Microsoft - Security Ticks

Microsoft Warns of Windows Hyper-V Zero-Day Being Exploited

Adobe, Hyper-V, Incident Response, Malware & Threats, Microsoft, Patch Tuesday, Vulnerabilities, Zero-Day / SecurityTicks

Microsoft Warns of Windows Hyper-V Zero-Day Being Exploited 2024-07-09 at 22:04 By Ryan Naraine Patch Tuesday: Microsoft patches more than 140 security vulnerabilities in the Windows ecosystem, including a pair of exploited zero-days. The post Microsoft Warns of Windows Hyper-V Zero-Day Being Exploited appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS […]

React to this headline:

Microsoft Warns of Windows Hyper-V Zero-Day Being Exploited Read More »

Skillsoft partners with Microsoft to develop GenAI skilling program

Industry news, Microsoft, Skillsoft / SecurityTicks

Skillsoft partners with Microsoft to develop GenAI skilling program 2024-07-09 at 15:31 By Industry News Skillsoft announced a comprehensive generative AI (GenAI) skilling program developed in collaboration with Microsoft. Leveraging Skillsoft’s AI Skill Accelerator, the program upskills organizations and their workforce to effectively use Microsoft AI — including Copilot and Azure Open AI — and

React to this headline:

Skillsoft partners with Microsoft to develop GenAI skilling program Read More »

Microsoft Banning Android Phones for Staff in China

Android, China, CSRB, Data Breaches, iPhone, Microsoft, Mobile & Wireless, Nation-State / SecurityTicks

Microsoft Banning Android Phones for Staff in China 2024-07-08 at 23:31 By SecurityWeek News Starting in September, Microsoft will mandate the the use of Apple’s iPhones to authenticate identities when logging into work machines. The post Microsoft Banning Android Phones for Staff in China appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Microsoft Banning Android Phones for Staff in China Read More »

TeamViewer: Network segmentation hobbled Midnight Blizzard’s attack

APT, data breach, Don't miss, enterprise, Hot stuff, Microsoft, News, TeamViewer / SecurityTicks

TeamViewer: Network segmentation hobbled Midnight Blizzard’s attack 2024-07-08 at 20:31 By Zeljka Zorz TeamViewer, the company developing the popular remote access/control software with the same name, has finished the investigation into the breach it detected in late June 2024, and has confirmed that it was limited to their internal corporate IT environment. “Neither our separated

React to this headline:

TeamViewer: Network segmentation hobbled Midnight Blizzard’s attack Read More »

July 2024 Patch Tuesday forecast: The end of an AV giant in the US

Expert analysis, Microsoft, News, opinion, Patch Tuesday, predictions / SecurityTicks

July 2024 Patch Tuesday forecast: The end of an AV giant in the US 2024-07-08 at 07:31 By Mirko Zorz The US celebrated Independence Day last week, providing many with a long weekend leading into patch week. With summer vacations underway, many developers must be out of the office because June was fairly quiet regarding

React to this headline:

July 2024 Patch Tuesday forecast: The end of an AV giant in the US Read More »

IBM Consulting partners with Microsoft to help clients modernize security operations

IBM, Industry news, Microsoft / SecurityTicks

IBM Consulting partners with Microsoft to help clients modernize security operations 2024-07-02 at 11:01 By Industry News IBM Consulting and Microsoft announce strengthened cybersecurity collaboration to help clients simplify and modernize their security operations, and manage and protect their hybrid cloud identities. As organizations embrace hybrid cloud and AI to drive innovation, they require advanced

React to this headline:

IBM Consulting partners with Microsoft to help clients modernize security operations Read More »

Microsoft Alerts More Customers to Email Theft in Expanding Midnight Blizzard Hack

CSRB, Cyberwarfare, Microsoft, Midnight Blizzard, Nation-State, Russia / SecurityTicks

Microsoft Alerts More Customers to Email Theft in Expanding Midnight Blizzard Hack 2024-06-28 at 21:01 By Ryan Naraine Shockwaves from the Russian government’s hack of Microsoft’s corporate infrastructure continue to spread as the victim pool widens. The post Microsoft Alerts More Customers to Email Theft in Expanding Midnight Blizzard Hack appeared first on SecurityWeek. This

React to this headline:

Microsoft Alerts More Customers to Email Theft in Expanding Midnight Blizzard Hack Read More »

Argus Cyber Security and Microsoft partner to secure automotive fleets throughout the vehicle lifecycle

