Microsoft Says State-Sponsored Attackers Accessed Senior Leaders' Emails

Microsoft Says State-Sponsored Attackers Accessed Senior Leaders' Emails

Microsoft disclosed on Jan. 19 that a nation-state backed attack occurred beginning in November 2023 in which the Russian state-sponsored threat actor group Midnight Blizzard accessed some Microsoft corporate emails and documents through compromised email accounts. The attackers gained access in November 2023 using a legacy test tenant account. From there, they could use that account’s permissions to access a small number of Microsoft corporate email accounts – some of those accounts were for senior…

Read More

Androxgh0st Malware Botnet Steals AWS, Microsoft Credentials and More

Androxgh0st Malware Botnet Steals AWS, Microsoft Credentials and More

The Federal Bureau of Investigation and Cybersecurity & Infrastructure Security Agency warned in a joint advisory about a threat actor deploying a botnet that makes use of the Androxgh0st malware. This malware is capable of collecting cloud credentials, such as those from AWS or Microsoft Azure and more, abusing the Simple Mail Transfer Protocol, and scanning for Amazon Simple Email Service parameters. What is the Androxgh0st malware? The Androxgh0st malware was exposed in December 2022…

Read More

20 Most Popular TechRepublic Articles in 2023

20 Most Popular TechRepublic Articles in 2023

Here’s a list of the 20 most popular articles published by TechRepublic in 2023. Read articles about ChatGPT, Google Bard, Windows 11 and more. This year, developments in generative AI dominated the tech world, and TechRepublic readers expressed a corresponding interest, specifically in content about AI art generators, ChatGPT and Google Bard. Our readers were interested in tutorials about Windows 11, Microsoft Excel, Google Sheets and iPhone, as well as articles about tech certifications and…

Read More

Google Adds Gemini Pro API to AI Studio and Vertex AI

Google Adds Gemini Pro API to AI Studio and Vertex AI

Starting Dec. 13, developers can use Google AI Studio and Vertex AI to build applications with the Gemini Pro API, which allows access to Google’s new generative AI model. Google’s initial rollout of Gemini was limited to Google Bard and the Pixel 8 Pro, so Wednesday’s general availability of Gemini for Google AI Studio and Vertex AI marks the first test of Gemini for enterprise developers. AI Studio and Vertex AI with Gemini can help…

Read More

Windows 10 Extended Security Updates Promised for Small Businesses and Home Users

Windows 10 Extended Security Updates Promised for Small Businesses and Home Users

Already common for enterprises, for the first time, individuals will also get the option to pay for extended security updates for a Windows operating system that’s out of support. Windows 10 will stop getting free updates, including security fixes, after October 14, 2025; which is the official end of support date. But there is good news for Windows 10 holdouts: In addition to the expected announcement that large organizations will be able to buy up to…

Read More

Microsoft Improves Windows Security with a Path to Move Off NTLM

Microsoft Improves Windows Security with a Path to Move Off NTLM

NTLM is a simple and straightforward authentication method for connecting to applications on enterprise servers, but it’s also outdated and insecure. Despite that, NTLM is still widely used, partly because of inertia but also because the preferred replacement Kerberos doesn’t currently cope with some important scenarios. Now Microsoft plans to extend Kerberos in the versions of Windows and Windows Server that will ship in the next two years to help organizations move off NTLM. Here’s…

Read More

Microsoft Azure Confidential VMs Will Roll Out This December

Microsoft Azure Confidential VMs Will Roll Out This December

The partnership with Intel allows for hardware-enforced security and confidentiality on 4th Gen Xeon processors. Image: monticellllo/Adobe Stock Organizations using Microsoft Azure will have access to confidential virtual machines in Azure on Dec. 1, allowing greater privacy and compliance. The DCesv5 and ECesv5-series confidential VMs run on 4th Gen Intel Xeon Scalable processors with Intel Trust Domain Extensions (TDX). The new confidential VMs will be accessible in Microsoft Azure regions Europe West, Europe North, Central…

Read More

Kaspersky’s Advanced Persistent Threats Predictions for 2024

Kaspersky’s Advanced Persistent Threats Predictions for 2024

Kaspersky’s new report provides the company’s view on the advanced persistent threats landscape for 2024. Existing APT techniques will keep being used, and new ones will likely emerge, such as the increase in AI usage, hacktivism and targeting of smart home tech. New botnets and rootkits will also likely appear, and hacker-for-hire services might increase, as will supply chain attacks, which might be provided as a service on cybercriminals’ underground forums. Jump to: More exploitation…

Read More

Microsoft Ignite: New Solutions Offer More Security and Productivity from Windows in the Cloud

Microsoft Ignite: New Solutions Offer More Security and Productivity from Windows in the Cloud

During Microsoft Ignite, the company announced various ways in which users will be able to get more security and productivity from some of its products. Microsoft is adding more AI tools to Windows, including Copilot on Windows 11, and giving developers more tools to create AI features of their own for Windows. With Microsoft 365 and Azure Virtual Desktop, you can use those Windows AI features on any device, and that gets simpler with new…

Read More

Microsoft and SysAid Find Clop Malware Vulnerability

Microsoft and SysAid Find Clop Malware Vulnerability

SysAid has patched a zero-day vulnerability that could allow attackers to exfiltrate data and launch ransomware. On Nov. 8, SysAid, an Israel-based IT service management software company, reported a potentially exploited zero-day vulnerability in their on-premises software. Users of their on-premises server installations were encouraged to run version 23.3.36, which contained a fix. Microsoft Threat Intelligence analyzed the threat and found that Lace Tempest had exploited it. The vulnerability was exploited by the threat group…

Read More
1 3 4 5 6