This week has marked the arrival of scheduled monthly updates from Microsoft. With October Patch… Microsoft October Patch Tuesday Addresses 4 Zero-Day Vulnerabilities on Latest Hacking News. click here to read full Article Read...
Microsoft revoked insecure SSH keys some Azure DevOps have generated using a GitKraken git GUI client version impacted by an underlying issue found in one of its dependencies. click here to read full Article...
Learn to work with the Microsoft Graph Security API click here to read full Article Read More on latest Security Updates
Microsoft Defender for Identity (previously Azure Advanced Threat Protection or Azure ATP) is a cloud-based security solution that leverages on-premises Active Directory signals. click here to read full Article Read More on Pentesting Tools
Microsoft doesn’t appear to be able to get a break. Microsoft is regularly chastised and condemned, but we wouldn’t have many of the contemporary computer comforts we take for granted today if it weren’t...
Tamper protection sets up Microsoft Defender Antivirus using secure default values and hinders attempts to change them via the registry, PowerShell cmdlets, or group policies. click here to read full Article Read More on...
While VBA macros were introduced in Excel 5.0, threat actors continue to XLM macros twenty years later in malicious documents that download malware or perform other unwanted behavior. click here to read full Article...
kekeo is a little toolbox I have started to manipulate Microsoft Kerberos in C (and for fun) ASN.1 library In kekeo, I use an external commercial library to deal with Kerberos ASN.1 structures: OSS...
Download GhostEmperor’s technical details (PDF) While investigating a recent rise of attacks against Exchange servers, we noticed a recurring cluster of activity that appeared in several distinct compromised networks. This cluster stood out for...
One of the prominent targets for hackers is Microsoft Exchange, and the attack vector typically involves a popular vulnerability which the organization hasn’t recently patched. A new solution by Microsoft aims at providing...
Microsoft releases emergency Exchange Server mitigation tool click here to read full Article Read More on latest Security Updates
It works by detecting Exchange Servers vulnerable to one or more known threats and applies interim mitigations until a security update is available for admins to install. click here to read full Article Read...
On August 10, 2016, Marco van Beek, managing director at Supporting Role, emailed the Microsoft Security Response Center to disclose an Autodiscover exploit that worked with multiple email clients. click here to read full...
On September 21, Microsoft’s security team announced that it has discovered a huge operation that delivers phishing services to cybercrime gangs via a hosting-like infrastructure that the OS maker equated to a Phishing-as-a-Service...
Security researchers have disclosed an unpatched weakness in Microsoft Windows Platform Binary Table (WPBT) affecting all Windows-based devices since Windows 8 that could be potentially exploited to install a rootkit and compromise the integrity...
Microsoft has opened the lid on a large-scale phishing-as-a-service (PHaaS) operation that’s involved in selling phishing kits and email templates as well as providing hosting and automated services at a low cost, thus enabling...