Argus Cyber Security, Industry news, Microsoft / SecurityTicks

Argus Cyber Security and Microsoft partner to secure automotive fleets throughout the vehicle lifecycle 2024-06-17 at 14:47 By Industry News Argus Cyber Security is collaborating with Microsoft to build a next generation, end-to-end platform for automotive and mobility security. This Argus Vehicle Security Platform consists of two integrated solutions that combine Argus’ automotive cybersecurity portfolio

React to this headline:

Argus Cyber Security and Microsoft partner to secure automotive fleets throughout the vehicle lifecycle Read More »

Microsoft delays Windows Recall rollout, more security testing needed

data security, Don't miss, Hot stuff, Microsoft, News, Privacy, Windows / SecurityTicks

Microsoft delays Windows Recall rollout, more security testing needed 2024-06-14 at 15:46 By Zeljka Zorz Microsoft is delaying the release of Recall, a controversial Windows 11 feature that will allow users to search their computer for specific content that has previously been viewed by them. A preview of Recall should have been broadly available on

React to this headline:

Microsoft delays Windows Recall rollout, more security testing needed Read More »

Microsoft Delaying Recall Feature to Improve Security

AI, Artificial Intelligence, Endpoint Security, Featured, Microsoft, Privacy, Windows Recall / SecurityTicks

Microsoft Delaying Recall Feature to Improve Security 2024-06-14 at 13:46 By Eduard Kovacs Microsoft is not rolling out Recall with Copilot+ PCs as it’s seeking additional feedback and working on improving security. The post Microsoft Delaying Recall Feature to Improve Security appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

Microsoft Delaying Recall Feature to Improve Security Read More »

Microsoft launches cybersecurity program to tackle attacks, protect rural hospitals

cyberattacks, cybersecurity, Government, healthcare, Microsoft, News, USA / SecurityTicks

Microsoft launches cybersecurity program to tackle attacks, protect rural hospitals 2024-06-12 at 13:01 By Help Net Security Microsoft has unveiled a new cybersecurity program to support hospitals serving more than 60 million people living in rural America. In 2023, the healthcare sector reported more ransomware attacks than any other critical infrastructure sector and attacks involving

React to this headline:

Microsoft launches cybersecurity program to tackle attacks, protect rural hospitals Read More »

Patch Tuesday: Remote Code Execution Flaw in Microsoft Message Queuing

CVE-2024-30078, CVE-2024-30080, Malware & Threats, Microsoft, Patch Tuesday, Vulnerabilities / SecurityTicks

Patch Tuesday: Remote Code Execution Flaw in Microsoft Message Queuing 2024-06-12 at 00:46 By Ryan Naraine The Windows vulnerability carries a CVSS severity score of 9.8/10 and can be exploited by via specially crafted malicious MSMQ packets. The post Patch Tuesday: Remote Code Execution Flaw in Microsoft Message Queuing appeared first on SecurityWeek. This article

React to this headline:

Patch Tuesday: Remote Code Execution Flaw in Microsoft Message Queuing Read More »

Microsoft fixes RCE vulnerabilities in MSMQ, Outlook (CVE-2024-30080, CVE-2024-30103)

Automox, CVE, Don't miss, Hot stuff, Microsoft, Morphisec, News, Outlook, Patch Tuesday, security update, Tenable, Trend Micro / SecurityTicks

Microsoft fixes RCE vulnerabilities in MSMQ, Outlook (CVE-2024-30080, CVE-2024-30103) 2024-06-11 at 23:01 By Zeljka Zorz June 2024 Patch Tuesday is here and Microsoft has delivered fixes for a critical MSMQ flaw (CVE-2024-30080) and a RCE vulnerability in Microsoft Outlook (CVE-2024-30103). 49 CVE-numbered vulnerabilities have been fixed in total, none of which have been exploited in

React to this headline:

Microsoft fixes RCE vulnerabilities in MSMQ, Outlook (CVE-2024-30080, CVE-2024-30103) Read More »

Windows Recall will be opt-in and the data more secure, Microsoft says

data security, Don't miss, Encryption, Hot stuff, Microsoft, News, Privacy, Windows / SecurityTicks

Windows Recall will be opt-in and the data more secure, Microsoft says 2024-06-07 at 22:02 By Zeljka Zorz The insistent public complaints and proof-of-concept tools have have borne fruit: Microsoft has realized that the security of its recently previewed Windows Recall feature leaves much to be desired, and has announced important changes. About Windows Recall

