Microsoft - Security Ticks

LSA Whisperer: Open-source tools for interacting with authentication packages

cybersecurity, GitHub, Microsoft, News, open source, red team, software / SecurityTicks

LSA Whisperer: Open-source tools for interacting with authentication packages 2024-04-26 at 07:32 By Mirko Zorz LSA Whisperer consists of open-source tools designed to interact with authentication packages through their unique messaging protocols. Support is currently provided for the cloudap, kerberos, msv1_0, negotiate, pku2u, schannel packages and cloudap’s AzureAD plugin. Partial or unstable support is provided […]

React to this headline:

LSA Whisperer: Open-source tools for interacting with authentication packages Read More »

Hackers backdoored Cisco ASA devices via two zero-days (CVE-2024-20353, CVE-2024-20359)

0-day, CISA, Cisco, Don't miss, firewall, government-backed attacks, Hot stuff, Lumen, Microsoft, NCSC, News, security update / SecurityTicks

Hackers backdoored Cisco ASA devices via two zero-days (CVE-2024-20353, CVE-2024-20359) 2024-04-24 at 21:31 By Zeljka Zorz A state-sponsored threat actor has managed to compromise Cisco Adaptive Security Appliances (ASA) used on government networks across the globe and use two zero-day vulnerabilities (CVE-2024-20353, CVE-2024-20359) to install backdoors on them, Cisco Talos researchers have shared on Wednesday.

React to this headline:

Hackers backdoored Cisco ASA devices via two zero-days (CVE-2024-20353, CVE-2024-20359) Read More »

Coca‑Cola pours $1.1B into generative AI experiment with Microsoft

Azure, Cloud Services, Microsoft / SecurityTicks

Coca‑Cola pours $1.1B into generative AI experiment with Microsoft 2024-04-24 at 14:01 By Cointelegraph by Arijit Sarkar Microsoft intends to use services like Azure OpenAI Service and Copilot for Microsoft 365 to help drive AI innovation for the Coca‑Cola Company and its network of independent bottlers worldwide. This article is an excerpt from Cointelegraph.com News

React to this headline:

Coca‑Cola pours $1.1B into generative AI experiment with Microsoft Read More »

Russian Cyberspies Deliver ‘GooseEgg’ Malware to Government Organizations

APT28, espionage, Malware, Malware & Threats, Microsoft, Nation-State, Russia / SecurityTicks

Russian Cyberspies Deliver ‘GooseEgg’ Malware to Government Organizations 2024-04-23 at 17:16 By Ionut Arghire Russia-linked APT28 deploys the GooseEgg post-exploitation tool against numerous US and European organizations. The post Russian Cyberspies Deliver ‘GooseEgg’ Malware to Government Organizations appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to

React to this headline:

Russian Cyberspies Deliver ‘GooseEgg’ Malware to Government Organizations Read More »

Russian hackers’ custom tool exploits old Windows Print Spooler flaw (CVE-2022-38028)

0-day, APT, CVE, cyber espionage, Don't miss, exploit, Hot stuff, Microsoft, News, Windows / SecurityTicks

Russian hackers’ custom tool exploits old Windows Print Spooler flaw (CVE-2022-38028) 2024-04-23 at 17:01 By Zeljka Zorz For nearly four years and perhaps even longer, Forest Blizzard (aka Fancy Bear, aka APT28) has been using a custom tool that exploits a specific vulnerability in Windows Print Spooler service (CVE-2022-38028). Dubbed GooseEgg, the tool is a

React to this headline:

Russian hackers’ custom tool exploits old Windows Print Spooler flaw (CVE-2022-38028) Read More »

Meta launches ‘most capable openly available LLM to date’ rivalling GPT and Claude

ChatGPT, Google, Meta, Microsoft, OpenAI / SecurityTicks

Meta launches ‘most capable openly available LLM to date’ rivalling GPT and Claude 2024-04-18 at 23:01 By Cointelegraph by Tristan Greene Llama-3 may be the company’s most ambitious artificial intelligence project yet. This article is an excerpt from Cointelegraph.com News View Original Source React to this headline:

React to this headline:

Meta launches ‘most capable openly available LLM to date’ rivalling GPT and Claude Read More »

Microsoft pours $1.5B into UAE AI company, sets sights on global expansion

AI development, G42, global reach, Microsoft, strategic partnership, technology innovation / SecurityTicks

