Microsoft Archives - Page 2 of 15 - AZGAD WEBSITE SECURITY BLOG

Saturday, April 20, 2024

Latest:

Cloud Security critical december 2020 Exchange Server Microsoft patch Tuesday patching priority Security Bugs security patches Sharepoint Vulnerabilities Web Security

2020-12-09 Tara Seals

Microsoft Wraps Up a Lighter Patch Tuesday for the Holidays

Nine critical bugs and 58 overall fixes mark the last scheduled security advisory of 2020.

exact domain spoofing financial services healthcare Ironscales manufacturing Microsoft Office 365 spearphishing Spoofing telecom utilities vertical markets Web Security

2020-12-08 Elizabeth Montalbano

Spearphishing Attack Spoofs Microsoft.com to Target 200M Office 365 Users

It remains unknown as to why Microsoft is allowing a spoof of their very own domain against their own email infrastructure.

advintel BIOS Bootkit botnet eclypsium firmware firmware inspection Malware Malware analysis Microsoft read-write everything RWEverything takedown trickboot TrickBot UEFI Vulnerabilities vulnerability scanning

2020-12-03 Tara Seals

TrickBot Returns with a Vengeance, Sporting Rare Bootkit Functions

A new “TrickBoot” module scans for vulnerable firmware and has the ability to read, write and erase it on devices.

Data Privacy Microsoft Microsoft 365 microsoft teams Office 365 Outlook productivity score skype Web Security workplace surveillance

2020-12-02 Lindsey O'Donnell

Microsoft Revamps ‘Invasive’ M365 Feature After Privacy Backlash

The Microsoft 365 tool that tracked employee usage of applications like Outlook, Skype and Teams was widely condemned by privacy experts.

apt Attackers China Cicada domain controller Exploit Government Malware Microsoft Microsoft Active Directory privilege escalation threat actors zero day zerologon

2020-11-19 Elizabeth Montalbano

APT Exploits Microsoft Zerologon Bug: Targets Japanese Companies

Threat actors mount year-long campaign of espionage, exfiltrating data, stealing credentials and installing backdoors on victims’ networks.

advanced persistent threats APT28 APTs Breach cerium covid-19 research Critical Infrastructure Cyberattacks Fancy Bear Government hack Hacks lazarus group Microsoft nation state North Korea pharmaceutical companies research theft russia Sofacy State sponsored Strontium vaccine research vaccine-maker Web Security zinc

2020-11-13 Tara Seals

Nation-State Attackers Actively Target COVID-19 Vaccine-Makers

Three major APTs are involved in ongoing compromises at pharma and clinical organizations involved in COVID-19 research, Microsoft says.

CASHY200 Cloud Security Hacks Kuwait Malware Microsoft Microsoft Exchange Microsoft Exchange Server attack PowerShell Snugy TriFive Vulnerabilities w3sp.exe xHunt Xhunt threat group

2020-11-09 Lindsey O'Donnell

Microsoft Exchange Attack Exposes New xHunt Backdoors

An attack on the Microsoft Exchange server of an organization in Kuwait revealed two never-before-seen Powershell backdoors.

AT&T Google Google Forms Microsoft Office 365 OneDrive Outlook phishing attack T-Mobile Web Security Wells Fargo

2020-11-05 Lindsey O'Donnell

Google Forms Abused to Phish AT&T Credentials

More than 200 Google Forms impersonate top brands – including Microsoft OneDrive, Office 365, and Wells Fargo – to steal victims’ credentials.

CISA COVID-19 cyberattack Trump election security elections security FBI Government Hacks hospital ransomware hospital security Malware Microsoft patch patient death patient safety Podcasts ransomware ryuk smbghost U.S. elections Vulnerabilities Web Security Windows windows flaw zerologon

2020-10-30 Lindsey O'Donnell

Halloween News Wrap: The Election, Hospital Deaths and Other Scary Cyberattack Stories

Threatpost breaks down the scariest stories of the week ended Oct. 30 haunting the security industry — including bugs that just won’t die.

apt Attackers Cybersecurity and Infrastructure Security Agency Department of Homeland Security domain controller Exploit Government Hacks Microsoft Microsoft Active Directory patch privilege escalation threat actors Vulnerabilities zero day zerologon

2020-10-30 Elizabeth Montalbano

Microsoft Warns Threat Actors Continue to Exploit Zerologon Bug

Tech giant and feds this week renewed their urge to organizations to update Active Directory domain controllers.

By continuing to use the site, you agree to the use of cookies. more information