Microsoft - Security Ticks

Threat Actor Targeting Developers via Trojanized MS Visual Studio

Info stealer, Malware, Microsoft, Telegram, trojan, Visual Studio / SecurityTicks

Threat Actor Targeting Developers via Trojanized MS Visual Studio 25/07/2023 at 18:06 By cybleinc CRIL examines a Trojanized Visual Studio installer that deploys a Cookie Stealer and utilizes Telegram for data exfiltration. The post Threat Actor Targeting Developers via Trojanized MS Visual Studio appeared first on Cyble. This article is an excerpt from Cyble View […]

React to this headline:

Threat Actor Targeting Developers via Trojanized MS Visual Studio Read More »

Microsoft Cloud Hack Exposed More than Exchange, Outlook Emails

Azure, cloud security, email authentication, email security, Featured, Government, Microsoft, MSA key / SecurityTicks

Microsoft Cloud Hack Exposed More than Exchange, Outlook Emails 21/07/2023 at 20:19 By Ryan Naraine Cloud security researcher warns that stolen Microsoft signing key was more powerful and not limited to Outlook.com and Exchange Online. The post Microsoft Cloud Hack Exposed More than Exchange, Outlook Emails appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Microsoft Cloud Hack Exposed More than Exchange, Outlook Emails Read More »

Fabricated Microsoft Crypto Wallet Phishing Site Spreads Infostealer

AntiVM, Chrome, Clipper, Clipper Malware, Crypto wallet, Cryptocurrency, cybercriminals, Electrum, GitHub, GravityRAT, IBAN, infostealer, Luca Stealer, Malware, Microsoft, Opera, phishing, phishing attack, Threat Actors, Threat Intelligence / SecurityTicks

Fabricated Microsoft Crypto Wallet Phishing Site Spreads Infostealer 21/07/2023 at 19:19 By cybleinc Cyble Research and Intelligence Labs analyzes Threat Actors spreading Luca Stealer disguised as a beta version of Microsoft Crypto Wallet. The post Fabricated Microsoft Crypto Wallet Phishing Site Spreads Infostealer appeared first on Cyble. This article is an excerpt from Cyble View

React to this headline:

Fabricated Microsoft Crypto Wallet Phishing Site Spreads Infostealer Read More »

Microsoft Exchange servers compromised by Turla APT

APT, backdoor, cyber espionage, data theft, Don't miss, Hot stuff, Microsoft, News, Ukraine / SecurityTicks

Microsoft Exchange servers compromised by Turla APT 20/07/2023 at 15:17 By Helga Labus Turla has been targeting defense sector organizations in Ukraine and Eastern Europe with DeliveryCheck and Kazuar backdoors / infostealers and has been using compromised Microsoft Exchange servers to control them. Turla APT Turla (aka Secret Blizzard, Snake, UAC-0003) is a sophisticated and

React to this headline:

Microsoft Exchange servers compromised by Turla APT Read More »

Thanks Storm-0558! Microsoft to expand default access to cloud logs

APT, CISA, cloud security, Don't miss, enterprise, Government, government-backed attacks, Hot stuff, logging, Microsoft, Microsoft 365, News / SecurityTicks

Thanks Storm-0558! Microsoft to expand default access to cloud logs 20/07/2023 at 13:31 By Zeljka Zorz Starting in September 2023, more federal government and commercial Microsoft customers will have access to expanded cloud logging capabilities at no additional charge, Microsoft and the Cybersecurity and Infrastructure Security Agency (CISA) have announced on Wednesday. The announcements come

React to this headline:

Thanks Storm-0558! Microsoft to expand default access to cloud logs Read More »

Microsoft Bows to Pressure to Free Up Cloud Security Logs

China APT, CISA, cloud security, Data Breaches, Government, M365, Microsoft / SecurityTicks

Microsoft Bows to Pressure to Free Up Cloud Security Logs 19/07/2023 at 19:49 By Ryan Naraine Facing intense pressure after Chinese APT hack, Microsoft plans to expand logging defaults for lower-tier M365 customers. The post Microsoft Bows to Pressure to Free Up Cloud Security Logs appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Microsoft Bows to Pressure to Free Up Cloud Security Logs Read More »

Veeam Software delivers new backup and restore capabilities with Microsoft 365 Backup

Industry news, Microsoft, Veeam Software / SecurityTicks

Veeam Software delivers new backup and restore capabilities with Microsoft 365 Backup 19/07/2023 at 15:32 By Industry News Veeam Software announced it is integrating Veeam Backup for Microsoft 365 with newly launched Microsoft 365 Backup via their backup APIs to bring customers and partners new capabilities for backup, recovery, ransomware protection and business continuity. Veeam

