Microsoft

Over 5,000 Fake Microsoft Notifications Fueling Email Compromise Campaigns

Posted on by Admin
Over 5,000 Fake Microsoft Notifications Fueling Email Compromise Campaigns

Check Point’s Harmony Email & Collaboration team detected over 5,000 emails disguised as Microsoft product notifications, which could lead to email extortion, the cybersecurity company said on Oct. 2. The emails stand out for their polished appearance and the inclusion of legitimate links. The announcement comes as part of Cybersecurity Awareness Month, highlighting the ongoing risks posed by phishing attacks. Email scam campaign stands out for polished appearance The emails come from “organizational domains impersonating…

Read More

What’s Inside Microsoft’s Major Windows 11 Update?

Posted on by Admin
What’s Inside Microsoft’s Major Windows 11 Update?

Microsoft has begun rolling out its new Windows 11 update for 2024 — but it will come in phases. The update, known as version 24H2, opens the door to Microsoft’s new AI features in select PCs. The annual update also brings a new look for File Explorer, the sudo command for elevating privileges in a regular console session, new features and tools for IT teams, security updates, and more. File explorer and quick settings boast…

Read More

Microsoft Reports on Progress of Revamping Security Efforts

Posted on by Admin
Microsoft Reports on Progress of Revamping Security Efforts

On Sept. 23, Microsoft released a report detailing the progress of the Secure Future Initiative, the company-wide overhaul put in place in November 2023. The Secure Future Initiative exists to improve security in the wake of some high-profile vulnerabilities in 2023. These vulnerabilities included a breach in Microsoft Exchange Online that allowed threat actors associated with the Chinese government to access U.S. government emails in 2023. In April 2024, the U.S. Cyber Safety Review Board…

Read More

Email Attacks a Problem for National Infrastructure Companies

Posted on by Admin
Email Attacks a Problem for National Infrastructure Companies

Cyber attackers are repeatedly using malicious emails to infiltrate critical national infrastructure. Up to 80% of CNI companies experienced an email-related security breach in the last year, according to a new report from security solution provider OPSWAT. Compromising CNI, like utilities, transport, telecommunications, and now data centres, can lead to widespread disruption, making it a prime target for cyber attacks. A recent report from Malwarebytes found that the services industry is the worst affected by…

Read More

Patch Tuesday: Microsoft Catches Four Zero-Day Vulnerabilities

Posted on by Admin
Patch Tuesday: Microsoft Catches Four Zero-Day Vulnerabilities

Every second Tuesday of the month, Microsoft releases a bundle of fixes for Windows. This Tuesday brings four zero-day vulnerabilities, two high-criticality vulnerabilities, and some sister patches from Adobe. On Patch Tuesday, which Microsoft calls “Update Tuesday,” other large software companies like Adobe release major security fixes. It’s a time to launch updates across corporate networks, and it occurs during mid-morning Pacific Standard Time to keep admins and users from having to scramble at the…

Read More

Microsoft Is Disabling Default ActiveX Controls in Office 2024

Posted on by Admin
Microsoft Is Disabling Default ActiveX Controls in Office 2024

Microsoft will disable ActiveX controls by default in the Office suite, starting in October with the release of Office 2024. Phasing out the software framework is likely related to numerous security vulnerabilities that have been exploited in the past. Dating back to 1996, ActiveX has long been used for embedding interactive objects, such as buttons or forms, within Office documents. It was formerly used to load multimedia content, like videos, in Internet Explorer. However, it…

Read More

Microsoft Patched 6 Actively Exploited Zero-Day Flaws

Posted on by Admin
Microsoft Patched 6 Actively Exploited Zero-Day Flaws

Patch Tuesday, Microsoft’s monthly report of security updates, brought 90 CVEs, including some vulnerabilities that were being actively exploited. Some vulnerabilities originated in Chromium, meaning both Microsoft Edge and Google Chrome may have been affected. Here are the most critical flaws and patches disclosed by Microsoft on Aug. 13. Six zero-day flaws had been exploited Threat actors had already taken advantage of six zero-day exploits in particular: CVE-2024-38106: an elevation of privilege vulnerability in the…

Read More

Secureworks Fills Australian Mid-Market Demand for Simplified Cyber Security Solutions

Posted on by Admin
Secureworks Fills Australian Mid-Market Demand for Simplified Cyber Security Solutions

Secureworks is a U.S. headquartered publicly listed cybersecurity firm offering extended detection and response, XDR, technology, and services. Majority-owned by Dell, its XDR is marketed under the Taegis product brand. This year, the company launched a “ManagedXDR Plus” offering for mid-market customers seeking more tailored cybersecurity options at a reasonable price point. Secureworks CEO Wendy Thomas, who visited Australia in July 2024, told TechRepublic that the XDR offering was appealing to mid-market customers in Australia…

Read More

Black Hat Roundup 2024: What to Expect From This Week’s Security Events

Posted on by Admin
Black Hat Roundup 2024: What to Expect From This Week’s Security Events

Black Hat and DEF CON are two of the major security conferences in the U.S., drawing large crowds of cyber and AI decision-makers to Las Vegas. Black Hat USA 2024 runs from August 3-8, with most of the briefings occurring on August 7 and 8; DEF CON 32 runs from August 8-11. We’re rounding up the enterprise business tech news from Black Hat and DEF CON that is most relevant for IT and tech decision-makers….

Read More

Microsoft Azure Outage Caused by DDoS Attack

Posted on by Admin
Microsoft Azure Outage Caused by DDoS Attack

Microsoft has confirmed the cause of the outage on July 30 was a distributed denial-of-service attack. However, its advisory added that the issue was exacerbated by an “error in the implementation of their defenses” during a mitigation attempt. The Azure cloud services were impacted between approximately 11:45 UTC and 19:43 UTC after being flooded by internet traffic. Redmond security pros say that the Azure Front Door and Azure Content Delivery Network components were “performing below…

Read More
1 2 3 4 … 6