Microsoft - Security Ticks

Attackers abuse OAuth apps to initiate large-scale cryptomining and spam campaigns

account hijacking, BEC scams, cryptojacking, Don't miss, Hot stuff, Microsoft, Microsoft 365, Microsoft Azure, Microsoft Entra ID, News, OAuth, phishing, spam / SecurityTicks

Attackers abuse OAuth apps to initiate large-scale cryptomining and spam campaigns 13/12/2023 at 16:46 By Helga Labus Attackers are compromising high-privilege Microsoft accounts and abusing OAuth applications to launch a variety of financially-motivated attacks. Abusing OAuth applications OAuth is an open standard authentication protocol that uses tokens to grant applications access to server resources without […]

React to this headline:

Attackers abuse OAuth apps to initiate large-scale cryptomining and spam campaigns Read More »

Microsoft Patch Tuesday: Critical Spoofing and Remote Code Execution Flaws

Microsoft, Patch Tuesday, phishing, remote code execution, Vulnerabilities, Windows MSHTML / SecurityTicks

Microsoft Patch Tuesday: Critical Spoofing and Remote Code Execution Flaws 12/12/2023 at 23:47 By Ryan Naraine Microsoft warns of critical spoofing and remote code execution bugs in the Windows MSHTML Platform and Microsoft Power Platform Connector. The post Microsoft Patch Tuesday: Critical Spoofing and Remote Code Execution Flaws appeared first on SecurityWeek. This article is

React to this headline:

Microsoft Patch Tuesday: Critical Spoofing and Remote Code Execution Flaws Read More »

December 2023 Patch Tuesday: 33 fixes to wind the year down

CVE, Don't miss, Hot stuff, Microsoft, News, Outlook, Patch Tuesday, security update, Tenable, Trend Micro / SecurityTicks

December 2023 Patch Tuesday: 33 fixes to wind the year down 12/12/2023 at 23:20 By Zeljka Zorz Microsoft’s December 2023 Patch Tuesday is a light one: 33 patches, only four of which are deemed critical. “This month, Microsoft did not patch any zero-day vulnerabilities, marking only the second time in 2023 that no zero-days were

React to this headline:

December 2023 Patch Tuesday: 33 fixes to wind the year down Read More »

“Pool Party” process injection techniques evade EDRs

CrowdStrike, Cybereason, Don't miss, Endpoint Security, Hot stuff, Microsoft, News, Palo Alto Networks, PoC, research, SafeBreach, SentinelOne, threat detection, XDR / SecurityTicks

“Pool Party” process injection techniques evade EDRs 12/12/2023 at 14:01 By Zeljka Zorz SafeBreach researchers have discovered eight new process injection techniques that can be used to covertly execute malicious code on Windows systems. Dubbed “Pool Party” because they (ab)use Windows thread pools, these process injection techniques work across all processes and, according to the

React to this headline:

“Pool Party” process injection techniques evade EDRs Read More »

Microsoft faces UK antitrust probe over OpenAI deal structure

ChatGPT, Microsoft, OpenAI, Technology / SecurityTicks

Microsoft faces UK antitrust probe over OpenAI deal structure 08/12/2023 at 17:02 By Cointelegraph by Amaka Nwaokocha The regulator’s examination will assess whether the collaboration constitutes an “acquisition of control,” implying substantial influence of one party over another. This article is an excerpt from Cointelegraph.com News View Original Source React to this headline:

React to this headline:

Microsoft faces UK antitrust probe over OpenAI deal structure Read More »

December 2023 Patch Tuesday forecast: ‘Tis the season for vigilance

apple, CISA, cybersecurity, Don't miss, Expert analysis, Expert corner, Google, Hot stuff, Microsoft, Mozilla, News, Patch Tuesday / SecurityTicks

December 2023 Patch Tuesday forecast: ‘Tis the season for vigilance 08/12/2023 at 09:02 By Mirko Zorz The final Patch Tuesday of the year is almost upon us! This is the time of year when we want to relax and enjoy the holidays, but we need to be extra vigilant to detect and respond to suspicious

React to this headline:

December 2023 Patch Tuesday forecast: ‘Tis the season for vigilance Read More »

CISA Issues Warning for Russian ‘Star Blizzard’ APT Spear-Phishing Operation

CISA, Cyberwarfare, email security, Microsoft, Nation-State, Russia, Star Blizzard, Threat Intelligence / SecurityTicks