React to this headline:

Veeam Software delivers new backup and restore capabilities with Microsoft 365 Backup Read More »

Splunk partners with Microsoft to strengthen digital resilience

Industry news, Microsoft, Splunk / SecurityTicks

Splunk partners with Microsoft to strengthen digital resilience 18/07/2023 at 14:03 By Industry News Splunk and Microsoft are partnering to build Splunk’s enterprise security and observability offerings on Microsoft Azure. Additionally, for the first time, Splunk solutions will be available for purchase on the Microsoft Azure Marketplace. “Splunk and Microsoft’s strategic partnership will provide our

React to this headline:

Splunk partners with Microsoft to strengthen digital resilience Read More »

Trojanized Application Preying on TeamViewer Users

Malware, Microsoft, njRAT, Remote Access Trojan, TeamViewer, trojan, Windows / SecurityTicks

Trojanized Application Preying on TeamViewer Users 13/07/2023 at 14:32 By cybleinc Cyble Research & Intelligence Labs analyzes a trojanized version of the TeamViewer application and how it distributes njRAT. The post Trojanized Application Preying on TeamViewer Users appeared first on Cyble. This article is an excerpt from Cyble View Original Source React to this headline:

React to this headline:

Trojanized Application Preying on TeamViewer Users Read More »

Chinese hackers forged authentication tokens to breach government emails

cloud security, cyber espionage, data theft, Don't miss, Europe, Government, Hot stuff, Microsoft, News, Outlook, USA, vulnerability / SecurityTicks

Chinese hackers forged authentication tokens to breach government emails 12/07/2023 at 13:17 By Zeljka Zorz Sophisticated hackers have accessed email accounts of organizations and government agencies via authentication tokens they forged by using an acquired Microsoft account (MSA) consumer signing key, the company has revealed on Tuesday. “The threat actor Microsoft links to this incident

React to this headline:

Chinese hackers forged authentication tokens to breach government emails Read More »

Microsoft patches four exploited zero-days, but lags with fixes for a fifth (CVE-2023-36884)

0-day, BlackBerry, Cisco, cyber espionage, cybercrime, Don't miss, drivers, Google, Hot stuff, Microsoft, MS Office, News, Ransomware, rootkits, security update, Tenable, Trend Micro, Volexity, vulnerability, Windows / SecurityTicks

Microsoft patches four exploited zero-days, but lags with fixes for a fifth (CVE-2023-36884) 11/07/2023 at 22:31 By Zeljka Zorz For July 2023 Patch Tuesday, Microsoft has delivered 130 patches; among them are four for vulnerabilites actively exploited by attackers, but no patch for CVE-2023-36884, an Office and Windows HTML RCE vulnerability exploited in targeted attacks

React to this headline:

Microsoft patches four exploited zero-days, but lags with fixes for a fifth (CVE-2023-36884) Read More »

July 2023 Patch Tuesday forecast: A month of instability and uncertainty

Adobe, Adobe Acrobat, apple, Cisco, Don't miss, Expert analysis, Google, Hot stuff, Ivanti, Linux, Malwarebytes, Microsoft, Mozilla, News, Oracle, Patch Tuesday / SecurityTicks

July 2023 Patch Tuesday forecast: A month of instability and uncertainty 07/07/2023 at 12:17 By Help Net Security We’re halfway through 2023 already and moving into our seventh Patch Tuesday of the year next week. There’s been a lot of activity with Microsoft this month which may impact updates we’ll see. But first taking a

React to this headline:

July 2023 Patch Tuesday forecast: A month of instability and uncertainty Read More »

Keepit launches backup and recovery service for Microsoft Azure DevOps

Industry news, Keepit, Microsoft / SecurityTicks

Keepit launches backup and recovery service for Microsoft Azure DevOps 29/06/2023 at 17:03 By Industry News Keepit launched new backup and recovery service for Microsoft Azure DevOps. “Azure DevOps has limited disaster recovery coverage. If a company loses its Azure DevOps data, it loses access to development operations, which means it loses the ability to

React to this headline:

Keepit launches backup and recovery service for Microsoft Azure DevOps Read More »

Snowflake Expands collaboration with Microsoft to enter the next wave of generative AI

Industry news, Microsoft, Snowflake / SecurityTicks

Snowflake Expands collaboration with Microsoft to enter the next wave of generative AI 26/06/2023 at 20:01 By Industry News Snowflake announced an expanded partnership with Microsoft, enabling new product integrations across AI, low code/no code application development, data governance, and more. The two companies will also implement new programs to enhance joint go-to-market strategies and

React to this headline:

Snowflake Expands collaboration with Microsoft to enter the next wave of generative AI Read More »

