Microsoft - Security Ticks

Microsoft delays Windows Recall rollout, more security testing needed

data security, Don't miss, Hot stuff, Microsoft, News, Privacy, Windows / SecurityTicks

Microsoft delays Windows Recall rollout, more security testing needed 2024-06-14 at 15:46 By Zeljka Zorz Microsoft is delaying the release of Recall, a controversial Windows 11 feature that will allow users to search their computer for specific content that has previously been viewed by them. A preview of Recall should have been broadly available on […]

React to this headline:

Microsoft delays Windows Recall rollout, more security testing needed Read More »

Microsoft Delaying Recall Feature to Improve Security

AI, Artificial Intelligence, Endpoint Security, Featured, Microsoft, Privacy, Windows Recall / SecurityTicks

Microsoft Delaying Recall Feature to Improve Security 2024-06-14 at 13:46 By Eduard Kovacs Microsoft is not rolling out Recall with Copilot+ PCs as it’s seeking additional feedback and working on improving security. The post Microsoft Delaying Recall Feature to Improve Security appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

Microsoft Delaying Recall Feature to Improve Security Read More »

Microsoft launches cybersecurity program to tackle attacks, protect rural hospitals

cyberattacks, cybersecurity, Government, healthcare, Microsoft, News, USA / SecurityTicks

Microsoft launches cybersecurity program to tackle attacks, protect rural hospitals 2024-06-12 at 13:01 By Help Net Security Microsoft has unveiled a new cybersecurity program to support hospitals serving more than 60 million people living in rural America. In 2023, the healthcare sector reported more ransomware attacks than any other critical infrastructure sector and attacks involving

React to this headline:

Microsoft launches cybersecurity program to tackle attacks, protect rural hospitals Read More »

Patch Tuesday: Remote Code Execution Flaw in Microsoft Message Queuing

CVE-2024-30078, CVE-2024-30080, Malware & Threats, Microsoft, Patch Tuesday, Vulnerabilities / SecurityTicks

Patch Tuesday: Remote Code Execution Flaw in Microsoft Message Queuing 2024-06-12 at 00:46 By Ryan Naraine The Windows vulnerability carries a CVSS severity score of 9.8/10 and can be exploited by via specially crafted malicious MSMQ packets. The post Patch Tuesday: Remote Code Execution Flaw in Microsoft Message Queuing appeared first on SecurityWeek. This article

React to this headline:

Patch Tuesday: Remote Code Execution Flaw in Microsoft Message Queuing Read More »

Microsoft fixes RCE vulnerabilities in MSMQ, Outlook (CVE-2024-30080, CVE-2024-30103)

Automox, CVE, Don't miss, Hot stuff, Microsoft, Morphisec, News, Outlook, Patch Tuesday, security update, Tenable, Trend Micro / SecurityTicks

Microsoft fixes RCE vulnerabilities in MSMQ, Outlook (CVE-2024-30080, CVE-2024-30103) 2024-06-11 at 23:01 By Zeljka Zorz June 2024 Patch Tuesday is here and Microsoft has delivered fixes for a critical MSMQ flaw (CVE-2024-30080) and a RCE vulnerability in Microsoft Outlook (CVE-2024-30103). 49 CVE-numbered vulnerabilities have been fixed in total, none of which have been exploited in

React to this headline:

Microsoft fixes RCE vulnerabilities in MSMQ, Outlook (CVE-2024-30080, CVE-2024-30103) Read More »

Windows Recall will be opt-in and the data more secure, Microsoft says

data security, Don't miss, Encryption, Hot stuff, Microsoft, News, Privacy, Windows / SecurityTicks

Windows Recall will be opt-in and the data more secure, Microsoft says 2024-06-07 at 22:02 By Zeljka Zorz The insistent public complaints and proof-of-concept tools have have borne fruit: Microsoft has realized that the security of its recently previewed Windows Recall feature leaves much to be desired, and has announced important changes. About Windows Recall

React to this headline:

Windows Recall will be opt-in and the data more secure, Microsoft says Read More »

Microsoft Bows to Public Pressure, Disables Controversial Windows Recall by Default

AI/ML, Artificial Intelligence, CSRB, Data Protection, Featured, Microsoft, Windows Recall / SecurityTicks

Microsoft Bows to Public Pressure, Disables Controversial Windows Recall by Default 2024-06-07 at 20:17 By Ryan Naraine Amidst public pressure, Microsoft changes the set-up experience of Copilot+ PCs to disable the controversial Windows Recall feature by default. The post Microsoft Bows to Public Pressure, Disables Controversial Windows Recall by Default appeared first on SecurityWeek. This