Microsoft pours $1.5B into UAE AI company, sets sights on global expansion 2024-04-16 at 12:01 By Cointelegraph by Savannah Fortis The strategic partnership between Microsoft and Abu Dhabi’s G42 aims to bolster AI innovation and expand global accessibility to cutting-edge technologies. This article is an excerpt from Cointelegraph.com News View Original Source React to this

React to this headline:

Microsoft pours $1.5B into UAE AI company, sets sights on global expansion Read More »

UK watchdog worries about tech giants’ AI market control

Amazon, Meta, Microsoft, OpenAI, Technology, UK Government / SecurityTicks

UK watchdog worries about tech giants’ AI market control 2024-04-12 at 13:01 By Cointelegraph by Amaka Nwaokocha The regulator acknowledges tech partnerships’ potential benefits but warns against dominant ones, which could harm competition. This article is an excerpt from Cointelegraph.com News View Original Source React to this headline:

React to this headline:

UK watchdog worries about tech giants’ AI market control Read More »

US Government on High Alert as Russian Hackers Steal Critical Correspondence From Microsoft

CISA, Data Breaches, Featured, Incident Response, Microsoft, Midnight Blizzard, Nation-State, Nobelium, Russia / SecurityTicks

US Government on High Alert as Russian Hackers Steal Critical Correspondence From Microsoft 2024-04-11 at 23:46 By Ryan Naraine The US government says Midnight Blizzard’s compromise of Microsoft corporate email accounts “presents a grave and unacceptable risk to federal agencies.” The post US Government on High Alert as Russian Hackers Steal Critical Correspondence From Microsoft

React to this headline:

US Government on High Alert as Russian Hackers Steal Critical Correspondence From Microsoft Read More »

Microsoft patches actively exploited security feature bypass vulnerability (CVE-2024-29988)

CISA, CVE, Don't miss, Hot stuff, Microsoft, News, Patch Tuesday, security update, SonicWall, Tenable, Trend Micro, vulnerability, vulnerability management / SecurityTicks

Microsoft patches actively exploited security feature bypass vulnerability (CVE-2024-29988) 2024-04-09 at 22:35 By Zeljka Zorz On this April 2024 Patch Tuesday, Microsoft has fixed a record 147 CVE-numbered vulnerabilities, including CVE-2024-29988, a vulnerability that Microsoft hasn’t marked as exploited, but Peter Girnus, senior threat researcher with Trend Micro’s Zero Day Initiative (ZDI), has found being

React to this headline:

Microsoft patches actively exploited security feature bypass vulnerability (CVE-2024-29988) Read More »

Microsoft Plugs Gaping Hole in Azure Kubernetes Service Confidential Containers

cloud security, CVE-2024-29990, Kubernetes, Microsoft, Patch Tuesday, Vulnerabilities / SecurityTicks

Microsoft Plugs Gaping Hole in Azure Kubernetes Service Confidential Containers 2024-04-09 at 22:02 By Ryan Naraine Patch Tuesday: Microsoft warns that unauthenticated hackers can take complete control of Azure Kubernetes clusters. The post Microsoft Plugs Gaping Hole in Azure Kubernetes Service Confidential Containers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Microsoft Plugs Gaping Hole in Azure Kubernetes Service Confidential Containers Read More »

April 2024 Patch Tuesday forecast: New and old from Microsoft

Adobe, apple, Don't miss, Expert analysis, Google, Hot stuff, Microsoft, Mozilla, News, opinion, Patch Tuesday, Windows / SecurityTicks

April 2024 Patch Tuesday forecast: New and old from Microsoft 2024-04-08 at 08:31 By Help Net Security This month, we have a new product preview from Microsoft, and some older products are being prepared for end-of-support. But before we go there, March 2024 Patch Tuesday was pretty mild, with 60 unique vulnerabilities addressed. We saw

React to this headline:

April 2024 Patch Tuesday forecast: New and old from Microsoft Read More »

Microsoft’s Security Chickens Have Come Home to Roost

China APT, cloud security, CSRB, Government, M365, Microsoft, Nation-State / SecurityTicks

Microsoft’s Security Chickens Have Come Home to Roost 2024-04-04 at 13:16 By Ryan Naraine News analysis: SecurityWeek editor-at-large Ryan Naraine reads the CSRB report on China’s audacious Microsoft’s Exchange Online hack and isn’t at all surprised by the findings. The post Microsoft’s Security Chickens Have Come Home to Roost appeared first on SecurityWeek. This article

React to this headline:

Microsoft’s Security Chickens Have Come Home to Roost Read More »