React to this headline:

Windows Recall will be opt-in and the data more secure, Microsoft says Read More »

Microsoft Bows to Public Pressure, Disables Controversial Windows Recall by Default

AI/ML, Artificial Intelligence, CSRB, Data Protection, Featured, Microsoft, Windows Recall / SecurityTicks

Microsoft Bows to Public Pressure, Disables Controversial Windows Recall by Default 2024-06-07 at 20:17 By Ryan Naraine Amidst public pressure, Microsoft changes the set-up experience of Copilot+ PCs to disable the controversial Windows Recall feature by default. The post Microsoft Bows to Public Pressure, Disables Controversial Windows Recall by Default appeared first on SecurityWeek. This

React to this headline:

Microsoft Bows to Public Pressure, Disables Controversial Windows Recall by Default Read More »

June 2024 Patch Tuesday forecast: Multiple announcements from Microsoft

Adobe, apple, cybersecurity, Don't miss, Hot stuff, Microsoft, Mozilla, News, opinion, Patch Tuesday, predictions, security update, Windows / SecurityTicks

June 2024 Patch Tuesday forecast: Multiple announcements from Microsoft 2024-06-07 at 08:16 By Help Net Security May 2024 Patch Tuesday was unusual because we had security updates from Adobe, Apple, Google, Mozilla, and Microsoft on the same day. While individually from each vendor, the updates weren’t that large, managing them together was more challenging. On

React to this headline:

June 2024 Patch Tuesday forecast: Multiple announcements from Microsoft Read More »

Photos: Infosecurity Europe 2024

Adaptive Shield, Akamai, conferences, Jamf, Microsoft, News, Plainsea, Qualys / SecurityTicks

Photos: Infosecurity Europe 2024 2024-06-05 at 16:01 By Help Net Security Infosecurity Europe is taking place at ExCel London from 4-6 June 2024. Help Net Security is on-site. This gallery takes you inside the event. The featured vendors are: Plainsea, Qualys, Akamai, Microsoft, Bridewell, Adaptive Shield, Jamf. The post Photos: Infosecurity Europe 2024 appeared first

React to this headline:

Photos: Infosecurity Europe 2024 Read More »

TotalRecall shows how easily data collected by Windows Recall can be stolen

Artificial Intelligence, data security, data theft, Don't miss, GitHub, Hot stuff, Microsoft, News, PoC, Privacy, software, Windows / SecurityTicks

TotalRecall shows how easily data collected by Windows Recall can be stolen 2024-06-05 at 13:16 By Zeljka Zorz Ethical hacker Alexander Hagenah has created TotalRecall, a tool that demonstrates how malicious individuals could abuse Windows’ newly announced Recall feature to steal sensitive information. TotalRecall results (Source: Alexander Hagenah) Copilot+ Recall and its security pitfalls On

React to this headline:

TotalRecall shows how easily data collected by Windows Recall can be stolen Read More »

Microsoft’s Windows Recall: Cutting-Edge Search Tech or Creepy Overreach?

AI/ML, Artificial Intelligence, ChatGPT, Data Protection, Endpoint Security, Microsoft, Windows Recall / SecurityTicks

Microsoft’s Windows Recall: Cutting-Edge Search Tech or Creepy Overreach? 2024-05-30 at 20:31 By Ryan Naraine SecurityWeek editor-at-large Ryan Naraine examines the broad tension between tech innovation and privacy rights at a time when ChatGPT-like bots and generative-AI apps are starting to dominate the landscape. The post Microsoft’s Windows Recall: Cutting-Edge Search Tech or Creepy Overreach?

React to this headline:

Microsoft’s Windows Recall: Cutting-Edge Search Tech or Creepy Overreach? Read More »

Moonstone Sleet: A new North Korean threat actor

cyber espionage, data theft, Don't miss, Hot stuff, Microsoft, News, North Korea, Ransomware / SecurityTicks

Moonstone Sleet: A new North Korean threat actor 2024-05-29 at 15:46 By Zeljka Zorz Microsoft has named yet another state-aligned threat actor: Moonstone Sleet (formerly Storm-1789), which engages in cyberespionage and ransomware attacks to further goals of the North Korean regime. “Moonstone Sleet uses tactics, techniques, and procedures (TTPs) also used by other North Korean

React to this headline:

Moonstone Sleet: A new North Korean threat actor Read More »