Microsoft has pulled the January Windows Server cumulative updates after critical bugs caused domain controllers to reboot, Hyper-V to not work, and ReFS volume systems to become unavailable. click here to read full Article...
What is Spray365? Spray365 is a password spraying tool that identifies valid credentials for Microsoft accounts (Office 365 / Azure AD). How is Spray365 different from the many other password spraying tools that are...
Threat actors can leverage a weakness in Microsoft Defender to determine in which folders to plant malware. The knowledge of the list of scanning exceptions allows attackers to know where to store their malicious...
To successfully exploit this critical flaw, attackers would have to trick their targets into opening a specially crafted Office document delivered using a link shared via instant messaging or email. click here to read...
Microsoft’s 365 Defender Research Team on Monday in a blog post revealed that they had uncovered a new macOS vulnerability “powerdir” that could allow an attacker to bypass the operating system’s Transparency, Consent, and...
The most urgent additions to the CISA list include a vulnerability in VMware vCenter Server, flaws in Hikvision products, and a FatPipe WARP, IPVPN, and MPVPN vulnerability. click here to read full Article Read...
Microsoft: China-based ransomware actor exploiting Log4Shell click here to read full Article Read More on latest Security Updates
Products impacted by these updates include Microsoft Exchange Server, the Office software line, Windows Defender, Windows Kernel, RDP, Cryptographic Services, Windows Certificate, and Microsoft Teams. click here to read full Article Read more on...
Microsoft today disclosed a vulnerability in Apple’s macOS that could enable an attacker to gain unauthorized access to protected user data through bypassing the TCC technology in the OS. click here to read full...
The campaign is said to have claimed 2,170 victims across 111 countries as of January 2, 2022, with most of the affected parties located in the U.S., Canada, India, Indonesia, and Australia. click here...
Public and private organizations alike, including Microsoft and the U.S. Federal Trade Commission (FTC), are alerting organizations against continuous attacks exploiting Log4Shell since December 2021. click here to read full Article Read More on...
New Zloader attacks thwarting Microsoft signature checks click here to read full Article Read More on latest Security Updates
Microsoft has warned Windows and Azure customers to remain vigilant after observing state-sponsored and cyber-criminal attackers probing systems for the Log4j ‘Log4Shell’ flaw through December. click here to read full Article Read More on...
A short-lived phishing campaign has been observed taking advantage of a novel exploit that bypassed a patch put in place by Microsoft to fix a remote code execution vulnerability affecting the MSHTML component with...
Spray365 is a password spraying tool that identifies valid credentials for Microsoft accounts (Office 365 / Azure AD). How is Spray365 different from the many other password spraying tools that are already available? Spray365...
Researchers have discovered at least four different vulnerabilities in the Microsoft Teams link preview feature.… Multiple Vulnerabilities Found In Microsoft Teams – Only One Fixed So Far on Latest Hacking News. click here to...