A “cascade” of errors let Chinese hackers into US government inboxes

APT, CISA, cloud security, CSP, Don't miss, Government, government-backed attacks, Hot stuff, Microsoft, News, UK, USA / SecurityTicks

A “cascade” of errors let Chinese hackers into US government inboxes 2024-04-03 at 16:46 By Zeljka Zorz Microsoft still doesn’t known how Storm-0558 attackers managed to steal the Microsoft Services Account cryptographic key they used to forge authentication tokens needed to access email accounts belonging to US government officials. “The stolen 2016 MSA key in

React to this headline:

A “cascade” of errors let Chinese hackers into US government inboxes Read More »

Bitcoin’s 2023–2024 growth rate has it on track to surpass Microsoft within a year

Amazon, apple, Bitcoin Price, Cryptocurrencies, gold, Google, Microsoft, NVIDIA, silver / SecurityTicks

Bitcoin’s 2023–2024 growth rate has it on track to surpass Microsoft within a year 2024-03-29 at 21:01 By Cointelegraph by Tristan Greene After Microsoft, all that’s left is gold. But Bitcoin will need a price point north of $800,000 to climb that mountain. This article is an excerpt from Cointelegraph.com News View Original Source React

React to this headline:

Bitcoin’s 2023–2024 growth rate has it on track to surpass Microsoft within a year Read More »

Nvidia CEO’s simple solution to AI hallucination could upend crypto — but only if it works

bot, ChatGPT, Cryptocurrencies, Google, Microsoft, NVIDIA, OpenAI, trading / SecurityTicks

Nvidia CEO’s simple solution to AI hallucination could upend crypto — but only if it works 2024-03-21 at 20:01 By Cointelegraph by Tristan Greene The only problem: Jensen Huang’s solution is already out there, and AI systems still hallucinate. This article is an excerpt from Cointelegraph.com News View Original Source React to this headline:

React to this headline:

Nvidia CEO’s simple solution to AI hallucination could upend crypto — but only if it works Read More »

Microsoft Patches Xbox Vulnerability Following Public Disclosure

Microsoft, Vulnerabilities, vulnerability, Xbox / SecurityTicks

Microsoft Patches Xbox Vulnerability Following Public Disclosure 2024-03-21 at 15:46 By Eduard Kovacs Microsoft patches Xbox Gaming Services vulnerability CVE-2024-28916 after initially saying it was not a security issue. The post Microsoft Patches Xbox Vulnerability Following Public Disclosure appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React

React to this headline:

Microsoft Patches Xbox Vulnerability Following Public Disclosure Read More »

Microsoft Hires Influential AI Figure Mustafa Suleyman to Head up Consumer AI Business

AI, Artificial Intelligence, Microsoft, Uncategorized / SecurityTicks

Microsoft Hires Influential AI Figure Mustafa Suleyman to Head up Consumer AI Business 2024-03-20 at 18:16 By Associated Press Microsoft hired Mustafa Suleyman to head up its new AI business, adding an influential figure to its pool of talent leading the charge to build a technology that Suleyman views as both as a boon and

React to this headline:

Microsoft Hires Influential AI Figure Mustafa Suleyman to Head up Consumer AI Business Read More »

Microsoft Copilot for Security Official Launch Date Announced

AI, artificial inteligence, Artificial Intelligence, Copilot, Microsoft, security product / SecurityTicks

Microsoft Copilot for Security Official Launch Date Announced 2024-03-14 at 15:43 By Eduard Kovacs Microsoft announces that its Copilot for Security generative AI security solution will become generally available on April 1. The post Microsoft Copilot for Security Official Launch Date Announced appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

Microsoft Copilot for Security Official Launch Date Announced Read More »

March 2024 Patch Tuesday: Microsoft fixes critical bugs in Windows Hyper-V

Automox, Don't miss, Hot stuff, Microsoft, Microsoft Exchange, News, Patch Tuesday, security update, Tenable, Trend Micro, Windows / SecurityTicks

March 2024 Patch Tuesday: Microsoft fixes critical bugs in Windows Hyper-V 2024-03-12 at 22:11 By Zeljka Zorz On this March 2024 Patch Tuesday, Microsoft has released fixes for 59 CVE-numbered vulnerabilities, but – welcome news! – none of them are currently publicly known or actively exploited. Last month, though, several days after Patch Tuesday, the

React to this headline:

March 2024 Patch Tuesday: Microsoft fixes critical bugs in Windows Hyper-V Read More »