The JadePuffer ransomware operator is targeting Azure tenants with agent-driven attacks that conduct reconnaissance, steal credentials, and destroy core components.

bleepingcomputer.com28 sept.

Microsoft

U.S. CISA adds Microsoft SharePoint and Mikrotik RouterOS flaws to its Known Exploited Vulnerabil...

Microsoft confirmed active exploitation of SharePoint flaw CVE-2026-65660, prompting CISA to add the RCE bug to its KEV list.

securityweek.com26 sept.

Microsoft

Introducing the new Copilot with Home, Code and Autopilot

Microsoft’s unified Copilot could help enterprises standardize how employees interact with AI across productivity, business applications, data and development tools, while giving CIOs greater visibility into AI application sprawl and consumption costs, analysts say.

cio.com25 sept.

Cybersécurité

Crypto CEO accuses North Korea of stealing $387 million from Bitget platform

Cryptocurrency exchange Bitget has resumed Bitcoin withdrawals suspended after suspected North Korean hackers breached its systems last week and stole over $350 million.

bleepingcomputer.com25 sept.

Microsoft

Microsoft thinks its new Copilot ‘super app’ will be as influential as Office

Sans doute lassée des colibets, Microsoft a choisi de rassembler toutes ses applications Copilot en une seule, à l’exception de GitHub Copilot. L’éditeur…

next.ink25 sept.

Microsoft

File Notification Attacks: Side-Channel Leakage from the File-Notification System on Linux, Andro...

File-change notification systems in Linux, Android, Windows, and macOS can leak keystroke timing, browsing activity, and WhatsApp events.

securityweek.com25 sept.

Microsoft

The Closed Quorum: Inside the first reported autonomous AI C2 implant

Cisco Talos finds CLOSEDQUORUM, malware that lets four commercial AI models vote on its next move, with no human operator required.

securityaffairs.com22 sept.

Microsoft

EvilTokens PhaaS disrupted after compromising 12,000 Microsoft accounts

Microsoft and its partners have disrupted EvilTokens, a phishing platform that uses AI throughout the attack chain.

securityweek.com22 sept.

Microsoft

New Windows Defender zero-day blocks Microsoft antivirus updates

Abdelhamid Naceri is the real identity of the researcher and Microsoft exploit leaker known online as Nightmare Eclipse and Chaotic Eclipse.

securityweek.com22 sept.

Développement

Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer

Attackers spoofed LastPass on GitHub, used a Microsoft-signed driver to disable 145 security products, then deployed an infostealer.

securityaffairs.com21 sept.

Microsoft

TASK#STOMP PowerShell Backdoor Steals Documents, Wi-Fi Passwords, and Clipboard Data

TASK#STOMP deploys a PowerShell backdoor that steals documents and Wi-Fi passwords, monitors files, and executes remote commands.

feeds.feedburner.com21 sept.

Microsoft

Microsoft exec called AI scraping the “largest theft of labor in human history”

OpenAI and Microsoft knew they were driving us toward Google Zero, and they did it anyway.

theverge.com18 sept.

Cybersécurité

Using Cyber Decoys to Strengthen Detection and Response

Intruders will eventually get a foothold, so the smart move is to place cyber decoys in the environment, CISA says in latest guidance doc.

helpnetsecurity.com17 sept.

Microsoft

Microsoft Commits to Sweeping AI Privacy Rules for Students. Will Other Tech Giants Follow?

Microsoft has been in the business of education for five decades. Since the earliest days of this company, we have worked alongside educators, students, families and educational leaders through each new wave of technology — and we have learned what helps learning and what gets in the way. That commitment continues today, in a technological...

blogs.microsoft.com17 sept.

Microsoft

Azure Red Hat OpenShift with hosted control planes is now available in public preview

Subscribe to Microsoft Azure today for service updates, all in one place. Check out the new Cloud Platform roadmap to see our latest product plans.

microsoft.com16 sept.

Cybersécurité

Iranian cyber targeting of dissidents, activists and journalists

Government agencies are warning that Iranian state-linked hackers are using a Windows malware strain named CHOSEN BRICK to target dissidents, activists, and journalists worldwide.

bleepingcomputer.com16 sept.

Cyber Arnaque

BambooToken Malware Uses MQTT to Control Windows and Linux Systems

Lumen exposes BambooToken, a stealthy 2023-era malware family using MQTT and sideloading to quietly infect targets across Asia and beyond.

securityaffairs.com15 sept.

Cybersécurité

Hackers target exposed Vite dev servers to steal AWS, Azure secrets

Attackers exploit a Vite flaw in exposed dev servers to extract cloud credentials, configuration files, and infrastructure state.

feeds.feedburner.com15 sept.

Cybersécurité

China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE

Two China-linked groups ran identical Chrome/Windows zero-day exploits against NGOs, deploying different backdoors each.

securityaffairs.com15 sept.

← PrécédentPage 2 / 7Suivant →