React to this headline:

Microsoft Bows to Public Pressure, Disables Controversial Windows Recall by Default Read More »

June 2024 Patch Tuesday forecast: Multiple announcements from Microsoft

Adobe, apple, cybersecurity, Don't miss, Hot stuff, Microsoft, Mozilla, News, opinion, Patch Tuesday, predictions, security update, Windows / SecurityTicks

June 2024 Patch Tuesday forecast: Multiple announcements from Microsoft 2024-06-07 at 08:16 By Help Net Security May 2024 Patch Tuesday was unusual because we had security updates from Adobe, Apple, Google, Mozilla, and Microsoft on the same day. While individually from each vendor, the updates weren’t that large, managing them together was more challenging. On

React to this headline:

June 2024 Patch Tuesday forecast: Multiple announcements from Microsoft Read More »

Photos: Infosecurity Europe 2024

Adaptive Shield, Akamai, conferences, Jamf, Microsoft, News, Plainsea, Qualys / SecurityTicks

Photos: Infosecurity Europe 2024 2024-06-05 at 16:01 By Help Net Security Infosecurity Europe is taking place at ExCel London from 4-6 June 2024. Help Net Security is on-site. This gallery takes you inside the event. The featured vendors are: Plainsea, Qualys, Akamai, Microsoft, Bridewell, Adaptive Shield, Jamf. The post Photos: Infosecurity Europe 2024 appeared first

React to this headline:

Photos: Infosecurity Europe 2024 Read More »

TotalRecall shows how easily data collected by Windows Recall can be stolen

Artificial Intelligence, data security, data theft, Don't miss, GitHub, Hot stuff, Microsoft, News, PoC, Privacy, software, Windows / SecurityTicks

TotalRecall shows how easily data collected by Windows Recall can be stolen 2024-06-05 at 13:16 By Zeljka Zorz Ethical hacker Alexander Hagenah has created TotalRecall, a tool that demonstrates how malicious individuals could abuse Windows’ newly announced Recall feature to steal sensitive information. TotalRecall results (Source: Alexander Hagenah) Copilot+ Recall and its security pitfalls On

React to this headline:

TotalRecall shows how easily data collected by Windows Recall can be stolen Read More »

Microsoft’s Windows Recall: Cutting-Edge Search Tech or Creepy Overreach?

AI/ML, Artificial Intelligence, ChatGPT, Data Protection, Endpoint Security, Microsoft, Windows Recall / SecurityTicks

Microsoft’s Windows Recall: Cutting-Edge Search Tech or Creepy Overreach? 2024-05-30 at 20:31 By Ryan Naraine SecurityWeek editor-at-large Ryan Naraine examines the broad tension between tech innovation and privacy rights at a time when ChatGPT-like bots and generative-AI apps are starting to dominate the landscape. The post Microsoft’s Windows Recall: Cutting-Edge Search Tech or Creepy Overreach?

React to this headline:

Microsoft’s Windows Recall: Cutting-Edge Search Tech or Creepy Overreach? Read More »

Moonstone Sleet: A new North Korean threat actor

cyber espionage, data theft, Don't miss, Hot stuff, Microsoft, News, North Korea, Ransomware / SecurityTicks

Moonstone Sleet: A new North Korean threat actor 2024-05-29 at 15:46 By Zeljka Zorz Microsoft has named yet another state-aligned threat actor: Moonstone Sleet (formerly Storm-1789), which engages in cyberespionage and ransomware attacks to further goals of the North Korean regime. “Moonstone Sleet uses tactics, techniques, and procedures (TTPs) also used by other North Korean

React to this headline:

Moonstone Sleet: A new North Korean threat actor Read More »

US retailers under attack by gift card-thieving cyber gang

cybercrime, Don't miss, FBI, Hot stuff, Microsoft, News, Retail, tips / SecurityTicks

US retailers under attack by gift card-thieving cyber gang 2024-05-24 at 14:01 By Zeljka Zorz Earlier this month, the FBI published a private industry notification about Storm-0539 (aka Atlas Lion), a Morocco-based cyber criminal group that specializes in compromising retailers and creating fraudulent gift cards. Microsoft then went more in-dept on the group’s tactics, techniques,

React to this headline:

US retailers under attack by gift card-thieving cyber gang Read More »

Windows’ new Recall feature: A privacy and security nightmare?

data security, Don't miss, Hot stuff, Microsoft, News, Privacy, Windows / SecurityTicks

Windows’ new Recall feature: A privacy and security nightmare? 2024-05-22 at 15:32 By Zeljka Zorz Microsoft has announced the Copilot+ line of Windows 11-powered PCs that, among other things, will have Recall, a feature that takes screenshots every few seconds, encrypts them, saves them, and leverages AI to allow users to search through them for