CISA Issues Warning for Russian ‘Star Blizzard’ APT Spear-Phishing Operation 08/12/2023 at 00:48 By Ryan Naraine The US cybersecurity agency calls attention to a Russian APT targeting academia, defense, governmental organizations, NGOs and think-tanks. The post CISA Issues Warning for Russian ‘Star Blizzard’ APT Spear-Phishing Operation appeared first on SecurityWeek. This article is an excerpt

React to this headline:

CISA Issues Warning for Russian ‘Star Blizzard’ APT Spear-Phishing Operation Read More »

Microsoft Hires New CISO in Major Security Shakeup

CISO, CISO Strategy, cloud security, CSRB, Featured, Management & Strategy, Microsoft / SecurityTicks

Microsoft Hires New CISO in Major Security Shakeup 06/12/2023 at 20:31 By Ryan Naraine Microsoft announced a major shakeup of its security hierarchy, removing the CISO and Deputy CISO and handing the reins to a recent hire who previously served as CTO and President at Bridgewater. The post Microsoft Hires New CISO in Major Security

React to this headline:

Microsoft Hires New CISO in Major Security Shakeup Read More »

Lenovo and Microsoft join forces to simplify security deployments

Industry news, Lenovo, Microsoft / SecurityTicks

Lenovo and Microsoft join forces to simplify security deployments 06/12/2023 at 16:31 By Industry News Lenovo and Microsoft are working together to help organizations operate more securely across their devices, users, apps, data, networks, and cloud services through a subscription-based Cyber Resiliency as a Service (CRaaS) offering. The offering enables Lenovo to build next generation

React to this headline:

Lenovo and Microsoft join forces to simplify security deployments Read More »

Russian hackers use old Outlook vulnerability to target Polish orgs (CVE-2023-23397)

APT, cyber espionage, Don't miss, Email, EU, Hot stuff, Microsoft, Microsoft Exchange, News, Outlook, vulnerability / SecurityTicks

Russian hackers use old Outlook vulnerability to target Polish orgs (CVE-2023-23397) 05/12/2023 at 17:47 By Helga Labus Russian state-backed hacking group Forest Blizzard (aka Fancy Bear, aka APT28) has been using a known Microsoft Outlook vulnerability (CVE-2023-23397) to target public and private entities in Poland, Polish Cyber Command has warned. Compromising email accounts and maintaining

React to this headline:

Russian hackers use old Outlook vulnerability to target Polish orgs (CVE-2023-23397) Read More »

Meta’s AI boss says there’s an ‘AI war’ underway and Nvidia is ‘supplying the weapons’

Meta, Microsoft, NVIDIA, quantum computing / SecurityTicks

Meta’s AI boss says there’s an ‘AI war’ underway and Nvidia is ‘supplying the weapons’ 04/12/2023 at 21:02 By Cointelegraph by Tristan Greene The outspoken executive also said that Meta isn’t pursuing quantum computing because it isn’t currently useful. This article is an excerpt from Cointelegraph.com News View Original Source React to this headline:

React to this headline:

Meta’s AI boss says there’s an ‘AI war’ underway and Nvidia is ‘supplying the weapons’ Read More »

Sam Altman officially returns to OpenAI as Microsoft finally joins board

board, CEO, hire, Microsoft, OpenAI, Sam Altman / SecurityTicks

Sam Altman officially returns to OpenAI as Microsoft finally joins board 30/11/2023 at 07:03 By Cointelegraph By Brayden Lindrea Sam Altman addressed his employees in a company memo on Nov. 29, marking his official return to the top leadership position at OpenAI. This article is an excerpt from Cointelegraph.com News View Original Source React to

React to this headline:

Sam Altman officially returns to OpenAI as Microsoft finally joins board Read More »

Can Sony and Microsoft bring blockchain to gaming consoles?

