack has exploited several organizations that were unprepared for wha... |
| Mar 24, 2021 | RAPID7, INC.
Defending Against the Zero Day: Analyzing Attacker Behavior Post-Exploitation of Microsoft Exchange | In recent weeks, there has been quite a lot of reporting on the exploitation of the latest disclosed vulnerabilities in Microsoft's Exchange Server by an attacker referred to as HAFNIUM. One of the major reasons these latest vulnerabil... |
| Mar 23, 2021 | Ransomware operators are piling on already hacked Exchange servers | Aurich Lawson / Ars Technica reader comments 16 with 14 posters participating
Share this story
Share on Facebook
Share on Twitter
Share on Reddit
Microsoft Exchange servers compromised in a first round of attacks are getting infected for a ... |
| Mar 16, 2021 | Большой взлом Microsoft Exchange Server: что произошло и почему это важно | Александра Кукуть 16 марта 2021, 19:19 Большой взлом Microsoft Exchange Server: что произошло и почему это важно
На прошлой неделе стало известно, что группа китайских хакеров смогла получить контроль над email-аккаунтами клиентов Microsoft... |
| Mar 15, 2021 | Microsoft launches Exchange tool to help customers apply critical security updates
Since you’re here …
Send us a News Tip
EXTRACT THE SIGNAL FROM THE NOISE
Cookies | Microsoft Corp. today released a one-click Microsoft Exchange On-Premises Mitigation Tool designed to help customers apply critical security updates related to a serious vulnerability first disclosed earlier this month.
The EOMT has been cr... |
| Mar 9, 2021 | Microsoft urges enterprises to act quickly to secure Exchange as attacks mount | Join Transform 2021 for the most important themes in enterprise AI & Data. Learn more.
The recently patched vulnerabilities in Microsoft Exchange that were being actively exploited by a state-sponsored threat group from China are now al... |
| Mar 9, 2021 | Microsoft urges enterprises to act quickly to secure Exchange as attacks mount | We are excited to bring Transform 2022 back in-person July 19 and virtually July 20 - 28. Join AI and data leaders for insightful talks and exciting networking opportunities. Register today!
The recently patched vulnerabilities in Microsoft... |
| Mar 8, 2021 | Outlook users’ hacked globally as four hacking groups launch offensive against Microsoft | Microsoft Outlook users were hacked recently by “a Chinese government-backed hacking group” as per Microsoft It was further reported that a cybersecurity company was collaborating with at least 50 victims to find out what the hackers had ac... |
| Mar 8, 2021 | How the Microsoft Exchange hack could impact your organization | Image: Microsoft
Organizations that run Microsoft Exchange Server are being urged to apply several bug fixes to the program in response to a hack from a Chinese cybercriminal group. The attack has sparked concern among everyone from securit... |
| Mar 7, 2021 | Biden administration launching task force to investigate whether China orchestrated Microsoft Exchange hack | President Joe Biden. Jim Lo Scalzo/Reuters
On Tuesday, Microsoft said its Exchange product had been hacked by a state-backed Chinese entity.
At least 30,000 businesses and government bodies were affected by the hack, which began in January.... |
| Mar 7, 2021 | At least 30,000 US organizations, small businesses and government offices were victims of Microsoft Exchange hack: Krebs | An espionage group has hacked some 30,000 US organizations over the past few days, KrebsOnSecurity reported.
Microsoft released several security updates to its Exchange email product to combat the hack.
The group was able to target business... |
