Working with the Microsoft Defender for Identity portal
Working with the Microsoft Defender for Identity portal click here to read full Article Read More on latest Security Updates
Tagged: Microsoft
Microsoft Researches Ransomware Attack Targeting App Developers
Stories of ransomware assaults are common in many headlines worldwide. The attacks target both large and small businesses alike. Research suggests that over half of organizations find it difficult to detect if they have...
Microsoft MSHTML Flaw Exploited by Ryuk Ransomware Gang
Criminals behind the Ryuk ransomware were early exploiters of the Windows MSHTML flaw, actively leveraging the bug in campaigns ahead of a patch released by Microsoft this week. click here to read full Article...
Exploitation of the CVE-2021-40444 vulnerability in MSHTML
Summary Last week, Microsoft reported the remote code execution vulnerability CVE-2021-40444 in the MSHTML browser engine. According to the company, this vulnerability has already been used in targeted attacks against Microsoft Office users. In...
CVE-2021-40444 PoC – Malicious docx generator to exploit CVE-2021-40444 (Microsoft Office Word Remote Code Execution)
Malicious docx generator to exploit CVE-2021-40444 (Microsoft Office Word Remote Code Execution) Creation of this Script is based on some reverse engineering over the sample used in-the-wild: 938545f7bbe40738908a95da8cdeabb2a11ce2ca36b0f6a74deda9378d380a52 (docx file) You need to install...
Microsoft September Patch Tuesday Fixes 86 Security Bugs
This week, the Redmond giant has released the monthly security fixes for its products. With… Microsoft September Patch Tuesday Fixes 86 Security Bugs on Latest Hacking News. click here to read full Article Read...
Microsoft to let users completely remove account passwords and go passwordless
In the coming weeks, Microsoft said that users would be able to remove the password from their consumer account and choose an alternative authentication option instead to boost security. click here to read full...
Critical Flaws Discovered in Azure App That Microsoft Secretly Installed on Linux VMs
Microsoft on Tuesday addressed a quartet of security flaws as part of its Patch Tuesday updates that could be abused by adversaries to target Azure cloud customers and elevate privileges as well as allow for remote...
FIN7 Using Windows 11 Alpha Buzz as Lure
A spear-phishing campaign by the FIN7 group was spotted using Windows 11 Alpha-themed Word maldocs—containing heavily obfuscated VBA macros—against a PoS service provider in the U.S. The document claims to be created with a...
'Azurescape': New Azure vulnerability fixed by Microsoft
'Azurescape': New Azure vulnerability fixed by Microsoft click here to read full Article Read More on latest Security Updates
Microsoft MSHTML Remote Code Execution Vulnerability Exploited in the Wild
On September 7, 2021, Microsoft disclosed an active in-the-wild attack affecting Microsoft Windows. This vulnerability, CVE-2020-40444, is a remote code execution vulnerability in MSHTML and does not currently have a patch. click here to...
Microsoft warns Azure customers of flaw that could have permitted hackers access to data
In a blog post from its security response team, Microsoft said it had fixed the flaw reported by Palo Alto Networks and it had no evidence malicious hackers had abused the technique. click here...
New Zero-Day Attack Targeting Windows Users With Microsoft Office Documents
Microsoft on Tuesday warned of an actively exploited zero-day flaw impacting Internet Explorer that’s being used to hijack vulnerable Windows systems by leveraging weaponized Office documents. click here to read full Article Read more...
TREVORspray – A Featureful Round-Robin SOCKS Proxy And Python O365 Sprayer Based On MSOLSpray Which Uses The Microsoft Graph API
TREVORproxy is a SOCKS proxy that round-robins requests through SSH hosts. TREVORspray is a A featureful Python O365 sprayer based on MSOLSpray which uses the Microsoft Graph API By @thetechr0mancer Microsoft is getting better...
Microsoft Says Chinese Hackers Were Behind SolarWinds Serv-U SSH 0-Day Attack
Microsoft has shared technical details about a now-fixed, actively exploited critical security vulnerability affecting SolarWinds Serv-U managed file transfer service that it has attributed with “high confidence” to a threat actor operating out of...
Microsoft warns about phishing campaign using open redirects
The Microsoft 365 Defender Threat Intelligence Team posted an article stating that they have been tracking a widespread credential phishing campaign using open redirector links. click here to read full Article Read more on...