React to this headline:

Windows’ new Recall feature: A privacy and security nightmare? Read More »

Google Cites ‘Monoculture’ Risks in Response to CSRB Report on Microsoft

CISA, cloud security, CSRB, Google Cloud, Government, Microsoft, Nation-State / SecurityTicks

Google Cites ‘Monoculture’ Risks in Response to CSRB Report on Microsoft 2024-05-20 at 22:01 By Ryan Naraine Google is invoking the ‘monoculture’ word in response to a scathing U.S. government report on Microsoft’s inadequate cybersecurity practices. The post Google Cites ‘Monoculture’ Risks in Response to CSRB Report on Microsoft appeared first on SecurityWeek. This article

React to this headline:

Google Cites ‘Monoculture’ Risks in Response to CSRB Report on Microsoft Read More »

Bitcoin would need to hit $93K to flip Silver right now

Amazon, apple, Crypto Fear & Greed Index, gold, Google, Microsoft, NVIDIA, Saudi Aramco, silver / SecurityTicks

Bitcoin would need to hit $93K to flip Silver right now 2024-05-20 at 09:01 By Cointelegraph by Brayden Lindrea Silver’s market cap has risen to over $500 billion larger than Bitcoin, despite the cryptocurrency flipping the precious metal just two months ago. This article is an excerpt from Cointelegraph.com News View Original Source React to

React to this headline:

Bitcoin would need to hit $93K to flip Silver right now Read More »

Microsoft faces multi-billion dollar fine in EU over Bing AI

Europe, European Union, Fines, Microsoft / SecurityTicks

Microsoft faces multi-billion dollar fine in EU over Bing AI 2024-05-19 at 03:01 By Cointelegraph by Tristan Greene The Redmond company could be fined as much as 1% of its annual revenue if it doesn’t respond by May 27. This article is an excerpt from Cointelegraph.com News View Original Source React to this headline:

React to this headline:

Microsoft faces multi-billion dollar fine in EU over Bing AI Read More »

‘We’re just scratching the surface’ of crypto and AI — Microsoft exec

Cryptocurrencies, Fintech, Microsoft, PayPal, Technology, Web3 / SecurityTicks

‘We’re just scratching the surface’ of crypto and AI — Microsoft exec 2024-05-16 at 17:01 By Cointelegraph by Andrew Singer The symbiotic relationship between AI and crypto is still in its nascent stages, according to tech execs. This article is an excerpt from Cointelegraph.com News View Original Source React to this headline:

React to this headline:

‘We’re just scratching the surface’ of crypto and AI — Microsoft exec Read More »

Microsoft Warns of Active Zero-Day Exploitation, Patches 60 Windows Vulnerabilities

CVE-2024-30040, CVE-2024-30044, CVE-2024-30051, Featured, Malware & Threats, Microsoft, Patch Tuesday, Ransomware, Vulnerabilities / SecurityTicks

Microsoft Warns of Active Zero-Day Exploitation, Patches 60 Windows Vulnerabilities 2024-05-14 at 22:47 By Ryan Naraine Patch Tuesday: Microsoft documents 60 security flaws in multiple software products and flags an actively exploited Windows zero-day for urgent attention. The post Microsoft Warns of Active Zero-Day Exploitation, Patches 60 Windows Vulnerabilities appeared first on SecurityWeek. This article

React to this headline:

Microsoft Warns of Active Zero-Day Exploitation, Patches 60 Windows Vulnerabilities Read More »

May 2024 Patch Tuesday: Microsoft fixes exploited zero-days (CVE-2024-30051, CVE-2024-30040)

0-day, Don't miss, Hot stuff, Kaspersky, Mandiant, Microsoft, News, Patch Tuesday, security update, SharePoint, Trend Micro, vulnerability / SecurityTicks

May 2024 Patch Tuesday: Microsoft fixes exploited zero-days (CVE-2024-30051, CVE-2024-30040) 2024-05-14 at 22:02 By Zeljka Zorz For May 2024 Patch Tuesday, Microsoft has released fixes for 59 CVE-numbered vulnerabilities, including two zero-days (CVE-2024-30051, CVE-2024-30040) actively exploited by attackers. CVE-2024-30051 and CVE-2024-30040 CVE-2024-30051 is a heap-based buffer overflow vulnerability affecting the Windows DWM Core Library that

React to this headline:

May 2024 Patch Tuesday: Microsoft fixes exploited zero-days (CVE-2024-30051, CVE-2024-30040) Read More »