How hardening Microsoft 365 tenants mitigates potential cloud attacks

CISO, Don't miss, Hot stuff, Microsoft, Microsoft 365, strategy, tips, Vectra, Video / SecurityTicks

How hardening Microsoft 365 tenants mitigates potential cloud attacks 26/06/2023 at 07:01 By Help Net Security Moving critical data and workloads to the cloud has significantly changed information security teams. But most don’t have the resources to be successful in their cloud attack modeling—not to mention the deployment of measurable controls to defend against these

React to this headline:

How hardening Microsoft 365 tenants mitigates potential cloud attacks Read More »

Infosecurity Europe 2023 video walkthrough

Absolute, Akamai, alphaMountain, Apricorn, Arctic Wolf Networks, Armis, Axonius, BitSight, conferences, CrowdStrike, Cybervadis, CYE, Darktrace, Devo Technology, Don't miss, EfficientIP, Egress, FireMon, HackTheBox, Hornetsecurity, Hoxhunt, Infosecurity Europe 2023, ISC2, Island, ManageEngine, Microsoft, NetSPI, News, One Identity, OpenText, Panorays, Pentera, Pentest People, Progress, Proofpoint, Rapid7, Senseon, Video, Vulcan Cyber, WatchGuard / SecurityTicks

Infosecurity Europe 2023 video walkthrough 21/06/2023 at 11:24 By Help Net Security Infosecurity Europe 2023 is taking place in London this week, and this video provides a closer look at this year’s event. The post Infosecurity Europe 2023 video walkthrough appeared first on Help Net Security. This article is an excerpt from Help Net Security

React to this headline:

Infosecurity Europe 2023 video walkthrough Read More »

Researchers Flag Account Takeover Flaw in Microsoft Azure AD OAuth Apps

Azure, cloud security, Microsoft, noAuth, OAuth, Vulnerabilities / SecurityTicks

Researchers Flag Account Takeover Flaw in Microsoft Azure AD OAuth Apps 20/06/2023 at 23:24 By Ryan Naraine Businesses using ‘Log in with Microsoft’ could be exposed to privilege escalation and full account takeover exploits. The post Researchers Flag Account Takeover Flaw in Microsoft Azure AD OAuth Apps appeared first on SecurityWeek. This article is an

React to this headline:

Researchers Flag Account Takeover Flaw in Microsoft Azure AD OAuth Apps Read More »

Microsoft confirms DDoS attacks against M365, Azure Portal

Azure, DDoS, Don't miss, Hot stuff, Microsoft, Microsoft 365, News, OneDrive, Outlook / SecurityTicks

Microsoft confirms DDoS attacks against M365, Azure Portal 19/06/2023 at 14:02 By Helga Labus The Microsoft 365 and Azure Portal outages users expirienced this month were caused by Layer 7 DDoS attacks, Microsoft has confirmed on Friday. The DDoS attacks against Microsoft 365 and Azure Portal Throughout the first half June 2023 Microsoft confirmed, at

React to this headline:

Microsoft confirms DDoS attacks against M365, Azure Portal Read More »

Microsoft Says Early June Disruptions to Outlook, Cloud Platform, Were Cyberattacks

cybercrime, DDoS, Featured, Microsoft, Network Security, Storm-1359 / SecurityTicks

Microsoft Says Early June Disruptions to Outlook, Cloud Platform, Were Cyberattacks 18/06/2023 at 15:35 By Associated Press Early June 2023 disruptions to Microsoft’s flagship office suite were Layer 7 DDoS attacks by a shadowy new hacktivist group dubbed Storm-1359 by Microsoft. The post Microsoft Says Early June Disruptions to Outlook, Cloud Platform, Were Cyberattacks appeared

React to this headline:

Microsoft Says Early June Disruptions to Outlook, Cloud Platform, Were Cyberattacks Read More »

New Malware Campaign Targets LetsVPN Users

account hijacking, backdoor, Backdoor.Farfli, BlackMoon, cybercrime, Data leak, Farfli, Farfli Backdoor, Gaming, Keylogging, KingSoft, LetsGo, LetsGo Network, LetsVPN, Malware, Microsoft, phishing, remote access, spyware, surveillance, Threat Intelligence, VPN, Web Injection, Windows / SecurityTicks

New Malware Campaign Targets LetsVPN Users 16/06/2023 at 16:07 By cybleinc Cyble analyzes a malware campaign that infects users via fake LetsVPN Phishing pages to deliver multiple malware strains. The post New Malware Campaign Targets LetsVPN Users appeared first on Cyble. This article is an excerpt from Cyble View Original Source React to this headline:

React to this headline:

New Malware Campaign Targets LetsVPN Users Read More »