Gaming, Microsoft, Sony / SecurityTicks

Can Sony and Microsoft bring blockchain to gaming consoles? 30/11/2023 at 03:02 By Cointelegraph By Olga Vorobyeva Sony and Microsoft are angling to get into crypto gaming. Will they be able to succeed where others in the industry have failed? This article is an excerpt from Cointelegraph.com News View Original Source React to this headline:

React to this headline:

Can Sony and Microsoft bring blockchain to gaming consoles? Read More »

Microsoft Offers Up to $20,000 for Vulnerabilities in Defender Products

bug bounty program, Microsoft, Vulnerabilities / SecurityTicks

Microsoft Offers Up to $20,000 for Vulnerabilities in Defender Products 22/11/2023 at 17:17 By Ionut Arghire Microsoft invites researchers to new bug bounty program focused on vulnerabilities in its Defender products. The post Microsoft Offers Up to $20,000 for Vulnerabilities in Defender Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Microsoft Offers Up to $20,000 for Vulnerabilities in Defender Products Read More »

OpenAI and Microsoft sued over alleged unauthorized use of authors’ work

ChatGPT, law, Microsoft, OpenAI, Technology / SecurityTicks

OpenAI and Microsoft sued over alleged unauthorized use of authors’ work 22/11/2023 at 15:03 By Cointelegraph By Amaka Nwaokocha Julian Sancton, an author and Hollywood reporter, accuses Microsoft of being aware of OpenAI’s indiscriminate internet crawling for copyrighted material. This article is an excerpt from Cointelegraph.com News View Original Source React to this headline:

React to this headline:

OpenAI and Microsoft sued over alleged unauthorized use of authors’ work Read More »

Microsoft announces Defender bug bounty program

bug bounty, Don't miss, Hot stuff, Microsoft, Microsoft Defender, News, Vulnerabilities / SecurityTicks

Microsoft announces Defender bug bounty program 22/11/2023 at 14:47 By Helga Labus Microsoft has announced a new bug bounty program aimed at unearthing vulnerabilities in Defender-related products and services, and is offering participants the possibility to earn up to $20,000 for the most critical bugs. The Microsoft Defender bug bounty program Microsoft Defender includes various

React to this headline:

Microsoft announces Defender bug bounty program Read More »

Microsoft, Salesforce, and Nvidia swoop in to hire OpenAI employees as walkout threats increase

Microsoft, NVIDIA, OpenAI / SecurityTicks

Microsoft, Salesforce, and Nvidia swoop in to hire OpenAI employees as walkout threats increase 21/11/2023 at 20:02 By Cointelegraph By Tristan Greene OpenAI’s future remains uncertain as employees threaten a walkout over the firing of former CEO and co-founder Sam Altman. This article is an excerpt from Cointelegraph.com News View Original Source React to this

React to this headline:

Microsoft, Salesforce, and Nvidia swoop in to hire OpenAI employees as walkout threats increase Read More »

OpenAI seeks to diffuse internal tensions after Altman departure: Report

Microsoft, OpenAI / SecurityTicks

OpenAI seeks to diffuse internal tensions after Altman departure: Report 21/11/2023 at 17:03 By Cointelegraph By Savannah Fortis Executives at OpenAI have been trying to settle disputes with employees and are in “intense discussions” over how to move forward after the abrupt departure of former CEO Sam Altman. This article is an excerpt from Cointelegraph.com

React to this headline:

OpenAI seeks to diffuse internal tensions after Altman departure: Report Read More »

Microsoft Paid Out $63 Million Since Launch of First Bug Bounty Program 10 Years Ago

bug bounty program, Microsoft, Vulnerabilities / SecurityTicks

Microsoft Paid Out $63 Million Since Launch of First Bug Bounty Program 10 Years Ago 21/11/2023 at 15:16 By Ionut Arghire Over the past ten years, Microsoft has handed out $63 million in rewards as part of its bug bounty programs. The post Microsoft Paid Out $63 Million Since Launch of First Bug Bounty Program

React to this headline:

Microsoft Paid Out $63 Million Since Launch of First Bug Bounty Program 10 Years Ago Read More »

Microsoft and Nvidia stocks reach all-time highs amid OpenAI CEO shuffle

IBM, Microsoft, NVIDIA, OpenAI, stocks, Tencent / SecurityTicks

Microsoft and Nvidia stocks reach all-time highs amid OpenAI CEO shuffle 20/11/2023 at 23:02 By Cointelegraph By Tristan Greene Former OpenAI CEO Sam Altman has reportedly agreed to a position with Microsoft while Nvidia reaps the benefits of big tech’s scramble to build a better chatbot. This article is an excerpt from Cointelegraph.com News View

React to this headline:

Microsoft and Nvidia stocks reach all-time highs amid OpenAI CEO shuffle Read More »